This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/bgENoG0rgwGxiOg4U1qfRZeoKhU.roa File: bgENoG0rgwGxiOg4U1qfRZeoKhU.roa (raw, json) Hash identifier: FOoRNX1PkxOrvlk0bdTKXRtAzI2+xmFTPTnx+2A1sHc= Subject key identifier: 6E:01:0D:A0:6D:2B:83:01:B1:88:E8:38:53:5A:9F:45:97:A8:2A:15 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019A58762473C8BD45DD81053ADFE053DCDC Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/bgENoG0rgwGxiOg4U1qfRZeoKhU.roa Signing time: Thu 06 Nov 2025 09:18:48 +0000 ROA not before: Thu 06 Nov 2025 09:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 91.109.40.0/24 maxlen: 24 91.109.41.0/24 maxlen: 24 91.109.42.0/24 maxlen: 24 91.109.46.0/24 maxlen: 24 207.244.198.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sun 23 Nov 2025 13:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:76:24:73:c8:bd:45:dd:81:05:3a:df:e0:53:dc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Nov 6 09:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6e010da06d2b8301b188e838535a9f4597a82a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:1b:5e:5e:48:66:6a:3f:c8:5d:05:91:05: 85:b5:66:d5:cb:ea:33:de:49:78:30:e8:1d:fc:6f: 52:d3:63:c4:61:d8:ad:97:c9:5c:f2:7e:02:27:33: f8:6f:88:8e:14:a6:7b:98:05:9e:84:b9:09:bb:48: 35:45:24:9a:75:bf:1d:2d:2f:08:49:c4:dd:5c:2a: 88:f9:53:aa:54:32:ff:62:8d:af:33:77:9c:06:c5: d2:ad:41:9e:71:24:29:8e:19:ce:74:7e:22:8e:40: 93:d1:a6:7b:31:e7:6e:84:40:2e:da:22:bb:31:99: 0a:ae:fd:79:aa:25:f6:6a:d9:73:3f:2f:dc:2a:e9: 43:f2:9b:44:d2:9c:5c:ef:9f:da:50:df:56:86:5d: a2:53:88:5e:64:27:14:7a:fc:e1:55:9b:a5:e2:1f: eb:46:78:4b:56:04:d7:c6:d7:ae:28:12:3c:30:eb: 08:ee:65:3b:72:93:2e:b5:0b:25:ce:b9:a9:d8:c0: d3:61:2f:0f:e4:56:8a:d5:ff:2f:02:3c:c7:0e:23: 08:31:1e:59:8a:3c:b8:26:86:c0:19:77:6e:0e:5e: da:2f:1f:78:df:85:ae:42:46:79:8b:79:93:6d:47: 59:8b:18:de:d2:b4:60:4a:fa:13:40:f0:ea:52:71: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:01:0D:A0:6D:2B:83:01:B1:88:E8:38:53:5A:9F:45:97:A8:2A:15 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/bgENoG0rgwGxiOg4U1qfRZeoKhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.40.0-91.109.42.255 91.109.46.0/24 207.244.198.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d0:b7:54:c2:81:88:fa:f1:7d:5c:b1:20:bb:d8:5a:b4:c8: b3:06:92:3d:65:88:10:f1:fd:71:80:e5:9b:69:b1:67:1a:fb: 5d:41:b8:77:29:dd:6b:0c:c8:fc:1d:a1:c9:fb:e5:c5:2c:28: 8c:4d:90:35:dd:92:2d:64:20:0d:60:eb:a0:9a:25:0c:18:79: 05:8d:10:dc:a4:7f:1f:01:c3:87:1c:cf:af:52:f2:b0:c0:7b: c9:f1:fa:74:36:35:b1:34:65:f5:4d:64:ae:f1:19:dc:f5:e5: 7d:ed:03:8c:1e:58:c4:5f:b0:ab:36:3a:bc:bc:26:cd:d2:b7: 1a:7a:e5:c8:b8:bd:c8:62:5c:06:22:d0:8b:e6:c3:0b:d3:2d: a5:38:2f:83:d9:c4:58:67:c7:15:d7:9f:2c:fd:65:94:14:24: e1:c9:6f:a1:2a:67:55:40:66:5c:f9:03:7a:9b:0b:8e:b1:82: 0f:fd:e4:67:84:24:b0:20:5d:20:f6:21:7d:a8:26:a4:11:9e: 2a:c7:eb:af:bf:eb:b5:fc:af:47:d4:f4:0e:5a:95:1e:0f:7d: c8:1b:7a:4a:8e:73:a2:52:ec:43:53:49:30:db:61:65:d6:5f: e1:35:a2:1a:49:f0:63:7c:3f:44:e4:48:7d:6c:58:5d:f0:f3: cd:91:62:d6 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZpYdiRzyL1F3YEFOt/gU9zcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMTA2MDkxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTAxMGRhMDZkMmI4MzAxYjE4OGU4Mzg1MzVhOWY0NTk3YTgyYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcEbXl5IZmo/yF0FkQWFtWbVy+oz 3kl4MOgd/G9S02PEYditl8lc8n4CJzP4b4iOFKZ7mAWehLkJu0g1RSSadb8dLS8I ScTdXCqI+VOqVDL/Yo2vM3ecBsXSrUGecSQpjhnOdH4ijkCT0aZ7MeduhEAu2iK7 MZkKrv15qiX2atlzPy/cKulD8ptE0pxc75/aUN9Whl2iU4heZCcUevzhVZul4h/r RnhLVgTXxteuKBI8MOsI7mU7cpMutQslzrmp2MDTYS8P5FaK1f8vAjzHDiMIMR5Z ijy4JobAGXduDl7aLx9434WuQkZ5i3mTbUdZixje0rRgSvoTQPDqUnFiywIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFG4BDaBtK4MBsYjoOFNan0WXqCoVMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvYmdFTm9HMHJnd0d4aU9nNFUxcWZSWmVvS2hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBANbbSgD BABbbSoDBABbbS4DBADP9MYwDQYJKoZIhvcNAQELBQADggEBAFnQt1TCgYj68X1c sSC72Fq0yLMGkj1liBDx/XGA5ZtpsWca+11BuHcp3WsMyPwdocn75cUsKIxNkDXd ki1kIA1g66CaJQwYeQWNENykfx8Bw4ccz69S8rDAe8nx+nQ2NbE0ZfVNZK7xGdz1 5X3tA4weWMRfsKs2Ory8Js3Stxp65ci4vchiXAYi0IvmwwvTLaU4L4PZxFhnxxXX nyz9ZZQUJOHJb6EqZ1VAZlz5A3qbC46xgg/95GeEJLAgXSD2IX2oJqQRnirH66+/ 67X8r0fU9A5alR4PfcgbekqOc6JS7ENTSTDbYWXWX+E1ohpJ8GN8P0TkSH1sWF3w 882RYtY= -----END CERTIFICATE-----Generated at Sun Dec 7 09:25:27 2025 by rpki-client