This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/uj44-OFmuPmK5grhuQovhC50Lfw.roa File: uj44-OFmuPmK5grhuQovhC50Lfw.roa (raw, json) Hash identifier: MqQzAWGfmS5P19RODm79zH5ZaL+wbndsv9+AP/7bXiA= Subject key identifier: BA:3E:38:F8:E1:66:B8:F9:8A:E6:0A:E1:B9:0A:2F:84:2E:74:2D:FC Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B1C9733727EE326CDBCDF87458C43C570 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/uj44-OFmuPmK5grhuQovhC50Lfw.roa Signing time: Sun 14 Dec 2025 11:20:29 +0000 ROA not before: Sun 14 Dec 2025 11:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 85.239.145.0/24 maxlen: 24 85.239.154.0/24 maxlen: 24 92.62.241.0/24 maxlen: 24 92.62.248.0/24 maxlen: 24 178.239.118.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 15 Dec 2025 06:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:97:33:72:7e:e3:26:cd:bc:df:87:45:8c:43:c5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 14 11:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba3e38f8e166b8f98ae60ae1b90a2f842e742dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:10:3f:27:62:c1:a6:da:28:33:a6:1f:62: 6d:73:32:bf:d8:42:02:fb:fa:ab:5d:aa:0f:f6:99: 06:97:f2:2a:46:ca:8e:4a:e3:05:32:81:cf:54:ff: ba:b0:e9:34:3f:90:c3:68:a9:77:35:2d:1d:c5:9b: 77:73:ed:40:e2:96:e7:66:37:95:f9:df:5e:4e:92: 1f:e3:18:d4:08:50:b7:65:e9:01:57:de:04:0c:5a: ca:0e:7d:e7:1f:f0:80:b6:a0:51:7c:28:39:f7:4d: 6f:44:8f:36:72:8b:a6:e8:a5:0b:64:3c:f1:1a:a1: c0:82:ba:72:05:16:98:11:85:26:7a:9b:60:ee:45: ff:ed:d2:9d:10:38:c6:12:3d:b7:ca:bc:ac:e1:0f: 31:08:7c:56:fc:04:65:6c:db:fd:e7:c3:23:15:46: 70:bf:7d:ae:70:3d:e7:e3:fd:75:67:ce:16:d5:4c: 9e:66:88:fc:7e:91:40:87:49:07:77:ed:e7:c9:93: 7c:f8:86:b7:6d:21:5d:0f:25:b2:16:78:3d:05:1e: ca:ce:5c:1a:95:ff:9c:55:84:50:e7:1c:0d:0a:54: 99:40:47:9b:53:90:08:45:47:d7:1f:ee:4e:82:6e: 02:ab:5f:b8:a7:95:78:34:e1:91:59:2f:eb:bc:a9: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3E:38:F8:E1:66:B8:F9:8A:E6:0A:E1:B9:0A:2F:84:2E:74:2D:FC X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/uj44-OFmuPmK5grhuQovhC50Lfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.145.0/24 85.239.154.0/24 92.62.241.0/24 92.62.248.0/24 178.239.118.0/24 Signature Algorithm: sha256WithRSAEncryption 72:3f:dc:55:25:b9:64:19:35:8b:e8:af:fc:17:4d:52:15:be: 12:77:4e:0f:e2:c6:38:e5:9e:e8:62:09:3e:c1:45:27:32:88: f0:63:71:cb:f7:28:38:29:35:91:d6:5f:e5:8e:cf:48:f3:64: 8a:35:28:c1:94:6d:f2:27:e2:93:c9:d0:f4:03:f6:49:ad:50: 4d:48:69:31:e0:1d:7a:f0:ef:70:7c:c4:32:d8:6e:a1:5c:61: 56:db:56:44:f3:fc:ea:90:33:82:c2:f7:f1:7c:67:87:8b:fb: a7:e1:a8:af:40:53:cb:5e:b5:93:6e:86:2e:1c:e5:34:9b:9c: a6:7a:ea:68:f6:3c:e9:6b:ee:a4:ad:69:9a:98:85:78:38:a6: 06:df:d0:66:c0:a0:0f:1c:1f:6a:d2:a7:bb:2d:e4:8f:a4:eb: 44:98:11:59:ec:b6:92:ee:a5:4c:a0:8c:c6:64:70:45:d6:56: 83:28:5f:c2:4e:f2:e3:41:50:6e:87:dc:4c:4c:91:05:18:aa: bb:8a:a2:c3:6d:c9:90:e2:a7:6b:ec:43:c2:92:ad:0f:48:0a: 7b:d2:de:b4:95:71:c9:97:4f:fe:81:e3:51:d0:2d:6a:c0:c5: ce:78:6a:03:83:37:a2:bc:a4:21:dd:db:55:46:00:41:e5:8e: e6:9b:4a:2d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsclzNyfuMmzbzfh0WMQ8VwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjE0MTEyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTNlMzhmOGUxNjZiOGY5OGFlNjBhZTFiOTBhMmY4NDJlNzQyZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbIQPydiwabaKDOmH2JtczK/2EIC +/qrXaoP9pkGl/IqRsqOSuMFMoHPVP+6sOk0P5DDaKl3NS0dxZt3c+1A4pbnZjeV +d9eTpIf4xjUCFC3ZekBV94EDFrKDn3nH/CAtqBRfCg5901vRI82coum6KULZDzx GqHAgrpyBRaYEYUmeptg7kX/7dKdEDjGEj23yrys4Q8xCHxW/ARlbNv958MjFUZw v32ucD3n4/11Z84W1UyeZoj8fpFAh0kHd+3nyZN8+Ia3bSFdDyWyFng9BR7Kzlwa lf+cVYRQ5xwNClSZQEebU5AIRUfXH+5Ogm4Cq1+4p5V4NOGRWS/rvKlDbwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLo+OPjhZrj5iuYK4bkKL4QudC38MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvdWo0NC1PRm11UG1LNWdyaHVRb3ZoQzUwTGZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVe+RAwQA Ve+aAwQAXD7xAwQAXD74AwQAsu92MA0GCSqGSIb3DQEBCwUAA4IBAQByP9xVJblk GTWL6K/8F01SFb4Sd04P4sY45Z7oYgk+wUUnMojwY3HL9yg4KTWR1l/ljs9I82SK NSjBlG3yJ+KTydD0A/ZJrVBNSGkx4B168O9wfMQy2G6hXGFW21ZE8/zqkDOCwvfx fGeHi/un4aivQFPLXrWTboYuHOU0m5ymeupo9jzpa+6krWmamIV4OKYG39BmwKAP HB9q0qe7LeSPpOtEmBFZ7LaS7qVMoIzGZHBF1laDKF/CTvLjQVBuh9xMTJEFGKq7 iqLDbcmQ4qdr7EPCkq0PSAp70t60lXHJl0/+geNR0C1qwMXOeGoDgzeivKQh3dtV RgBB5Y7mm0ot -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:04 2025 by rpki-client