This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/q10KLbVCJWk5CmZlrgIllIMKkEY.roa File: q10KLbVCJWk5CmZlrgIllIMKkEY.roa (raw, json) Hash identifier: G0av0Dc3jZ9c1UFlpWjeeT+X8TtpQfIMiHe1vmA0xjo= Subject key identifier: AB:5D:0A:2D:B5:42:25:69:39:0A:66:65:AE:02:25:94:83:0A:90:46 Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789 Certificate serial: 0198E038535FA84699317F391F0E6B28FFAD Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/q10KLbVCJWk5CmZlrgIllIMKkEY.roa Signing time: Mon 25 Aug 2025 07:54:04 +0000 ROA not before: Mon 25 Aug 2025 07:54:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214760 IP address blocks: 77.109.4.0/24 maxlen: 24 77.109.5.0/24 maxlen: 24 77.109.6.0/24 maxlen: 24 77.109.7.0/24 maxlen: 24 77.109.8.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 25 Aug 2025 08:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:e0:38:53:5f:a8:46:99:31:7f:39:1f:0e:6b:28:ff:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789 Validity Not Before: Aug 25 07:54:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab5d0a2db5422569390a6665ae022594830a9046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:b5:e1:1e:74:5d:54:3e:f8:bc:c6:3e:c5: 3a:90:d3:d8:66:64:a4:9e:22:fe:fa:f4:d9:da:35: c6:29:60:4f:f8:a3:1c:7f:10:01:e7:66:0c:c1:f7: 83:0a:cb:fb:c0:f7:c3:9f:64:3a:f9:94:ea:c2:9a: dc:f0:a8:3b:6f:b7:f3:5b:31:22:1f:7a:f9:f3:b3: de:fd:60:ea:c0:55:81:ef:73:7c:af:2f:5e:6d:bc: 2b:42:9e:f5:e0:4c:2c:99:d7:b1:44:7f:03:59:90: 65:1a:65:55:ac:91:70:32:1e:08:3b:93:45:b4:bb: 20:91:fd:3b:38:53:47:b6:69:12:63:72:32:b0:c1: 0e:c1:80:3d:7b:a4:b4:e6:f2:b9:dc:67:2c:fe:0a: a2:15:8b:11:5e:8c:9b:db:f2:eb:54:c3:2b:f9:fb: 13:3a:2b:54:64:75:0a:c7:0f:b7:d0:02:08:3b:86: 41:6b:cc:43:30:1c:2b:5e:80:95:3c:a0:f0:71:6f: 7f:f7:78:1b:14:a4:e9:9e:14:01:ff:b9:e1:f7:ce: bb:0f:00:c7:ab:43:15:e1:34:a1:26:d9:bd:5d:42: ed:c3:98:1c:8c:ad:81:b7:a3:06:62:81:eb:c5:71: 90:42:b0:36:f5:8b:11:20:88:eb:39:43:90:3b:45: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:0A:2D:B5:42:25:69:39:0A:66:65:AE:02:25:94:83:0A:90:46 X509v3 Authority Key Identifier: keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/q10KLbVCJWk5CmZlrgIllIMKkEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.109.4.0-77.109.8.255 Signature Algorithm: sha256WithRSAEncryption 78:54:f7:ea:2a:47:0a:35:33:0e:f4:6e:96:a3:97:53:db:8c: 56:f5:95:f3:43:53:58:f9:7f:f8:36:c6:f3:4f:4d:92:27:aa: 84:09:ce:64:41:3e:1b:47:73:d1:55:5c:4d:df:6c:55:c0:8b: 18:2c:16:cc:18:68:08:62:7d:4e:ca:da:ab:3e:c1:15:48:29: c7:f1:36:f3:fa:50:23:46:f8:56:fd:aa:23:a3:77:86:d1:45: 37:f8:71:09:2b:ae:65:03:f2:13:6f:69:1f:32:0c:db:71:ac: 02:59:64:bd:92:55:5e:6b:03:93:94:57:da:61:d8:60:3d:57: 42:fb:0d:5e:b1:ca:27:37:39:fa:5f:a8:4f:63:65:11:c3:ed: 3d:45:b9:af:1b:22:59:02:f7:1f:7e:1d:ec:3a:1b:90:2a:64: 52:8f:92:ac:3c:c0:ad:56:4a:8c:07:d0:69:85:70:ae:d5:f6: 4e:82:45:5e:50:82:36:11:73:da:23:99:62:a5:d4:22:fd:1c: 6c:1b:34:ef:4a:df:f2:d1:01:f8:41:20:99:78:7c:f4:49:b3: 9d:3a:f0:0d:23:63:51:00:61:1b:3d:85:14:10:26:25:cd:0d: 99:31:85:3e:f3:3a:75:27:55:d4:b9:41:8a:34:dc:e2:87:da: 16:b6:cd:90 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZjgOFNfqEaZMX85Hw5rKP+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMzk2NDlmYWE4ZjlkZTNkYWU5MWJlNzk5YTI3ZTJjYTY2 Mjg3ODkwHhcNMjUwODI1MDc1NDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjVkMGEyZGI1NDIyNTY5MzkwYTY2NjVhZTAyMjU5NDgzMGE5MDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nu14R50XVQ++LzGPsU6kNPYZmSk niL++vTZ2jXGKWBP+KMcfxAB52YMwfeDCsv7wPfDn2Q6+ZTqwprc8Kg7b7fzWzEi H3r587Pe/WDqwFWB73N8ry9ebbwrQp714EwsmdexRH8DWZBlGmVVrJFwMh4IO5NF tLsgkf07OFNHtmkSY3IysMEOwYA9e6S05vK53Gcs/gqiFYsRXoyb2/LrVMMr+fsT OitUZHUKxw+30AIIO4ZBa8xDMBwrXoCVPKDwcW9/93gbFKTpnhQB/7nh9867DwDH q0MV4TShJtm9XULtw5gcjK2Bt6MGYoHrxXGQQrA29YsRIIjrOUOQO0VStwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKtdCi21QiVpOQpmZa4CJZSDCpBGMB8GA1UdIwQY MBaAFOA5ZJ+qj53j2ukb55mifiymYoeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgt ZDc2NzhhMDc4N2QxLzEvcTEwS0xiVkNKV2s1Q21abHJnSWxsSU1La0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgtZDc2NzhhMDc4N2Qx LzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJNbQQD BABNbQgwDQYJKoZIhvcNAQELBQADggEBAHhU9+oqRwo1Mw70bpajl1PbjFb1lfND U1j5f/g2xvNPTZInqoQJzmRBPhtHc9FVXE3fbFXAixgsFswYaAhifU7K2qs+wRVI KcfxNvP6UCNG+Fb9qiOjd4bRRTf4cQkrrmUD8hNvaR8yDNtxrAJZZL2SVV5rA5OU V9ph2GA9V0L7DV6xyic3OfpfqE9jZRHD7T1Fua8bIlkC9x9+Hew6G5AqZFKPkqw8 wK1WSowH0GmFcK7V9k6CRV5QgjYRc9ojmWKl1CL9HGwbNO9K3/LRAfhBIJl4fPRJ s5068A0jY1EAYRs9hRQQJiXNDZkxhT7zOnUnVdS5QYo03OKH2ha2zZA= -----END CERTIFICATE-----Generated at Sun Dec 21 21:27:20 2025 by rpki-client