This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yYgd-joXPSr6ZvGPZZDQjlahFvg.roa File: yYgd-joXPSr6ZvGPZZDQjlahFvg.roa (raw, json) Hash identifier: HFz8370v7BkwdktsvIHV0105LfWia+EgvaNPPyTs338= Subject key identifier: C9:88:1D:FA:3A:17:3D:2A:FA:66:F1:8F:65:90:D0:8E:56:A1:16:F8 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019A0D322C94C7C9941D95CD6D5CDA7AE187 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yYgd-joXPSr6ZvGPZZDQjlahFvg.roa Signing time: Wed 22 Oct 2025 18:33:03 +0000 ROA not before: Wed 22 Oct 2025 18:33:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 163.5.28.0/24 maxlen: 24 163.5.136.0/24 maxlen: 24 163.5.157.0/24 maxlen: 24 163.5.161.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 11 Nov 2025 21:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0d:32:2c:94:c7:c9:94:1d:95:cd:6d:5c:da:7a:e1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Oct 22 18:33:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c9881dfa3a173d2afa66f18f6590d08e56a116f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:dd:5e:af:3e:8b:ae:88:42:14:34:39:d3: 58:f0:78:d5:ae:3c:66:20:c4:08:1a:15:93:cc:c6: 0d:1f:6e:9e:d4:d5:4b:07:de:53:d2:bc:ed:aa:35: 90:95:84:a0:26:70:9d:28:ec:8f:61:aa:05:d4:ab: 65:a7:36:f5:58:b6:22:1f:6b:84:a3:9a:04:f1:98: d6:59:d5:c0:9d:98:4c:68:ee:c4:17:6c:d6:f6:3c: b9:a6:06:b8:08:f9:1b:8a:41:24:7f:42:b1:ec:1b: 79:d2:e4:03:4c:6f:49:81:d2:e4:2f:f1:d0:56:07: 9b:5a:80:64:1e:90:6b:04:b7:20:df:63:ab:68:48: aa:f4:5f:8d:b0:f0:7a:97:e5:a5:80:f6:c4:56:fa: 74:12:f4:df:02:7d:ca:e7:32:ff:44:89:70:4b:8b: 6f:4a:60:27:ed:c6:02:7f:5b:24:1c:db:80:8a:1d: b2:26:10:8e:f8:3f:96:ab:67:d6:b9:da:f9:a1:4a: 96:4b:c8:95:86:76:d0:30:ce:8d:3e:f3:93:0e:31: 46:2f:11:4b:a8:dd:f2:2d:e4:0f:71:c4:13:5d:aa: 16:a2:18:c8:db:a6:6f:74:7f:54:4e:1f:9a:f2:3e: 22:4e:7b:96:59:4c:46:49:63:c8:88:2e:eb:da:e3: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:88:1D:FA:3A:17:3D:2A:FA:66:F1:8F:65:90:D0:8E:56:A1:16:F8 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yYgd-joXPSr6ZvGPZZDQjlahFvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.28.0/24 163.5.136.0/24 163.5.157.0/24 163.5.161.0/24 Signature Algorithm: sha256WithRSAEncryption 27:9e:18:64:7d:ab:69:9e:ed:c0:ce:ff:fb:e9:0a:07:e1:8b: 27:70:b2:0b:c4:6c:2d:75:e4:6f:f3:d7:42:4a:b2:19:44:3b: 46:71:a3:1b:0d:a0:f9:98:c0:d9:96:18:26:e9:23:92:34:12: b1:26:d7:e5:c5:71:41:5b:05:2d:f9:1d:a8:39:a0:f5:21:80: 9b:a1:6f:77:19:05:e9:bc:93:47:6d:dd:1d:10:ae:65:b1:a5: 5d:30:a3:99:28:ee:10:73:cb:04:95:db:57:4d:5f:78:22:0b: 59:5f:9b:f5:c3:7e:c2:86:4c:da:8f:a0:94:28:69:40:f8:50: 51:5c:ca:84:c9:83:73:95:65:90:50:45:d5:ab:0f:2b:9e:24: aa:49:d5:d4:ab:32:7e:21:22:9f:4a:70:af:50:dc:e7:37:ba: 3e:1f:69:93:26:f1:ce:32:23:4e:21:a6:d7:96:bc:ec:07:f2: d3:77:13:42:e2:53:e1:d5:c6:2d:4e:02:3b:82:1d:5d:a1:8c: b5:06:1e:5c:43:cf:81:97:6e:8b:4d:a4:72:e3:06:64:8c:80: 3d:97:da:f7:bf:7d:10:33:18:ba:2f:df:e1:08:fe:03:b9:f2: 86:ab:8c:b5:29:46:1a:c5:d7:47:73:4c:f0:02:d3:df:c7:87: 26:ac:3a:d0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZoNMiyUx8mUHZXNbVzaeuGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMDIyMTgzMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg4MWRmYTNhMTczZDJhZmE2NmYxOGY2NTkwZDA4ZTU2YTExNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ndXq8+i66IQhQ0OdNY8HjVrjxm IMQIGhWTzMYNH26e1NVLB95T0rztqjWQlYSgJnCdKOyPYaoF1Ktlpzb1WLYiH2uE o5oE8ZjWWdXAnZhMaO7EF2zW9jy5pga4CPkbikEkf0Kx7Bt50uQDTG9JgdLkL/HQ VgebWoBkHpBrBLcg32OraEiq9F+NsPB6l+WlgPbEVvp0EvTfAn3K5zL/RIlwS4tv SmAn7cYCf1skHNuAih2yJhCO+D+Wq2fWudr5oUqWS8iVhnbQMM6NPvOTDjFGLxFL qN3yLeQPccQTXaoWohjI26ZvdH9UTh+a8j4iTnuWWUxGSWPIiC7r2uPwQQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMmIHfo6Fz0q+mbxj2WQ0I5WoRb4MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEveVlnZC1qb1hQU3I2WnZHUFpaRFFqbGFoRnZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUcAwQA owWIAwQAowWdAwQAowWhMA0GCSqGSIb3DQEBCwUAA4IBAQAnnhhkfatpnu3Azv/7 6QoH4YsncLILxGwtdeRv89dCSrIZRDtGcaMbDaD5mMDZlhgm6SOSNBKxJtflxXFB WwUt+R2oOaD1IYCboW93GQXpvJNHbd0dEK5lsaVdMKOZKO4Qc8sEldtXTV94IgtZ X5v1w37Chkzaj6CUKGlA+FBRXMqEyYNzlWWQUEXVqw8rniSqSdXUqzJ+ISKfSnCv UNznN7o+H2mTJvHOMiNOIabXlrzsB/LTdxNC4lPh1cYtTgI7gh1doYy1Bh5cQ8+B l26LTaRy4wZkjIA9l9r3v30QMxi6L9/hCP4DufKGq4y1KUYaxddHc0zwAtPfx4cm rDrQ -----END CERTIFICATE-----Generated at Sun Dec 7 09:25:01 2025 by rpki-client