This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa File: AS209526.roa (raw, json) Hash identifier: alWgJUL+qy6v+oiZa3A5Dl8qLq7UVhVj+FnBJmGie60= Subject key identifier: 00:7D:37:26:CA:A9:B7:7A:AF:EC:C7:88:9F:1C:AF:16:E4:CF:F9:22 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 35B3B884F61219F80D0CEEA14477775418E10125 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa Signing time: Wed 12 Nov 2025 08:53:51 +0000 ROA not before: Wed 12 Nov 2025 08:48:51 +0000 ROA not after: Wed 11 Nov 2026 08:53:51 +0000 asID: 209526 IP address blocks: 82.22.124.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 02 Dec 2025 14:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b3:b8:84:f6:12:19:f8:0d:0c:ee:a1:44:77:77:54:18:e1:01:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 12 08:48:51 2025 GMT Not After : Nov 11 08:53:51 2026 GMT Subject: CN=007D3726CAA9B77AAFECC7889F1CAF16E4CFF922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b5:f5:d9:63:a6:2c:25:00:d1:9c:44:0c:72: 10:97:f9:2a:3c:84:2b:fe:90:c9:e3:87:44:74:62: fa:ee:49:84:1f:19:a4:2d:a5:99:c2:f0:83:a0:b4: 45:4c:43:64:d6:3d:95:44:bb:62:26:92:c5:dd:28: 9d:dd:d8:58:42:8c:ee:0c:aa:95:e0:9c:63:8e:b7: dc:a6:75:ea:e5:a2:07:03:17:a6:62:05:13:ec:9f: da:b6:b2:12:26:73:ec:05:90:be:ad:65:29:36:40: 5d:4a:a3:e0:51:0b:9d:55:d3:c2:87:db:f3:37:73: 8f:46:67:58:4e:49:29:d5:dc:7a:9b:60:91:d1:49: f3:82:7c:25:73:bd:ff:31:95:81:ec:64:22:0a:ec: 43:49:a1:ea:a1:4a:e7:a0:fe:04:90:18:6b:52:e8: 80:60:bc:0b:22:77:0b:f5:0f:cb:96:87:2c:84:d6: d9:5e:89:43:e9:7b:9d:0f:b7:89:1a:3b:d7:bc:04: f9:ff:83:ff:73:74:64:7c:d9:d7:28:b3:b3:c0:1d: a5:84:c5:7b:0c:23:cc:3e:c3:99:de:83:51:28:47: 4f:27:bb:1c:e1:ff:35:94:bf:34:a9:97:70:cd:7f: 70:11:5f:cf:2c:2f:7b:40:98:3e:19:26:30:57:0c: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:37:26:CA:A9:B7:7A:AF:EC:C7:88:9F:1C:AF:16:E4:CF:F9:22 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.124.0/24 Signature Algorithm: sha256WithRSAEncryption a2:90:c1:f3:6c:c2:f9:46:c6:e8:f0:89:2c:28:07:79:e0:67: ec:84:cd:89:66:20:52:60:66:03:d1:e9:2f:d3:e0:74:d7:c8: d5:4f:c9:36:88:bb:8a:7c:5e:1f:10:8d:ff:4c:c1:31:9b:3f: 7c:f8:a2:a1:a9:13:ad:0a:d3:3b:4b:4c:86:79:ba:f0:21:c9: 70:e3:9a:99:ff:ae:1f:63:fd:48:98:40:76:89:8d:d1:e1:2a: c2:e5:13:b8:22:3a:ec:69:ad:f6:63:7b:0b:d8:3b:87:c7:f4: 3a:3b:26:2c:fe:ce:ce:ae:28:8f:d8:38:dd:da:b8:a5:1a:ba: 6d:2a:d7:db:ba:56:27:94:0b:3b:e7:ac:3c:11:c6:d3:8e:75: c9:4a:cd:81:8f:3e:6d:8d:08:9a:ea:9c:ef:2d:02:89:47:59: 16:12:82:69:c4:66:d7:85:ba:8e:24:d7:2a:db:4d:79:a4:06: da:6b:d6:a8:cc:8f:d3:ca:fc:05:0e:c8:b1:a6:81:e0:91:89: 31:0d:c0:d0:2a:3e:b5:a5:49:68:f2:8b:54:08:09:9c:0a:91: 8e:bd:a3:07:8c:fd:b7:6c:36:c7:8c:3b:4b:d4:fb:b3:71:c6: f1:da:6c:23:5c:7f:7d:4c:a0:90:25:4a:69:6d:4d:4e:b8:53: 56:46:22:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUNbO4hPYSGfgNDO6hRHd3VBjhASUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTIwODQ4NTFaFw0yNjExMTEwODUzNTFaMDMxMTAvBgNV BAMTKDAwN0QzNzI2Q0FBOUI3N0FBRkVDQzc4ODlGMUNBRjE2RTRDRkY5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCatfXZY6YsJQDRnEQMchCX+So8 hCv+kMnjh0R0YvruSYQfGaQtpZnC8IOgtEVMQ2TWPZVEu2ImksXdKJ3d2FhCjO4M qpXgnGOOt9ymderlogcDF6ZiBRPsn9q2shImc+wFkL6tZSk2QF1Ko+BRC51V08KH 2/M3c49GZ1hOSSnV3HqbYJHRSfOCfCVzvf8xlYHsZCIK7ENJoeqhSueg/gSQGGtS 6IBgvAsidwv1D8uWhyyE1tleiUPpe50Pt4kaO9e8BPn/g/9zdGR82dcos7PAHaWE xXsMI8w+w5neg1EoR08nuxzh/zWUvzSpl3DNf3ARX88sL3tAmD4ZJjBXDFNlAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUAH03Jsqpt3qv7MeInxyvFuTP+SIwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA5NTI2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhZ8 MA0GCSqGSIb3DQEBCwUAA4IBAQCikMHzbML5Rsbo8IksKAd54GfshM2JZiBSYGYD 0ekv0+B018jVT8k2iLuKfF4fEI3/TMExmz98+KKhqROtCtM7S0yGebrwIclw45qZ /64fY/1ImEB2iY3R4SrC5RO4Ijrsaa32Y3sL2DuHx/Q6OyYs/s7OriiP2Djd2ril GrptKtfbulYnlAs756w8EcbTjnXJSs2Bjz5tjQia6pzvLQKJR1kWEoJpxGbXhbqO JNcq2015pAbaa9aozI/TyvwFDsixpoHgkYkxDcDQKj61pUlo8otUCAmcCpGOvaMH jP23bDbHjDtL1Puzccbx2mwjXH99TKCQJUppbU1OuFNWRiJP -----END CERTIFICATE-----Generated at Thu Dec 18 13:34:32 2025 by rpki-client