This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vAR9_W0Bs8zGgC-yf-UNWeHBUUI.roa File: vAR9_W0Bs8zGgC-yf-UNWeHBUUI.roa (raw, json) Hash identifier: 9wxWkizSMJAw1FSrqUDIdVr+OHg1CqPb28x3PL8f+Bw= Subject key identifier: BC:04:7D:FD:6D:01:B3:CC:C6:80:2F:B2:7F:E5:0D:59:E1:C1:51:42 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019AFE56C19FE2F1465B4BEC7245F0D30DA7 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vAR9_W0Bs8zGgC-yf-UNWeHBUUI.roa Signing time: Mon 08 Dec 2025 14:21:29 +0000 ROA not before: Mon 08 Dec 2025 14:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 91.109.40.0/24 maxlen: 24 91.109.41.0/24 maxlen: 24 91.109.42.0/24 maxlen: 24 91.109.46.0/24 maxlen: 24 147.185.196.0/24 maxlen: 24 147.185.197.0/24 maxlen: 24 193.168.200.0/24 maxlen: 24 207.244.198.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 15 Dec 2025 13:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:56:c1:9f:e2:f1:46:5b:4b:ec:72:45:f0:d3:0d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Dec 8 14:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bc047dfd6d01b3ccc6802fb27fe50d59e1c15142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:33:ac:91:00:6e:eb:9b:dc:c1:ca:ce:4c: 31:7b:5a:86:15:a1:05:17:4f:19:ce:f3:87:c3:8b: a0:c4:bb:b8:b7:98:b9:9a:6d:11:94:17:51:17:95: 43:e5:e4:05:ba:98:6e:48:6e:35:83:b8:78:fe:65: 9a:eb:e7:2f:24:a4:a9:14:6b:77:e8:96:35:b9:8e: 26:7a:89:dd:14:b4:f0:a3:0d:6a:12:f4:c0:54:d0: 83:46:df:5b:94:30:cc:db:81:4e:d8:78:50:f3:6a: 80:02:27:97:77:3d:25:ca:10:d9:c6:9a:11:18:db: ea:c9:cf:c6:ad:08:d6:fb:2f:d7:c5:fe:c0:67:74: d4:a4:5e:3e:c8:68:14:b4:57:56:b1:67:21:17:d5: 9f:1e:f4:92:b1:81:e4:f6:ab:a7:db:14:e8:59:87: 1e:2f:d7:95:d3:ae:26:79:57:4e:94:5f:52:3c:c8: d7:3e:c5:ec:fe:b1:c2:85:05:6d:32:fc:dc:02:8b: 07:3d:da:85:52:6c:24:1e:2a:34:84:58:fa:4c:ae: c2:22:12:0e:f2:12:1f:75:6b:22:87:53:8f:dc:67: 93:45:2f:e5:86:fd:fd:dc:c6:8d:e1:15:09:91:c4: c5:05:69:45:22:dc:75:7d:dd:4c:ba:f3:de:b3:d4: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:7D:FD:6D:01:B3:CC:C6:80:2F:B2:7F:E5:0D:59:E1:C1:51:42 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vAR9_W0Bs8zGgC-yf-UNWeHBUUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.40.0-91.109.42.255 91.109.46.0/24 147.185.196.0/23 193.168.200.0/24 207.244.198.0/24 Signature Algorithm: sha256WithRSAEncryption 27:f1:c5:af:5b:3d:ac:5a:ff:2f:a6:92:5a:68:6c:0a:12:25: 60:84:e6:55:ea:a5:91:e2:dc:14:6c:5d:24:84:d0:04:65:5a: 34:a3:3b:af:41:8a:d3:f0:96:d0:25:87:48:87:8b:d6:01:f5: 69:b9:51:93:a9:3d:6b:6e:0b:f0:3a:77:ee:39:d5:44:8f:ce: bd:ac:ba:a4:d0:06:6c:c6:82:90:13:e7:09:d0:66:ba:48:2c: b8:f5:0e:2a:f6:c9:7f:86:59:4c:23:08:d9:42:60:9d:94:62: 51:f8:8e:d5:d2:53:f8:d8:5f:d6:fb:70:54:ea:f0:27:b6:6b: 87:6d:03:27:cd:91:6c:f6:f0:ed:4e:87:9d:3f:bd:eb:4c:2b: ea:a3:bb:69:0f:38:3a:65:88:09:a0:64:44:62:b4:02:70:60: 15:3b:5d:e9:72:0f:ac:d1:b8:c0:d6:9d:dd:62:b3:22:79:f7: 8c:1d:08:e9:6f:5f:76:0c:c1:47:cc:68:59:fd:c6:7b:13:dd: 02:2b:bb:0d:df:f2:86:45:f6:0d:c1:97:88:a3:ef:30:6e:d7: 1a:69:a8:33:81:ad:ce:30:98:f7:aa:f9:e5:98:b1:44:1f:53: f1:09:02:43:3e:a4:7a:51:70:a8:db:61:05:81:1f:0f:e3:a3: 16:bd:ec:8d -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZr+VsGf4vFGW0vsckXw0w2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMjA4MTQyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzA0N2RmZDZkMDFiM2NjYzY4MDJmYjI3ZmU1MGQ1OWUxYzE1MTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP8zrJEAbuub3MHKzkwxe1qGFaEF F08ZzvOHw4ugxLu4t5i5mm0RlBdRF5VD5eQFuphuSG41g7h4/mWa6+cvJKSpFGt3 6JY1uY4meondFLTwow1qEvTAVNCDRt9blDDM24FO2HhQ82qAAieXdz0lyhDZxpoR GNvqyc/GrQjW+y/Xxf7AZ3TUpF4+yGgUtFdWsWchF9WfHvSSsYHk9qun2xToWYce L9eV064meVdOlF9SPMjXPsXs/rHChQVtMvzcAosHPdqFUmwkHio0hFj6TK7CIhIO 8hIfdWsih1OP3GeTRS/lhv393MaN4RUJkcTFBWlFItx1fd1MuvPes9QTVwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFLwEff1tAbPMxoAvsn/lDVnhwVFCMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvdkFSOV9XMEJzOHpHZ0MteWYtVU5XZUhCVVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBANbbSgD BABbbSoDBABbbS4DBAGTucQDBADBqMgDBADP9MYwDQYJKoZIhvcNAQELBQADggEB ACfxxa9bPaxa/y+mklpobAoSJWCE5lXqpZHi3BRsXSSE0ARlWjSjO69BitPwltAl h0iHi9YB9Wm5UZOpPWtuC/A6d+451USPzr2suqTQBmzGgpAT5wnQZrpILLj1Dir2 yX+GWUwjCNlCYJ2UYlH4jtXSU/jYX9b7cFTq8Ce2a4dtAyfNkWz28O1Oh50/vetM K+qju2kPODpliAmgZERitAJwYBU7XelyD6zRuMDWnd1isyJ594wdCOlvX3YMwUfM aFn9xnsT3QIruw3f8oZF9g3Bl4ij7zBu1xppqDOBrc4wmPeq+eWYsUQfU/EJAkM+ pHpRcKjbYQWBHw/joxa97I0= -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:02 2025 by rpki-client