This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/0v1qOPLAlmNQXDiAQED6BtYNPb4.roa File: 0v1qOPLAlmNQXDiAQED6BtYNPb4.roa (raw, json) Hash identifier: aSOKG0q5EiBXTMjrIul8WRbNa58tnST9OB+0XZ5wFQw= Subject key identifier: D2:FD:6A:38:F2:C0:96:63:50:5C:38:80:40:40:FA:06:D6:0D:3D:BE Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019951EBDB2CB6B0FBBD029014EC7F164977 Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/0v1qOPLAlmNQXDiAQED6BtYNPb4.roa Signing time: Tue 16 Sep 2025 09:47:15 +0000 ROA not before: Tue 16 Sep 2025 09:47:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207184 IP address blocks: 150.40.114.0/24 maxlen: 24 150.40.115.0/24 maxlen: 24 150.40.116.0/24 maxlen: 24 150.40.118.0/24 maxlen: 24 150.40.119.0/24 maxlen: 24 150.40.121.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 19 Sep 2025 20:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:51:eb:db:2c:b6:b0:fb:bd:02:90:14:ec:7f:16:49:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Sep 16 09:47:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2fd6a38f2c09663505c38804040fa06d60d3dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bc:6e:fa:6b:92:e3:02:dd:f7:b2:d8:90:57: 2c:7d:33:cc:af:ce:d3:1e:4d:fe:14:32:e3:45:ab: 5d:e5:79:b9:0d:e7:31:5b:11:aa:3c:59:dc:91:06: 6a:db:58:29:83:d1:ff:b3:86:d2:e6:85:62:b3:d4: fe:99:86:7a:53:8d:99:f8:d3:d9:df:2c:a7:2e:c4: 1f:e3:44:f9:46:fc:6f:2d:60:9d:d1:c5:34:3b:01: 77:6d:bc:c1:29:75:9d:d5:88:6a:0b:40:5c:4e:1f: d9:2a:83:6b:0c:0d:60:e7:35:d0:b1:9b:7c:ba:4f: ff:52:c4:37:00:71:e5:bc:e2:43:40:47:3f:f3:09: 03:0d:e5:68:fc:d0:da:43:28:b0:e3:06:15:bc:8e: 31:30:3a:34:b8:80:c7:50:ca:6d:a4:b0:6a:b4:75: 4b:cd:39:8e:52:a2:c0:80:01:01:47:75:aa:f4:0b: 50:45:9f:19:ed:0e:f7:00:7d:0a:07:f5:93:ac:5c: 6d:2d:f8:b1:99:24:dc:19:83:c7:98:b0:74:3b:09: b6:ef:54:5d:5a:4c:4a:67:f7:7b:7d:3e:37:db:c4: bb:da:2b:fe:da:b5:ab:0e:4f:36:46:72:5d:42:ab: 27:dc:24:5f:e0:98:22:d4:d9:4d:cb:48:91:d8:f9: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FD:6A:38:F2:C0:96:63:50:5C:38:80:40:40:FA:06:D6:0D:3D:BE X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/0v1qOPLAlmNQXDiAQED6BtYNPb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.40.114.0-150.40.116.255 150.40.118.0/23 150.40.121.0/24 Signature Algorithm: sha256WithRSAEncryption 21:c2:0a:22:a5:93:5f:c1:ee:ac:b2:83:8f:ca:ae:55:00:22: ae:6c:3c:18:ca:d4:d0:01:a4:67:ac:40:66:e7:35:0b:f8:fb: df:5e:61:04:25:f2:4d:dc:20:11:93:f4:29:ff:73:0d:c1:7a: 16:77:d0:f8:2a:95:53:cc:90:7d:af:53:ca:69:a7:ca:85:40: d8:3a:31:2d:1c:ef:47:5d:9b:2c:50:60:4d:1a:d6:92:81:8b: 3c:39:5a:d9:9f:f7:98:5a:b9:51:f1:c6:ea:a1:1a:46:03:ae: 22:1f:9a:40:8e:73:ec:6e:51:fa:91:02:d3:52:42:73:12:f7: c1:3e:ff:d9:29:b8:cb:e2:cb:31:ad:79:f2:4a:1e:59:7a:c9: 15:72:f8:81:8a:5e:a2:d2:3d:74:91:e5:91:25:e0:93:db:1d: ed:48:a5:33:c2:46:6e:a7:63:f0:3e:af:38:76:28:2b:da:35: 5f:96:5e:f6:2b:32:20:e0:19:87:57:3b:58:83:e9:4d:a6:eb: 7f:4c:8f:28:ea:d2:90:37:a5:f9:94:50:07:91:d1:82:6b:30: d9:6e:ae:63:5b:b6:fe:a4:f3:1a:45:46:57:71:b5:0a:ad:e5: a2:f9:56:4a:e0:c0:c0:ed:ce:0f:c1:83:d8:b6:f8:17:0a:81: bd:65:b5:6e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZlR69sstrD7vQKQFOx/Fkl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjUwOTE2MDk0NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmZkNmEzOGYyYzA5NjYzNTA1YzM4ODA0MDQwZmEwNmQ2MGQzZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bxu+muS4wLd97LYkFcsfTPMr87T Hk3+FDLjRatd5Xm5DecxWxGqPFnckQZq21gpg9H/s4bS5oVis9T+mYZ6U42Z+NPZ 3yynLsQf40T5RvxvLWCd0cU0OwF3bbzBKXWd1YhqC0BcTh/ZKoNrDA1g5zXQsZt8 uk//UsQ3AHHlvOJDQEc/8wkDDeVo/NDaQyiw4wYVvI4xMDo0uIDHUMptpLBqtHVL zTmOUqLAgAEBR3Wq9AtQRZ8Z7Q73AH0KB/WTrFxtLfixmSTcGYPHmLB0Owm271Rd WkxKZ/d7fT4328S72iv+2rWrDk82RnJdQqsn3CRf4Jgi1NlNy0iR2PmbJwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNL9ajjywJZjUFw4gEBA+gbWDT2+MB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvMHYxcU9QTEFsbU5RWERpQVFFRDZCdFlOUGI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAGWKHID BACWKHQDBAGWKHYDBACWKHkwDQYJKoZIhvcNAQELBQADggEBACHCCiKlk1/B7qyy g4/KrlUAIq5sPBjK1NABpGesQGbnNQv4+99eYQQl8k3cIBGT9Cn/cw3BehZ30Pgq lVPMkH2vU8ppp8qFQNg6MS0c70ddmyxQYE0a1pKBizw5Wtmf95hauVHxxuqhGkYD riIfmkCOc+xuUfqRAtNSQnMS98E+/9kpuMviyzGtefJKHll6yRVy+IGKXqLSPXSR 5ZEl4JPbHe1IpTPCRm6nY/A+rzh2KCvaNV+WXvYrMiDgGYdXO1iD6U2m639Mjyjq 0pA3pfmUUAeR0YJrMNlurmNbtv6k8xpFRldxtQqt5aL5VkrgwMDtzg/Bg9i2+BcK gb1ltW4= -----END CERTIFICATE-----Generated at Tue Dec 16 13:56:52 2025 by rpki-client