This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/kmtoTD1Sp1wD-lRreeUsVhgxxqU.roa File: kmtoTD1Sp1wD-lRreeUsVhgxxqU.roa (raw, json) Hash identifier: ft9gDxpz8qfcJsSeeOpQMC0/K4jNq/9ZFG67Xk1D/A4= Subject key identifier: 92:6B:68:4C:3D:52:A7:5C:03:FA:54:6B:79:E5:2C:56:18:31:C6:A5 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B94EA41A5FBCCF56DC636BB2948F1BFBA Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/kmtoTD1Sp1wD-lRreeUsVhgxxqU.roa Signing time: Tue 06 Jan 2026 20:05:38 +0000 ROA not before: Tue 06 Jan 2026 20:05:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 87.58.64.0/24 maxlen: 24 87.58.65.0/24 maxlen: 24 159.254.0.0/24 maxlen: 24 159.254.1.0/24 maxlen: 24 159.254.2.0/24 maxlen: 24 159.254.3.0/24 maxlen: 24 159.254.4.0/24 maxlen: 24 159.254.5.0/24 maxlen: 24 159.254.6.0/24 maxlen: 24 159.254.7.0/24 maxlen: 24 159.254.8.0/24 maxlen: 24 159.254.9.0/24 maxlen: 24 159.254.10.0/24 maxlen: 24 159.254.11.0/24 maxlen: 24 159.254.12.0/24 maxlen: 24 159.254.80.0/24 maxlen: 24 159.254.81.0/24 maxlen: 24 159.254.82.0/24 maxlen: 24 159.254.186.0/24 maxlen: 24 159.254.187.0/24 maxlen: 24 159.254.188.0/24 maxlen: 24 159.254.189.0/24 maxlen: 24 159.254.190.0/24 maxlen: 24 159.254.191.0/24 maxlen: 24 159.254.207.0/24 maxlen: 24 159.254.208.0/24 maxlen: 24 159.254.255.0/24 maxlen: 24 194.9.116.0/24 maxlen: 24 2a03:eec0:3601::/48 maxlen: 48 2a03:eec0:3602::/48 maxlen: 48 2a03:eec0:3603::/48 maxlen: 48 2a03:eec0:3604::/48 maxlen: 48 2a03:eec0:3605::/48 maxlen: 48 2a03:eec0:3606::/48 maxlen: 48 2a03:eec0:3607::/48 maxlen: 48 2a03:eec0:3608::/48 maxlen: 48 2a03:eec0:3609::/48 maxlen: 48 2a03:eec0:360a::/48 maxlen: 48 2a03:eec0:360b::/48 maxlen: 48 Validation: Failed, certificate revoked on Wed 07 Jan 2026 01:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:ea:41:a5:fb:cc:f5:6d:c6:36:bb:29:48:f1:bf:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Jan 6 20:05:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=926b684c3d52a75c03fa546b79e52c561831c6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:80:21:82:ed:92:c5:02:30:e8:66:0c:18:6c: a3:77:60:71:b2:87:c1:77:af:7f:2f:8c:44:dc:84: 0a:a5:6b:50:33:ca:d6:91:cf:ea:d6:80:a6:d0:ee: 6c:da:03:e0:e0:8f:bd:e6:af:3c:1c:0a:d7:07:71: 5e:52:30:03:bf:34:c5:ca:49:70:2d:2e:3b:a2:6c: 7e:75:7a:4a:3a:4a:b2:07:5a:4e:25:c7:23:14:f7: 50:ad:5a:2b:0f:97:52:02:08:ab:de:20:4b:1e:fb: e4:3c:00:f0:23:9b:e1:fb:00:c2:60:22:a3:83:79: 0b:66:69:fe:84:3f:5d:39:c1:20:c4:8e:84:f1:c1: 32:58:00:e0:38:25:e0:ee:47:50:98:52:12:13:9b: f1:41:9b:13:23:17:5c:22:9c:18:cc:47:48:81:f8: e8:ee:81:2c:e6:1a:d6:a0:1e:99:51:76:4e:cb:df: 42:92:65:27:1f:ae:e5:d3:4b:aa:2f:8a:a3:7f:e0: 46:8f:37:89:24:c6:79:da:cf:c9:74:40:93:e3:db: 99:9f:84:cf:9c:7f:18:fb:38:fc:3f:af:ea:f2:9f: b9:3b:d4:d1:f1:18:e8:32:85:4c:fa:3d:4d:7d:a1: 33:fd:83:c2:0c:72:9c:c4:f3:04:0a:73:06:eb:b4: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6B:68:4C:3D:52:A7:5C:03:FA:54:6B:79:E5:2C:56:18:31:C6:A5 X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/kmtoTD1Sp1wD-lRreeUsVhgxxqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.58.64.0/23 159.254.0.0-159.254.12.255 159.254.80.0-159.254.82.255 159.254.186.0-159.254.191.255 159.254.207.0-159.254.208.255 159.254.255.0/24 194.9.116.0/24 IPv6: 2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9e:78:3a:59:50:3d:2f:9d:c1:5a:3c:c7:25:6f:2e:1a:46:71: 33:98:7e:fb:72:41:25:a5:76:52:85:88:cf:b4:be:e3:49:b8: e1:54:00:4a:e4:51:dc:0a:e0:69:e5:e9:23:bc:e3:cf:f3:16: 65:dd:18:78:d4:63:62:8b:65:23:41:c9:a0:ad:1e:6b:7a:54: 5d:b6:f6:80:ae:30:ba:68:12:ba:05:c6:0e:31:67:c0:d5:78: 5c:5d:80:51:da:0b:a7:e6:e4:e3:41:92:c7:b8:54:67:ee:0a: fd:8e:e8:1e:62:07:29:90:3a:53:e7:a4:26:f0:4b:bf:cf:e0: 64:b5:fc:7d:fc:22:f8:a4:48:4b:98:f5:22:15:fe:0b:8d:a8: 98:2d:d9:98:3f:23:6b:82:45:e3:2e:06:cc:0b:45:ca:d0:68: f9:35:9f:5b:aa:a9:0b:bf:00:35:d6:bd:1d:00:f7:8d:48:a4: d3:be:24:3c:39:54:9e:07:3d:ed:ee:72:7f:3a:db:e4:2f:4e: c7:61:1b:63:a5:5b:37:7b:55:35:05:81:ca:37:bc:5f:12:4b: 85:02:9f:3d:55:e8:18:39:55:13:5e:c4:a0:d8:bc:1a:ca:94: 52:78:03:7a:e8:41:3e:27:03:f3:6e:4d:de:b2:ad:b7:e4:10: 90:7e:ac:42 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZuU6kGl+8z1bcY2uylI8b+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjYwMTA2MjAwNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjZiNjg0YzNkNTJhNzVjMDNmYTU0NmI3OWU1MmM1NjE4MzFjNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IAhgu2SxQIw6GYMGGyjd2BxsofB d69/L4xE3IQKpWtQM8rWkc/q1oCm0O5s2gPg4I+95q88HArXB3FeUjADvzTFyklw LS47omx+dXpKOkqyB1pOJccjFPdQrVorD5dSAgir3iBLHvvkPADwI5vh+wDCYCKj g3kLZmn+hD9dOcEgxI6E8cEyWADgOCXg7kdQmFISE5vxQZsTIxdcIpwYzEdIgfjo 7oEs5hrWoB6ZUXZOy99CkmUnH67l00uqL4qjf+BGjzeJJMZ52s/JdECT49uZn4TP nH8Y+zj8P6/q8p+5O9TR8RjoMoVM+j1NfaEz/YPCDHKcxPMECnMG67SoewIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFJJraEw9UqdcA/pUa3nlLFYYMcalMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEva210b1REMVNwMXdELWxScmVlVXNWaGd4eHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBPBAIAATBJAwQBVzpAMAsD AwGf/gMEAJ/+DDAMAwQEn/5QAwQAn/5SMAwDBAGf/roDBAaf/oAwDAMEAJ/+zwME AJ/+0AMEAJ/+/wMEAMIJdDAaBAIAAjAUMBIDBwAqA+7ANgEDBwIqA+7ANggwDQYJ KoZIhvcNAQELBQADggEBAJ54OllQPS+dwVo8xyVvLhpGcTOYfvtyQSWldlKFiM+0 vuNJuOFUAErkUdwK4Gnl6SO848/zFmXdGHjUY2KLZSNByaCtHmt6VF229oCuMLpo EroFxg4xZ8DVeFxdgFHaC6fm5ONBkse4VGfuCv2O6B5iBymQOlPnpCbwS7/P4GS1 /H38IvikSEuY9SIV/guNqJgt2Zg/I2uCReMuBswLRcrQaPk1n1uqqQu/ADXWvR0A 941IpNO+JDw5VJ4HPe3ucn862+QvTsdhG2OlWzd7VTUFgco3vF8SS4UCnz1V6Bg5 VRNexKDYvBrKlFJ4A3roQT4nA/NuTd6yrbfkEJB+rEI= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:00 2026 by rpki-client