This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pFhAZg3FqauU5nV6c6PKSiqrekU.roa File: pFhAZg3FqauU5nV6c6PKSiqrekU.roa (raw, json) Hash identifier: a5OrjXIAnOUf57CNdmH460Kyduw/pphpha3lIL+1aMw= Subject key identifier: A4:58:40:66:0D:C5:A9:AB:94:E6:75:7A:73:A3:CA:4A:2A:AB:7A:45 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7BE2A320701395481DAC426319200 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pFhAZg3FqauU5nV6c6PKSiqrekU.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 62.84.16.0/20 maxlen: 20 79.135.141.0/24 maxlen: 24 80.81.47.0/24 maxlen: 24 83.223.131.0/24 maxlen: 24 83.223.138.0/24 maxlen: 24 83.223.140.0/24 maxlen: 24 83.223.152.0/24 maxlen: 24 83.223.156.0/24 maxlen: 24 83.223.158.0/24 maxlen: 24 85.254.12.0/24 maxlen: 24 85.254.13.0/24 maxlen: 24 85.254.14.0/24 maxlen: 24 85.254.15.0/24 maxlen: 24 85.254.41.0/24 maxlen: 24 85.254.46.0/24 maxlen: 24 85.254.63.0/24 maxlen: 24 85.254.117.0/24 maxlen: 24 85.254.118.0/23 maxlen: 23 91.190.37.0/24 maxlen: 24 159.148.143.0/24 maxlen: 24 185.176.116.0/24 maxlen: 24 185.176.119.0/24 maxlen: 24 217.24.64.0/20 maxlen: 22 Validation: Failed, certificate revoked on Wed 07 Jan 2026 08:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:be:2a:32:07:01:39:54:81:da:c4:26:31:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a45840660dc5a9ab94e6757a73a3ca4a2aab7a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:ba:66:e9:19:9c:1c:c6:c2:f3:3a:b8:85: b4:ef:0e:29:9c:cf:ef:da:0b:ef:cb:95:46:af:6a: f6:69:e7:28:f9:ad:93:4f:5e:9f:d7:68:fc:d7:e1: 71:b4:73:67:4c:01:1c:f1:ce:43:b9:06:06:f0:4a: 04:c2:e2:be:72:71:97:66:71:a9:f6:02:44:5f:b4: 6b:0b:d7:8c:cc:0d:38:d1:b1:b3:c6:bd:55:e1:c1: bf:fa:54:71:65:5e:ce:83:1a:62:92:c4:96:07:4d: 58:6d:e8:4d:25:ad:1e:5b:16:1d:35:e7:a6:89:b8: 4c:93:32:df:79:6e:c1:4e:dc:a8:b5:7a:00:8b:89: ac:be:3f:9e:4c:d2:28:5b:54:37:e1:74:7e:cb:3f: 73:ef:a2:12:05:ae:32:c6:4a:d8:cc:e5:0a:f0:df: 13:4e:3e:c9:80:83:4a:ff:67:34:c4:63:33:d8:5b: 0a:9b:18:63:1e:5a:e5:bd:26:43:86:5c:aa:49:fc: b1:07:fb:5d:c9:0e:8a:52:88:58:d6:12:10:9b:a8: f9:ef:3b:cc:81:ee:93:5b:a7:56:26:3c:42:85:80: 6d:80:c2:3d:13:26:42:ab:15:33:5d:97:7c:19:d7: 35:ec:b1:7c:30:22:a8:ea:4f:72:5d:9b:27:8c:d7: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:58:40:66:0D:C5:A9:AB:94:E6:75:7A:73:A3:CA:4A:2A:AB:7A:45 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pFhAZg3FqauU5nV6c6PKSiqrekU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.84.16.0/20 79.135.141.0/24 80.81.47.0/24 83.223.131.0/24 83.223.138.0/24 83.223.140.0/24 83.223.152.0/24 83.223.156.0/24 83.223.158.0/24 85.254.12.0/22 85.254.41.0/24 85.254.46.0/24 85.254.63.0/24 85.254.117.0-85.254.119.255 91.190.37.0/24 159.148.143.0/24 185.176.116.0/24 185.176.119.0/24 217.24.64.0/20 Signature Algorithm: sha256WithRSAEncryption a1:a3:5f:0b:a0:8d:f3:0e:e0:09:7f:38:ab:88:57:7e:4d:e6: 70:33:dd:4e:54:c8:9e:22:24:52:3f:f9:fd:63:42:19:8e:ba: e5:96:84:61:05:a9:40:40:ff:e7:bf:cd:b3:06:e5:d2:c1:f4: e0:f1:42:26:e9:68:cf:5c:38:2a:36:2c:cb:70:86:16:cc:e6: bb:c0:8e:b4:0a:ec:e1:f2:5a:eb:21:c1:c8:31:6d:d4:68:91: fb:a0:5c:81:98:37:e7:98:47:6c:a0:ff:cf:28:b1:fc:a8:66: 2d:aa:c1:c8:d9:f1:c8:fa:b0:0f:e3:b5:79:12:cd:9a:7c:43: a5:65:10:bc:89:58:42:ef:bc:21:2f:79:9a:ea:f9:27:75:4c: e9:6e:32:57:4f:75:8b:7c:35:6a:30:70:18:07:49:08:96:e7: 94:7a:fb:6b:9e:f6:f5:da:0b:99:76:fa:f2:05:4a:dd:79:00: 2c:ad:5f:c4:a0:13:c7:6a:61:2b:ef:11:20:7b:c0:1d:3c:6b: 72:f1:41:de:3f:07:02:01:3a:45:a8:2e:50:93:b9:a6:f5:83: 44:4c:20:78:09:b2:05:cc:99:a9:d6:1a:f8:e2:71:b6:bd:ff: 10:c1:0f:57:cd:a0:81:88:6e:e4:5b:7c:76:45:bf:21:9a:08: a6:37:08:d0 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt6x74qMgcBOVSB2sQmMZIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDU4NDA2NjBkYzVhOWFiOTRlNjc1N2E3M2EzY2E0YTJhYWI3YTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5+6ZukZnBzGwvM6uIW07w4pnM/v 2gvvy5VGr2r2aeco+a2TT16f12j81+FxtHNnTAEc8c5DuQYG8EoEwuK+cnGXZnGp 9gJEX7RrC9eMzA040bGzxr1V4cG/+lRxZV7OgxpiksSWB01YbehNJa0eWxYdNeem ibhMkzLfeW7BTtyotXoAi4msvj+eTNIoW1Q34XR+yz9z76ISBa4yxkrYzOUK8N8T Tj7JgINK/2c0xGMz2FsKmxhjHlrlvSZDhlyqSfyxB/tdyQ6KUohY1hIQm6j57zvM ge6TW6dWJjxChYBtgMI9EyZCqxUzXZd8Gdc17LF8MCKo6k9yXZsnjNfsnQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFKRYQGYNxamrlOZ1enOjykoqq3pFMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvcEZoQVpnM0ZxYXVVNW5WNmM2UEtTaXFyZWtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEBD5U EAMEAE+HjQMEAFBRLwMEAFPfgwMEAFPfigMEAFPfjAMEAFPfmAMEAFPfnAMEAFPf ngMEAlX+DAMEAFX+KQMEAFX+LgMEAFX+PzAMAwQAVf51AwQDVf5wAwQAW74lAwQA n5SPAwQAubB0AwQAubB3AwQE2RhAMA0GCSqGSIb3DQEBCwUAA4IBAQCho18LoI3z DuAJfziriFd+TeZwM91OVMieIiRSP/n9Y0IZjrrlloRhBalAQP/nv82zBuXSwfTg 8UIm6WjPXDgqNizLcIYWzOa7wI60Cuzh8lrrIcHIMW3UaJH7oFyBmDfnmEdsoP/P KLH8qGYtqsHI2fHI+rAP47V5Es2afEOlZRC8iVhC77whL3ma6vkndUzpbjJXT3WL fDVqMHAYB0kIlueUevtrnvb12guZdvryBUrdeQAsrV/EoBPHamEr7xEge8AdPGty 8UHePwcCATpFqC5Qk7mm9YNETCB4CbIFzJmp1hr44nG2vf8QwQ9XzaCBiG7kW3x2 Rb8hmgimNwjQ -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:48 2026 by rpki-client