This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/K-N6tzp_wEqkN2uJW9E9IOCuXIc.roa File: K-N6tzp_wEqkN2uJW9E9IOCuXIc.roa (raw, json) Hash identifier: m/hSxHCSnGN4/DE5mCfJJlgKMrF4hHd5WCHO8zpn+is= Subject key identifier: 2B:E3:7A:B7:3A:7F:C0:4A:A4:37:6B:89:5B:D1:3D:20:E0:AE:5C:87 Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3 Certificate serial: 019A596B550924F9D8AE63FF9B12805BD083 Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/K-N6tzp_wEqkN2uJW9E9IOCuXIc.roa Signing time: Thu 06 Nov 2025 13:46:37 +0000 ROA not before: Thu 06 Nov 2025 13:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 217.173.144.0/23 maxlen: 23 217.173.146.0/23 maxlen: 24 217.173.148.0/22 maxlen: 22 217.173.157.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 18 Nov 2025 12:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:6b:55:09:24:f9:d8:ae:63:ff:9b:12:80:5b:d0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3 Validity Not Before: Nov 6 13:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2be37ab73a7fc04aa4376b895bd13d20e0ae5c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:84:b3:0e:71:2b:3b:91:af:9c:b5:69:81: a8:66:60:80:54:c4:06:d6:c3:1a:9d:89:f7:09:8c: 89:e1:8b:3d:97:01:da:fc:ce:46:ce:93:f2:61:cb: 3f:d1:f4:37:d5:9f:e3:5b:e2:7b:66:75:df:f2:8d: 09:0b:10:f6:73:c3:f6:62:ba:28:73:7a:b6:e4:27: bc:71:ef:9e:05:a4:8a:06:b1:13:a1:f9:0c:88:54: 81:7b:96:c8:9e:bd:7b:77:8f:1d:5c:5a:0a:eb:2e: 9a:e2:2d:dc:0d:d6:77:12:97:8e:2d:96:97:eb:a9: 6b:9c:ba:72:77:73:29:1c:86:c1:7a:f7:a7:cb:19: ab:0a:cd:a2:de:cb:21:80:2a:f7:06:27:8e:5f:cd: c9:19:31:4b:5e:a4:97:1a:ad:36:94:be:40:96:8a: 24:7c:df:38:18:fb:44:22:1c:91:07:3d:a2:0a:3e: cf:e0:79:a1:69:7d:ed:3b:9f:f0:2b:79:f0:6f:bc: a3:ea:be:97:eb:85:d2:8a:18:d8:4d:cf:db:ae:11: 1c:c1:a2:5f:88:74:72:ad:6e:2c:12:6c:1e:92:7d: a7:4c:a5:9e:c8:56:c9:02:ef:2b:4c:ce:bc:6f:f2: fa:0e:67:5f:78:67:3a:4d:55:86:64:38:96:2a:c0: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:7A:B7:3A:7F:C0:4A:A4:37:6B:89:5B:D1:3D:20:E0:AE:5C:87 X509v3 Authority Key Identifier: keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/K-N6tzp_wEqkN2uJW9E9IOCuXIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.173.144.0/21 217.173.157.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ba:c8:bf:06:f0:41:34:77:ac:34:6a:81:93:77:bc:ab:28: 8e:9c:45:18:ee:58:9d:bb:15:2f:2d:45:fa:e1:4d:3b:5f:de: b9:ff:38:69:7a:ae:99:27:4b:9f:14:b2:ec:4d:1c:c9:6e:45: df:47:27:e9:e0:3a:ad:a3:e1:fd:61:df:99:e2:98:26:f5:61: d9:43:b3:90:6d:75:a0:b1:7f:0c:bf:96:fb:8b:db:ac:30:26: 44:c5:9d:a6:e8:33:41:91:31:c6:6b:8b:a0:ec:f6:84:c0:9f: 90:6d:e6:87:83:b8:24:16:cc:65:d6:ee:60:bf:e7:6f:27:80: a3:3d:3a:70:84:e0:76:73:99:26:81:de:9e:ee:36:53:ed:ea: 2a:eb:8d:3d:b5:0f:ff:78:2d:29:e9:f4:08:e1:5c:3d:3c:16: 42:5f:c2:9b:44:7c:c6:9e:2b:80:7a:a1:d9:cf:d9:06:da:d6: 1a:ee:7d:33:40:d7:ba:28:de:91:9c:17:e3:f9:8a:b8:8b:19: 15:9f:2c:a3:93:24:c9:aa:54:3f:8a:9a:13:27:f7:da:7c:eb: 90:1f:d8:06:4c:a2:8d:4e:fa:c7:ef:41:33:00:ee:ed:ed:dd: cf:37:b8:08:8b:c2:81:a1:fa:fb:f7:b5:f2:d6:27:8d:d7:bd: 02:0b:36:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpZa1UJJPnYrmP/mxKAW9CDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDcwYWYwZDg5ZDc4NWJhMThiYTYxN2RjMDllM2Y3MmM1 OTk2ZjMwHhcNMjUxMTA2MTM0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmUzN2FiNzNhN2ZjMDRhYTQzNzZiODk1YmQxM2QyMGUwYWU1Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNiEsw5xKzuRr5y1aYGoZmCAVMQG 1sManYn3CYyJ4Ys9lwHa/M5GzpPyYcs/0fQ31Z/jW+J7ZnXf8o0JCxD2c8P2Yroo c3q25Ce8ce+eBaSKBrETofkMiFSBe5bInr17d48dXFoK6y6a4i3cDdZ3EpeOLZaX 66lrnLpyd3MpHIbBevenyxmrCs2i3sshgCr3BieOX83JGTFLXqSXGq02lL5Alook fN84GPtEIhyRBz2iCj7P4HmhaX3tO5/wK3nwb7yj6r6X64XSihjYTc/brhEcwaJf iHRyrW4sEmwekn2nTKWeyFbJAu8rTM68b/L6DmdfeGc6TVWGZDiWKsDOiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCvjerc6f8BKpDdriVvRPSDgrlyHMB8GA1UdIwQY MBaAFIRHCvDYnXhboYumF9wJ4/csWZbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDIt ZTc2ZTNlMjkzZTAyLzEvSy1ONnR6cF93RXFrTjJ1Slc5RTlJT0N1WEljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDItZTc2ZTNlMjkzZTAy LzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQD2a2QAwQA 2a2dMA0GCSqGSIb3DQEBCwUAA4IBAQASusi/BvBBNHesNGqBk3e8qyiOnEUY7lid uxUvLUX64U07X965/zhpeq6ZJ0ufFLLsTRzJbkXfRyfp4Dqto+H9Yd+Z4pgm9WHZ Q7OQbXWgsX8Mv5b7i9usMCZExZ2m6DNBkTHGa4ug7PaEwJ+QbeaHg7gkFsxl1u5g v+dvJ4CjPTpwhOB2c5kmgd6e7jZT7eoq6409tQ//eC0p6fQI4Vw9PBZCX8KbRHzG niuAeqHZz9kG2tYa7n0zQNe6KN6RnBfj+Yq4ixkVnyyjkyTJqlQ/ipoTJ/fafOuQ H9gGTKKNTvrH70EzAO7t7d3PN7gIi8KBofr797Xy1ieN170CCza6 -----END CERTIFICATE-----Generated at Sun Dec 7 12:38:49 2025 by rpki-client