This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/tRDeYGZKpYqoksMpTR-2ogq-g94.roa File: tRDeYGZKpYqoksMpTR-2ogq-g94.roa (raw, json) Hash identifier: ZfU5Rb+c1MSmagnrY8CP6LQm2dnfIz8U/DfYgnwPjcU= Subject key identifier: B5:10:DE:60:66:4A:A5:8A:A8:92:C3:29:4D:1F:B6:A2:0A:BE:83:DE Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019A58762400A0978AFC64F50FE19394EF66 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/tRDeYGZKpYqoksMpTR-2ogq-g94.roa Signing time: Thu 06 Nov 2025 09:18:48 +0000 ROA not before: Thu 06 Nov 2025 09:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 147.185.197.0/24 maxlen: 24 193.168.200.0/24 maxlen: 24 193.168.203.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 18 Nov 2025 11:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:76:24:00:a0:97:8a:fc:64:f5:0f:e1:93:94:ef:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Nov 6 09:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b510de60664aa58aa892c3294d1fb6a20abe83de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:16:ef:8f:64:ce:1a:ba:d0:b9:5f:33:61: 7c:56:b6:54:62:b1:84:59:d3:f0:fd:b8:14:58:fc: 6d:7c:06:21:2f:5f:c4:71:65:64:01:af:96:0f:fd: d6:46:ee:ac:06:61:ea:85:cb:52:75:57:5d:31:a9: a6:28:4c:14:6c:0c:71:db:0d:ea:9b:b0:7b:a0:5a: 67:4e:15:91:f5:f5:96:ea:ae:82:44:59:9c:7e:09: ad:af:26:2f:8e:8a:ee:31:df:93:1c:7e:56:fc:82: e0:e5:cb:38:51:86:01:1b:d0:6d:39:2e:81:f8:fa: 3a:50:eb:ea:56:8e:81:20:0a:36:1c:38:6d:b2:d6: bd:9b:19:4e:11:3b:60:2a:f9:8e:57:12:0d:58:bc: 65:da:2d:e9:76:54:f7:19:8c:92:01:cd:c1:d9:0b: 38:2f:02:85:cc:d6:0e:22:41:85:33:07:7b:01:d8: 9b:0b:13:15:90:20:0a:8b:0d:e9:72:6c:09:c5:cc: b4:b9:76:84:f6:b4:56:88:fc:a8:a1:33:04:6e:f3: 8f:8b:8a:85:7e:b6:7c:af:42:8a:31:87:d4:a3:68: ee:ce:66:d8:ba:79:32:56:c7:6d:ee:78:de:c9:de: ad:2c:19:5a:c2:04:de:fb:56:69:59:94:8e:6b:1b: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:10:DE:60:66:4A:A5:8A:A8:92:C3:29:4D:1F:B6:A2:0A:BE:83:DE X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/tRDeYGZKpYqoksMpTR-2ogq-g94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.185.197.0/24 193.168.200.0/24 193.168.203.0/24 Signature Algorithm: sha256WithRSAEncryption a8:eb:ab:6e:a3:16:52:a9:73:b2:bf:e2:3a:22:a1:29:63:2b: ec:de:47:eb:1f:f8:4b:51:2c:6c:51:eb:7c:81:9a:b7:12:56: 95:6a:6b:f3:fd:db:c2:fb:06:1c:db:44:18:c0:23:c2:23:3f: 7e:1f:6a:15:51:91:e8:0a:66:2d:b1:a1:d1:a3:cc:36:e2:59: 16:8b:46:2f:d6:ac:c1:c4:d5:8f:7f:ad:5e:3d:73:c1:9c:24: 9f:45:50:05:74:11:45:07:6e:5c:39:62:d2:86:d4:20:0b:20: 70:6b:03:8f:4d:b1:42:01:6b:ae:5e:8e:36:f5:6e:b6:b3:fa: bf:ae:4f:f3:23:3b:43:ce:b8:9e:38:ac:6b:d0:02:d3:43:b2: fa:40:48:d4:2b:62:9b:11:7b:67:5b:f0:9a:77:42:f7:5d:34: 13:31:5e:e0:d7:04:83:f2:32:07:7d:b9:a2:12:87:14:ed:a2: ee:3a:d1:64:be:92:20:93:06:f9:25:f5:93:c7:fb:74:5a:43: b5:b0:ad:c1:5b:b7:33:5c:9f:8f:59:0b:5d:7b:9b:53:b6:f7: 38:ca:9c:81:fd:aa:1b:18:72:84:23:54:37:5a:0e:c4:66:2a: f5:c0:2b:9c:2f:cb:00:9a:1f:6a:6b:2f:e0:90:93:c8:1c:f8: 62:73:f5:ad -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpYdiQAoJeK/GT1D+GTlO9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMTA2MDkxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTEwZGU2MDY2NGFhNThhYTg5MmMzMjk0ZDFmYjZhMjBhYmU4M2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxgW749kzhq60LlfM2F8VrZUYrGE WdPw/bgUWPxtfAYhL1/EcWVkAa+WD/3WRu6sBmHqhctSdVddMammKEwUbAxx2w3q m7B7oFpnThWR9fWW6q6CRFmcfgmtryYvjoruMd+THH5W/ILg5cs4UYYBG9BtOS6B +Po6UOvqVo6BIAo2HDhtsta9mxlOETtgKvmOVxINWLxl2i3pdlT3GYySAc3B2Qs4 LwKFzNYOIkGFMwd7AdibCxMVkCAKiw3pcmwJxcy0uXaE9rRWiPyooTMEbvOPi4qF frZ8r0KKMYfUo2juzmbYunkyVsdt7njeyd6tLBlawgTe+1ZpWZSOaxuAkwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLUQ3mBmSqWKqJLDKU0ftqIKvoPeMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvdFJEZVlHWktwWXFva3NNcFRSLTJvZ3EtZzk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAk7nFAwQA wajIAwQAwajLMA0GCSqGSIb3DQEBCwUAA4IBAQCo66tuoxZSqXOyv+I6IqEpYyvs 3kfrH/hLUSxsUet8gZq3ElaVamvz/dvC+wYc20QYwCPCIz9+H2oVUZHoCmYtsaHR o8w24lkWi0Yv1qzBxNWPf61ePXPBnCSfRVAFdBFFB25cOWLShtQgCyBwawOPTbFC AWuuXo429W62s/q/rk/zIztDzrieOKxr0ALTQ7L6QEjUK2KbEXtnW/Cad0L3XTQT MV7g1wSD8jIHfbmiEocU7aLuOtFkvpIgkwb5JfWTx/t0WkO1sK3BW7czXJ+PWQtd e5tTtvc4ypyB/aobGHKEI1Q3Wg7EZir1wCucL8sAmh9qay/gkJPIHPhic/Wt -----END CERTIFICATE-----Generated at Sun Dec 7 12:38:46 2025 by rpki-client