This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eI1zYlRQ2QcDZzUPQ4UOkkqP5Xs.roa File: eI1zYlRQ2QcDZzUPQ4UOkkqP5Xs.roa (raw, json) Hash identifier: zy/QyQg0BKX9kk7NWAf0Zhhg14PCnwQUIln+6khjJkg= Subject key identifier: 78:8D:73:62:54:50:D9:07:03:67:35:0F:43:85:0E:92:4A:8F:E5:7B Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BBEF13CC97F89BAA59D68D7AA1030BA1E Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eI1zYlRQ2QcDZzUPQ4UOkkqP5Xs.roa Signing time: Wed 14 Jan 2026 23:57:19 +0000 ROA not before: Wed 14 Jan 2026 23:57:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212890 IP address blocks: 2a14:67c3:11::/48 maxlen: 48 Validation: Failed, certificate revoked on Wed 21 Jan 2026 05:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:be:f1:3c:c9:7f:89:ba:a5:9d:68:d7:aa:10:30:ba:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 14 23:57:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788d73625450d9070367350f43850e924a8fe57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:7d:05:5b:dd:70:11:8a:e4:05:52:bf:29: ae:c6:73:5a:b6:ec:34:f7:ee:8c:6c:c6:46:7f:87: bc:22:14:b3:7d:62:04:91:c1:75:47:a2:65:c0:f0: 6b:0f:b5:08:05:37:6a:5f:2c:c1:21:90:24:ba:aa: 35:d9:4c:63:8e:5f:07:1b:68:5e:a6:2e:fb:18:4d: a5:94:fe:e9:fd:ba:a5:8b:92:0a:fe:b8:66:91:9d: 07:57:63:43:b0:43:9e:42:8d:6a:09:80:15:69:24: b3:cc:1a:67:fb:3d:68:e9:84:51:05:b8:56:94:37: 62:60:70:f7:89:4d:58:06:5e:1a:32:32:84:ed:53: 12:f1:f9:30:5b:a9:bc:e7:b6:7a:53:7b:b0:85:ec: b3:5b:85:8e:8b:a9:89:dc:32:6e:5f:9d:db:c1:6b: 14:e9:36:c4:9e:0e:6d:3c:78:f7:53:a8:c9:38:90: 44:93:f7:c9:e5:af:f8:82:55:7f:21:62:4a:fd:33: 81:5c:89:36:ed:cc:9b:1c:d4:23:cd:06:1b:37:1b: 89:9b:a2:6f:b8:8d:63:3a:75:6b:bf:7a:a0:8f:d2: e7:f9:9c:b7:9a:1f:69:7b:b0:f2:b5:f3:f6:67:41: 37:21:34:09:49:6d:9a:67:36:1c:f3:57:9f:05:05: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8D:73:62:54:50:D9:07:03:67:35:0F:43:85:0E:92:4A:8F:E5:7B X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eI1zYlRQ2QcDZzUPQ4UOkkqP5Xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:11::/48 Signature Algorithm: sha256WithRSAEncryption 7b:48:31:3f:0c:dc:ec:32:6a:d7:bf:cb:b1:f8:17:29:da:26: c7:31:b1:ac:a0:99:35:ea:50:14:2c:10:da:e5:36:30:64:7e: 12:dd:03:2b:c7:b1:05:91:3d:35:97:ab:e7:68:76:c4:71:ec: 65:2a:38:40:b3:ae:cd:56:18:d7:06:61:ab:d8:f2:81:19:f7: 71:bb:7d:46:67:8d:45:b2:57:74:86:34:89:4b:00:96:47:ae: 5f:82:ca:1e:93:af:ff:2d:16:8a:ef:15:39:d4:49:fd:56:e7: 0b:79:16:e9:99:a7:7f:62:e5:11:df:c1:b7:24:4b:df:c0:5e: 7f:03:89:da:0d:47:be:e0:47:5e:09:8e:df:d6:b9:e3:b6:57: 21:4d:61:87:2d:6f:d6:f7:bd:91:3a:fa:78:11:6b:f4:6f:ad: f7:07:4a:2f:28:f7:ac:72:39:1c:50:13:99:44:7d:06:97:a8: 45:f9:68:4a:86:bb:22:26:88:08:3a:b9:e2:25:b4:9b:52:5f: 74:c9:49:7c:db:77:00:c4:9b:a4:29:c9:57:e4:0b:4a:87:57: 56:78:49:e4:43:9e:95:51:07:a2:3b:06:f8:d2:5b:54:e2:c5: 29:9a:d3:9d:05:08:50:e0:3b:f5:61:ac:91:d4:40:75:0e:28: a8:09:92:34 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZu+8TzJf4m6pZ1o16oQMLoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTE0MjM1NzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhkNzM2MjU0NTBkOTA3MDM2NzM1MGY0Mzg1MGU5MjRhOGZlNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriF9BVvdcBGK5AVSvymuxnNatuw0 9+6MbMZGf4e8IhSzfWIEkcF1R6JlwPBrD7UIBTdqXyzBIZAkuqo12Uxjjl8HG2he pi77GE2llP7p/bqli5IK/rhmkZ0HV2NDsEOeQo1qCYAVaSSzzBpn+z1o6YRRBbhW lDdiYHD3iU1YBl4aMjKE7VMS8fkwW6m857Z6U3uwheyzW4WOi6mJ3DJuX53bwWsU 6TbEng5tPHj3U6jJOJBEk/fJ5a/4glV/IWJK/TOBXIk27cybHNQjzQYbNxuJm6Jv uI1jOnVrv3qgj9Ln+Zy3mh9pe7DytfP2Z0E3ITQJSW2aZzYc81efBQXbgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHiNc2JUUNkHA2c1D0OFDpJKj+V7MB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvZUkxellsUlEyUWNEWnpVUFE0VU9ra3FQNVhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRnwwAR MA0GCSqGSIb3DQEBCwUAA4IBAQB7SDE/DNzsMmrXv8ux+Bcp2ibHMbGsoJk16lAU LBDa5TYwZH4S3QMrx7EFkT01l6vnaHbEcexlKjhAs67NVhjXBmGr2PKBGfdxu31G Z41Fsld0hjSJSwCWR65fgsoek6//LRaK7xU51En9VucLeRbpmad/YuUR38G3JEvf wF5/A4naDUe+4EdeCY7f1rnjtlchTWGHLW/W972ROvp4EWv0b633B0ovKPescjkc UBOZRH0Gl6hF+WhKhrsiJogIOrniJbSbUl90yUl823cAxJukKclX5AtKh1dWeEnk Q56VUQeiOwb40ltU4sUpmtOdBQhQ4Dv1YayR1EB1DiioCZI0 -----END CERTIFICATE-----Generated at Wed Jan 21 07:35:34 2026 by rpki-client