This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/aHZJrdYxaXSZ9cPeix3q3ffwuxg.roa File: aHZJrdYxaXSZ9cPeix3q3ffwuxg.roa (raw, json) Hash identifier: B8/uudWJWlCUOXntCR6WtqxR2/rKNzBd2GCeqpMlmR0= Subject key identifier: 68:76:49:AD:D6:31:69:74:99:F5:C3:DE:8B:1D:EA:DD:F7:F0:BB:18 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019703FFA6233E37BD6469BD97FED1172A5C Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/aHZJrdYxaXSZ9cPeix3q3ffwuxg.roa Signing time: Sat 24 May 2025 20:32:55 +0000 ROA not before: Sat 24 May 2025 20:32:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213705 IP address blocks: 2a10:3c84::/32 maxlen: 32 2a10:3f80::/32 maxlen: 32 2a13:c244::/33 maxlen: 33 Validation: Failed, certificate revoked on Tue 17 Jun 2025 11:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:03:ff:a6:23:3e:37:bd:64:69:bd:97:fe:d1:17:2a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: May 24 20:32:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=687649add631697499f5c3de8b1deaddf7f0bb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:7b:f8:e5:ec:72:e5:d2:0f:5e:1d:06:3f: 8f:8f:09:7b:2b:74:af:a4:af:8c:c7:f0:ee:53:bd: 6f:45:0b:72:1a:de:99:ea:c1:06:cb:5b:9a:5e:1d: d2:cd:68:54:0b:e4:d2:5b:d4:68:ed:1a:f1:e5:ce: a8:80:34:77:c7:60:fe:9c:46:d3:c0:c3:96:1e:e6: d3:c9:7f:ff:b8:fe:fd:ee:ef:1a:bb:1b:c7:68:5d: 96:86:99:a1:de:38:0f:7c:91:ed:70:ce:06:9b:01: a9:1f:47:68:f7:fd:26:ab:00:4c:ab:68:c5:b4:e0: 98:92:51:66:89:b8:4f:f3:19:72:00:33:23:b8:21: be:92:41:94:e2:4f:c1:e7:2c:e1:45:af:4a:c6:b1: 20:8c:69:a5:c2:44:a3:f3:63:e6:4a:3e:54:2b:7e: 59:17:ec:48:69:e7:8f:c7:da:50:fa:7b:6d:b1:7c: 9a:28:dc:7b:23:00:3c:53:d7:c5:51:f1:15:9e:88: c1:57:db:30:d2:b3:86:72:c5:f5:98:39:49:84:57: 20:0a:b6:0e:6b:18:98:71:01:56:9d:60:cf:46:71: 11:4c:1b:cf:ab:a7:c4:17:5a:f3:5f:e5:bc:70:ac: 7a:fc:22:bd:e8:f5:50:f9:83:7a:7c:76:43:85:0a: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:76:49:AD:D6:31:69:74:99:F5:C3:DE:8B:1D:EA:DD:F7:F0:BB:18 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/aHZJrdYxaXSZ9cPeix3q3ffwuxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:3c84::/32 2a10:3f80::/32 2a13:c244::/33 Signature Algorithm: sha256WithRSAEncryption d9:de:d9:16:ca:4f:5d:b8:d3:26:56:b3:27:f7:16:f3:19:3b: a5:80:b5:ef:8b:b7:43:80:3c:c5:c6:31:89:97:62:ad:39:f4: 7c:b9:62:9d:33:77:17:db:94:65:48:2f:a3:d7:8d:0d:09:4c: a5:84:6e:82:cf:99:06:fe:69:aa:15:9c:48:20:b0:c2:f1:d4: f1:77:1c:d3:42:54:42:4e:42:22:58:5e:04:17:cf:6a:36:b6: fe:c0:f1:bb:de:38:7e:0d:0e:be:88:d7:90:c1:4d:e1:d8:92: 49:5c:4c:86:a8:45:53:bf:e6:41:8a:5e:26:8d:67:25:5e:c8: 56:18:42:d9:04:9c:b1:20:53:cc:fe:17:6e:3e:17:ef:80:56: dd:77:33:d3:bb:d8:d8:05:1a:7b:19:69:8f:c3:90:08:29:f8: cc:61:d4:c9:e9:11:9d:9e:b1:0c:47:10:f8:b0:45:14:d4:f2: a2:ca:3c:42:cd:fe:af:fd:05:f7:da:ee:02:bc:16:90:f0:eb: 9c:32:78:ca:35:db:3d:1f:44:35:c8:da:a6:e1:fd:4e:82:76: 93:2e:22:bb:46:41:1a:a6:ee:5f:72:99:1d:12:a9:c2:33:a4: d9:35:5a:30:3c:6c:32:35:3a:cb:97:48:fb:5e:c5:54:6f:ee: 5a:3c:57:66 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZcD/6YjPje9ZGm9l/7RFypcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUwNTI0MjAzMjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODc2NDlhZGQ2MzE2OTc0OTlmNWMzZGU4YjFkZWFkZGY3ZjBiYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkox7+OXscuXSD14dBj+Pjwl7K3Sv pK+Mx/DuU71vRQtyGt6Z6sEGy1uaXh3SzWhUC+TSW9Ro7Rrx5c6ogDR3x2D+nEbT wMOWHubTyX//uP797u8auxvHaF2Whpmh3jgPfJHtcM4GmwGpH0do9/0mqwBMq2jF tOCYklFmibhP8xlyADMjuCG+kkGU4k/B5yzhRa9KxrEgjGmlwkSj82PmSj5UK35Z F+xIaeePx9pQ+nttsXyaKNx7IwA8U9fFUfEVnojBV9sw0rOGcsX1mDlJhFcgCrYO axiYcQFWnWDPRnERTBvPq6fEF1rzX+W8cKx6/CK96PVQ+YN6fHZDhQp2KQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGh2Sa3WMWl0mfXD3osd6t338LsYMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvYUhaSnJkWXhhWFNaOWNQZWl4M3EzZmZ3dXhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAAjAWAwUAKhA8hAMF ACoQP4ADBgcqE8JEADANBgkqhkiG9w0BAQsFAAOCAQEA2d7ZFspPXbjTJlazJ/cW 8xk7pYC174u3Q4A8xcYxiZdirTn0fLlinTN3F9uUZUgvo9eNDQlMpYRugs+ZBv5p qhWcSCCwwvHU8Xcc00JUQk5CIlheBBfPaja2/sDxu944fg0OvojXkMFN4diSSVxM hqhFU7/mQYpeJo1nJV7IVhhC2QScsSBTzP4Xbj4X74BW3Xcz07vY2AUaexlpj8OQ CCn4zGHUyekRnZ6xDEcQ+LBFFNTyoso8Qs3+r/0F99ruArwWkPDrnDJ4yjXbPR9E NcjapuH9ToJ2ky4iu0ZBGqbuX3KZHRKpwjOk2TVaMDxsMjU6y5dI+17FVG/uWjxX Zg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:48:03 2025 by rpki-client