This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa File: 3138352e3137322e3137342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: FucZmr5y/e6PPuAJYbAw4pVSPi38SEcTj2Nn+7SGM2k= Subject key identifier: 8F:FD:E3:3A:9A:EA:7C:8C:06:16:78:38:9C:8E:CB:8E:A5:F3:67:BF Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 2A67D45F494A29E5221EB1DDBFCE07A3D62B838E Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa Signing time: Fri 19 Sep 2025 00:03:43 +0000 ROA not before: Thu 18 Sep 2025 23:58:43 +0000 ROA not after: Fri 18 Sep 2026 00:03:43 +0000 asID: 834 IP address blocks: 185.172.174.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 19 Sep 2025 04:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:67:d4:5f:49:4a:29:e5:22:1e:b1:dd:bf:ce:07:a3:d6:2b:83:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Sep 18 23:58:43 2025 GMT Not After : Sep 18 00:03:43 2026 GMT Subject: CN=8FFDE33A9AEA7C8C061678389C8ECB8EA5F367BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:69:45:1d:7c:83:4c:7e:c2:93:ac:0b:ce:97: 95:0f:b9:13:1b:14:2c:ef:38:f8:1f:ac:66:5b:81: 77:da:9b:a7:6e:48:81:93:e6:7c:22:da:fa:c7:55: e8:9e:6a:14:3e:93:3e:69:85:d0:2c:ea:aa:f0:e8: 3f:31:fa:18:16:58:32:e9:97:2b:89:31:4c:ee:7f: 24:81:ad:1d:7a:ac:31:13:e9:0f:e1:a2:d6:c9:bc: 87:b3:e8:72:df:2a:59:31:f4:e4:bb:93:31:6a:c4: e4:bb:05:18:3f:3b:4b:72:83:c4:5b:9b:8e:80:29: 89:1f:3f:2d:da:fc:a0:7b:96:b5:af:62:db:c2:4a: 60:1d:7c:35:ce:d2:7a:31:f6:2d:f3:c2:22:b0:8b: d5:1d:1d:73:9c:3e:b0:b2:db:3b:0c:b1:2c:3a:c0: 4a:bc:22:bd:07:09:43:0d:9d:eb:56:93:d1:7e:d3: 45:a2:8b:b2:e9:8d:5a:e1:46:2e:51:27:70:5a:29: f7:8c:ec:39:90:b8:7a:09:7f:eb:2d:2e:51:7e:94: 40:97:6d:8d:9c:ed:f0:33:49:58:e6:6b:89:8a:bd: 9c:48:02:0d:bb:02:f1:22:39:86:8b:1c:3b:69:bd: 2b:cc:20:eb:f3:ae:bf:8c:0f:59:7f:f1:cd:57:13: 33:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FD:E3:3A:9A:EA:7C:8C:06:16:78:38:9C:8E:CB:8E:A5:F3:67:BF X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.174.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:78:37:d3:9e:b7:72:59:5e:92:73:dc:d9:f2:11:db:b8:1c: 37:5b:78:61:45:7b:75:d0:b1:bd:d4:26:a5:6e:bb:9f:78:67: 51:15:50:6d:4f:c0:be:f8:c2:eb:e4:a2:92:36:ee:5b:f9:cd: 91:e0:3e:f0:c4:fe:6e:d3:dd:cb:f7:8e:c6:b8:bf:3b:d1:5f: 3d:04:12:c7:e5:82:72:20:26:df:9b:02:96:8d:0a:d8:98:3d: d2:a0:99:a9:7b:9b:54:9c:7e:ad:d6:1b:4e:c5:ee:65:4e:25: ce:6c:f7:32:d7:87:f3:52:3f:18:b9:6a:f6:23:ad:d7:66:ab: 72:2b:49:3c:1b:05:e4:3f:1e:e8:0e:31:34:08:c7:ef:d4:be: 42:89:30:6a:cd:a0:a0:01:15:f6:9b:af:c5:fd:59:75:15:aa: 3f:10:52:40:80:22:cc:39:ba:0a:23:aa:72:71:4e:5c:c5:47: 5e:32:4c:c0:3f:6b:0c:28:ee:ef:23:d2:04:eb:17:df:39:44: c1:ec:25:13:82:56:f7:ed:37:ea:ec:e1:03:28:ef:4c:13:10: 8c:81:8a:ae:f7:73:83:d3:0b:78:6e:09:c9:f3:a3:b7:26:7d: cb:95:ed:eb:cd:f3:e2:8b:97:1c:54:8a:09:7a:24:62:17:6c: 56:0c:56:99 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKmfUX0lKKeUiHrHdv84Ho9Yrg44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTA5MTgyMzU4NDNaFw0yNjA5MTgwMDAzNDNaMDMxMTAvBgNV BAMTKDhGRkRFMzNBOUFFQTdDOEMwNjE2NzgzODlDOEVDQjhFQTVGMzY3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxaUUdfINMfsKTrAvOl5UPuRMb FCzvOPgfrGZbgXfam6duSIGT5nwi2vrHVeieahQ+kz5phdAs6qrw6D8x+hgWWDLp lyuJMUzufySBrR16rDET6Q/hotbJvIez6HLfKlkx9OS7kzFqxOS7BRg/O0tyg8Rb m46AKYkfPy3a/KB7lrWvYtvCSmAdfDXO0nox9i3zwiKwi9UdHXOcPrCy2zsMsSw6 wEq8Ir0HCUMNnetWk9F+00Wii7LpjVrhRi5RJ3BaKfeM7DmQuHoJf+stLlF+lECX bY2c7fAzSVjma4mKvZxIAg27AvEiOYaLHDtpvSvMIOvzrr+MD1l/8c1XEzOLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUj/3jOprqfIwGFng4nI7LjqXzZ78wHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzODM1MmUzMTM3MzIyZTMx MzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALms rjANBgkqhkiG9w0BAQsFAAOCAQEAnng30563clleknPc2fIR27gcN1t4YUV7ddCx vdQmpW67n3hnURVQbU/AvvjC6+SikjbuW/nNkeA+8MT+btPdy/eOxri/O9FfPQQS x+WCciAm35sClo0K2Jg90qCZqXubVJx+rdYbTsXuZU4lzmz3MteH81I/GLlq9iOt 12arcitJPBsF5D8e6A4xNAjH79S+Qokwas2goAEV9puvxf1ZdRWqPxBSQIAizDm6 CiOqcnFOXMVHXjJMwD9rDCju7yPSBOsX3zlEwewlE4JW9+036uzhAyjvTBMQjIGK rvdzg9MLeG4JyfOjtyZ9y5Xt683z4ouXHFSKCXokYhdsVgxWmQ== -----END CERTIFICATE-----Generated at Thu Dec 18 20:31:25 2025 by rpki-client