This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xgz77IENdAbs95NzCqM8wr9164k.roa File: xgz77IENdAbs95NzCqM8wr9164k.roa (raw, json) Hash identifier: TH10oV45qrT+hBMUnB4u3prc8WssgTBRLIQNDthuX78= Subject key identifier: C6:0C:FB:EC:81:0D:74:06:EC:F7:93:73:0A:A3:3C:C2:BF:75:EB:89 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019A44303BEB82E389E566871C9F45B87FDB Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xgz77IENdAbs95NzCqM8wr9164k.roa Signing time: Sun 02 Nov 2025 10:50:03 +0000 ROA not before: Sun 02 Nov 2025 10:50:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 77.105.61.0/24 maxlen: 24 79.175.93.0/24 maxlen: 24 81.18.48.0/24 maxlen: 24 109.121.33.0/24 maxlen: 24 109.121.39.0/24 maxlen: 24 178.253.221.0/24 maxlen: 24 188.255.148.0/24 maxlen: 24 188.255.222.0/24 maxlen: 24 188.255.227.0/24 maxlen: 24 188.255.236.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 12 Nov 2025 05:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:44:30:3b:eb:82:e3:89:e5:66:87:1c:9f:45:b8:7f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 2 10:50:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c60cfbec810d7406ecf793730aa33cc2bf75eb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:73:5c:44:98:36:df:db:e5:34:31:36:c5: e8:4e:cd:fd:f6:5f:fd:e1:64:f6:63:43:0a:32:24: 90:20:59:dc:16:7c:c8:cb:55:34:d4:f7:28:61:74: e1:94:9b:14:c7:36:cc:c6:48:b2:11:9e:9c:ec:60: 98:f1:8d:23:9d:26:77:ca:a0:6d:01:19:5a:4b:31: fa:63:c3:18:c3:66:5c:9b:c7:5c:21:2a:dc:de:30: 73:13:fd:92:f7:72:ef:4d:cf:a3:f5:88:7f:c4:13: 6d:16:d1:c0:40:ca:5a:3b:2f:bc:d4:5c:e9:9d:4c: 77:75:bd:1e:77:eb:a4:91:b3:0c:64:16:59:c1:e4: f2:0d:ab:d4:c1:75:06:6c:1b:82:6e:8f:be:ba:de: cf:78:e1:46:23:d8:67:ce:41:e3:8a:65:2e:b7:85: e5:b8:ce:c9:46:d8:b1:7c:ea:74:af:30:2c:c2:40: 11:97:1e:b6:5e:1e:59:77:30:82:ee:35:b0:6e:64: b7:72:88:f1:53:8d:bd:ab:f0:28:1c:1e:5a:ae:d8: 8e:70:ee:ed:87:10:d2:02:52:47:40:5c:cd:58:e3: 54:6d:c1:25:27:fa:aa:f6:42:64:2d:ad:e8:ae:f8: 3b:32:1d:53:a4:ec:49:69:44:d6:10:28:5c:56:b6: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0C:FB:EC:81:0D:74:06:EC:F7:93:73:0A:A3:3C:C2:BF:75:EB:89 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xgz77IENdAbs95NzCqM8wr9164k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.61.0/24 79.175.93.0/24 81.18.48.0/24 109.121.33.0/24 109.121.39.0/24 178.253.221.0/24 188.255.148.0/24 188.255.222.0/24 188.255.227.0/24 188.255.236.0/24 Signature Algorithm: sha256WithRSAEncryption a3:d5:c0:31:e3:1f:a5:94:92:48:dc:4f:8c:3c:15:0b:9e:61: ca:39:75:88:ef:05:9e:71:f3:22:f6:2c:ec:b7:d4:4c:08:d6: eb:10:48:64:f0:c7:9f:e0:c2:db:32:05:1a:05:df:4d:dc:ab: b6:b3:fd:48:b3:5d:89:03:63:94:52:62:15:64:c1:bd:06:51: 8d:19:d6:0d:3f:4a:bd:88:62:61:85:32:2c:b9:6d:08:39:7e: cf:3b:7d:04:34:aa:20:20:90:2f:fc:ec:8f:41:bb:c9:1a:d3: ae:7b:83:89:50:0b:d0:c9:d7:3c:30:4c:51:55:da:95:ac:1e: a9:17:6e:8d:02:25:20:4f:af:a0:2b:d2:cb:dd:82:56:6e:ba: c1:5f:13:5c:d5:25:76:bf:59:ad:51:13:4a:3e:a5:a0:06:90: 3a:74:a7:59:63:9d:7e:9f:6d:9c:1b:57:18:f5:25:ab:7a:b1: 5d:ba:88:9d:6b:72:a3:e4:49:31:72:f3:35:f8:8a:9c:32:c1: 29:f6:fe:84:df:9b:79:ab:b4:1e:11:76:e7:04:d8:a4:e2:ac: ee:8c:dd:22:dd:1a:13:92:5a:a8:03:e7:28:29:42:49:6d:3b: 13:b3:20:f0:85:90:00:49:5d:c1:86:c9:03:db:eb:1f:bc:b8: fc:67:d4:63 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZpEMDvrguOJ5WaHHJ9FuH/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTAyMTA1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjBjZmJlYzgxMGQ3NDA2ZWNmNzkzNzMwYWEzM2NjMmJmNzVlYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MpzXESYNt/b5TQxNsXoTs399l/9 4WT2Y0MKMiSQIFncFnzIy1U01PcoYXThlJsUxzbMxkiyEZ6c7GCY8Y0jnSZ3yqBt ARlaSzH6Y8MYw2Zcm8dcISrc3jBzE/2S93LvTc+j9Yh/xBNtFtHAQMpaOy+81Fzp nUx3db0ed+ukkbMMZBZZweTyDavUwXUGbBuCbo++ut7PeOFGI9hnzkHjimUut4Xl uM7JRtixfOp0rzAswkARlx62Xh5ZdzCC7jWwbmS3cojxU429q/AoHB5artiOcO7t hxDSAlJHQFzNWONUbcElJ/qq9kJkLa3orvg7Mh1TpOxJaUTWEChcVraQ+QIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFMYM++yBDXQG7PeTcwqjPMK/deuJMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEveGd6NzdJRU5kQWJzOTVOekNxTTh3cjkxNjRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQATWk9AwQA T69dAwQAURIwAwQAbXkhAwQAbXknAwQAsv3dAwQAvP+UAwQAvP/eAwQAvP/jAwQA vP/sMA0GCSqGSIb3DQEBCwUAA4IBAQCj1cAx4x+llJJI3E+MPBULnmHKOXWI7wWe cfMi9izst9RMCNbrEEhk8Mef4MLbMgUaBd9N3Ku2s/1Is12JA2OUUmIVZMG9BlGN GdYNP0q9iGJhhTIsuW0IOX7PO30ENKogIJAv/OyPQbvJGtOue4OJUAvQydc8MExR VdqVrB6pF26NAiUgT6+gK9LL3YJWbrrBXxNc1SV2v1mtURNKPqWgBpA6dKdZY51+ n22cG1cY9SWrerFduoida3Kj5EkxcvM1+IqcMsEp9v6E35t5q7QeEXbnBNik4qzu jN0i3RoTklqoA+coKUJJbTsTsyDwhZAASV3BhskD2+sfvLj8Z9Rj -----END CERTIFICATE-----Generated at Sun Dec 7 09:25:03 2025 by rpki-client