This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20383334.roa File: 38352e3230382e34392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: VzMtpZaNZ1qMN6sNg0ZtRzm8IKc/fpY5PJZzqljPRPg= Subject key identifier: 96:40:F7:AA:63:8F:46:79:72:C9:0A:EA:DA:83:EC:AA:87:29:A9:25 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0C537521FC135865632032B80256252769E0CA4E Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20383334.roa Signing time: Sun 16 Nov 2025 06:28:07 +0000 ROA not before: Sun 16 Nov 2025 06:23:07 +0000 ROA not after: Sun 15 Nov 2026 06:28:07 +0000 asID: 834 IP address blocks: 85.208.49.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 19 Nov 2025 16:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:53:75:21:fc:13:58:65:63:20:32:b8:02:56:25:27:69:e0:ca:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 16 06:23:07 2025 GMT Not After : Nov 15 06:28:07 2026 GMT Subject: CN=9640F7AA638F467972C90AEADA83ECAA8729A925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:d0:fe:1b:95:b8:99:a9:59:04:5e:4f:37: 6a:d3:4d:18:d6:05:73:c2:9b:45:ab:c8:f8:fe:8e: 08:74:5d:22:6e:fe:97:d9:e1:45:84:7c:0a:84:1b: 51:9a:9e:18:08:ab:8c:89:53:aa:db:62:54:12:59: 72:e3:00:15:b1:6c:91:25:76:ed:d4:8d:e9:a6:4a: 42:5c:93:a3:7e:3e:ed:4c:51:9d:76:67:ef:e0:65: e5:06:89:96:26:b6:05:8a:42:6e:9e:8e:1d:44:3a: 63:0f:e2:be:fc:c4:11:59:a0:0b:50:8e:0f:0b:20: ae:6d:e4:56:7f:8d:7e:30:01:a4:d1:93:e2:cf:ab: 11:7d:65:38:69:1d:25:fe:ca:e9:10:02:73:72:19: 0c:ab:cb:db:4e:a3:49:43:e1:a2:88:ac:67:79:6e: 0a:0d:0f:18:2d:05:73:d2:09:e0:6b:42:e6:bb:61: 24:80:6e:60:44:dc:ac:48:a5:69:8e:2a:18:be:79: 94:bc:7b:d3:ac:72:29:0c:39:08:d0:46:34:f3:33: c2:bb:c4:2e:c8:86:4c:c6:25:47:05:58:5a:f4:fb: 9a:bf:ae:d9:6d:ce:98:1b:6b:9b:25:b5:47:b6:17: e3:bd:89:d8:53:82:df:e9:4a:b2:ba:da:fc:4c:89: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:40:F7:AA:63:8F:46:79:72:C9:0A:EA:DA:83:EC:AA:87:29:A9:25 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.49.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:e1:30:dd:7e:46:b2:90:d4:57:ae:6f:42:21:69:af:ea:0c: 95:21:43:97:7b:15:bd:1f:cd:c7:3d:bf:b1:53:0e:01:b6:67: 2d:8c:e2:69:9c:05:0e:e2:49:c1:58:33:33:d0:84:dc:5c:f3: 51:53:56:07:7b:79:6c:61:3e:b0:e9:52:37:e6:d4:70:49:0f: d8:43:9a:67:d2:11:41:1e:2f:b6:9b:c5:6b:3e:89:8d:6d:2f: 65:87:3e:c5:95:1c:85:11:db:34:80:47:60:25:d7:38:b4:c9: 40:02:4f:8b:56:50:f0:5b:4c:e8:0a:3c:8b:2f:1c:43:76:34: 1b:4c:58:2e:81:67:9d:6a:d5:8a:8b:18:b9:08:7a:b4:72:95: 1e:e9:6c:70:6f:97:1b:d6:25:c6:dc:d9:04:d7:d8:87:49:ee: 1b:00:6a:fd:e1:c6:69:57:8b:ff:72:fd:9c:46:7c:65:46:fb: 5b:6b:da:ff:49:f6:5f:f1:bb:83:c3:9f:ad:35:34:18:d9:53: b7:52:4b:b1:4d:13:73:8a:9d:33:82:1b:c6:dc:0a:bd:b0:de: 9d:d1:6d:77:79:6c:9a:b2:ee:7e:93:66:8a:53:4c:b4:77:e8: fa:73:a6:ce:35:ab:1b:b0:1d:6b:78:80:33:f3:d0:63:c2:ed: 9f:22:78:84 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUDFN1IfwTWGVjIDK4AlYlJ2ngyk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTYwNjIzMDdaFw0yNjExMTUwNjI4MDdaMDMxMTAvBgNV BAMTKDk2NDBGN0FBNjM4RjQ2Nzk3MkM5MEFFQURBODNFQ0FBODcyOUE5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xdD+G5W4malZBF5PN2rTTRjW BXPCm0WryPj+jgh0XSJu/pfZ4UWEfAqEG1GanhgIq4yJU6rbYlQSWXLjABWxbJEl du3UjemmSkJck6N+Pu1MUZ12Z+/gZeUGiZYmtgWKQm6ejh1EOmMP4r78xBFZoAtQ jg8LIK5t5FZ/jX4wAaTRk+LPqxF9ZThpHSX+yukQAnNyGQyry9tOo0lD4aKIrGd5 bgoNDxgtBXPSCeBrQua7YSSAbmBE3KxIpWmOKhi+eZS8e9OscikMOQjQRjTzM8K7 xC7IhkzGJUcFWFr0+5q/rtltzpgba5sltUe2F+O9idhTgt/pSrK62vxMiVCFAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUlkD3qmOPRnlyyQrq2oPsqocpqSUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMDM4MmUzNDM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdAxMA0G CSqGSIb3DQEBCwUAA4IBAQAf4TDdfkaykNRXrm9CIWmv6gyVIUOXexW9H83HPb+x Uw4BtmctjOJpnAUO4knBWDMz0ITcXPNRU1YHe3lsYT6w6VI35tRwSQ/YQ5pn0hFB Hi+2m8VrPomNbS9lhz7FlRyFEds0gEdgJdc4tMlAAk+LVlDwW0zoCjyLLxxDdjQb TFgugWedatWKixi5CHq0cpUe6Wxwb5cb1iXG3NkE19iHSe4bAGr94cZpV4v/cv2c RnxlRvtba9r/SfZf8buDw5+tNTQY2VO3UkuxTRNzip0zghvG3Aq9sN6d0W13eWya su5+k2aKU0y0d+j6c6bONasbsB1reIAz89Bjwu2fIniE -----END CERTIFICATE-----Generated at Thu Dec 18 16:18:43 2025 by rpki-client