This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yxpRbZLbuIll_OxSAaKhT1ZrvGI.roa File: yxpRbZLbuIll_OxSAaKhT1ZrvGI.roa (raw, json) Hash identifier: ghQ7Kue2kmsfPB54cYo2yWIDNVET3Yjkh/SIqTHh/Rs= Subject key identifier: CB:1A:51:6D:92:DB:B8:89:65:FC:EC:52:01:A2:A1:4F:56:6B:BC:62 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B13B8E8E7AD8B523873449B6B41D03AF1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yxpRbZLbuIll_OxSAaKhT1ZrvGI.roa Signing time: Fri 12 Dec 2025 18:00:43 +0000 ROA not before: Fri 12 Dec 2025 18:00:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56755 IP address blocks: 45.131.184.0/24 maxlen: 24 45.148.118.0/23 maxlen: 24 45.148.119.0/24 maxlen: 24 94.177.122.0/24 maxlen: 24 139.28.99.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 13 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:b8:e8:e7:ad:8b:52:38:73:44:9b:6b:41:d0:3a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 12 18:00:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cb1a516d92dbb88965fcec5201a2a14f566bbc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:23:86:a5:49:54:e2:74:d3:73:82:ed:06: 98:e5:08:ed:06:d2:f7:ba:4f:19:8b:38:cf:a8:0a: cc:a0:38:fe:41:0c:9a:dd:7a:1c:c0:31:81:96:8f: f8:9a:0c:2e:e9:90:30:a6:29:63:4f:fc:f3:77:81: 43:a2:f9:f1:3b:ad:11:bd:6d:a2:55:a6:4f:c0:22: 50:9f:8b:fd:18:18:57:4d:78:9f:28:64:f9:ff:aa: dd:63:da:50:5e:1a:8f:35:67:89:07:78:49:93:85: 73:8a:f1:f5:ab:66:a4:56:7f:23:ba:6c:61:e3:05: 57:1f:2e:17:e6:ad:05:62:85:be:85:9a:49:1d:81: ab:90:96:b5:13:18:89:b4:3a:02:cd:42:e1:18:36: 3a:8b:e5:42:f8:47:fc:82:cf:59:ca:2c:94:42:7c: b2:b2:7a:21:99:af:55:b7:11:1d:a9:7d:ef:4c:bf: 1d:5d:27:4c:90:04:f1:b6:45:49:7c:0f:b5:f4:4a: dd:9a:32:cb:b3:0b:8b:5a:3a:05:a5:41:c9:d3:43: d8:97:7e:ba:45:c4:6f:bc:1a:21:bc:1d:f2:b0:b5: 75:d3:ef:8f:eb:a6:09:97:7d:a4:aa:66:52:10:a5: 21:40:37:09:4a:a5:5d:6b:1e:e4:ba:85:eb:2d:55: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1A:51:6D:92:DB:B8:89:65:FC:EC:52:01:A2:A1:4F:56:6B:BC:62 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yxpRbZLbuIll_OxSAaKhT1ZrvGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.184.0/24 45.148.118.0/23 94.177.122.0/24 139.28.99.0/24 Signature Algorithm: sha256WithRSAEncryption a9:5f:b3:cc:ed:f1:75:36:72:ca:5d:f3:f5:a5:fa:9f:51:e0: f6:a9:77:72:2a:81:29:a0:7a:1b:09:3c:fc:85:36:39:43:e0: c3:38:9f:5f:5f:08:f4:5b:b9:9d:a7:f8:70:07:e3:87:fe:a0: df:51:ab:50:ef:ac:34:a8:86:38:93:90:6a:47:ee:1d:a2:57: 86:45:0a:ce:ba:d0:5a:2d:c0:61:c3:b5:e8:94:04:52:13:af: 91:eb:3f:2f:20:cf:d4:5e:5a:74:1e:7e:c4:db:36:e7:69:f5: b7:6b:25:83:8a:ff:9b:2a:00:d5:7d:62:fe:bd:16:35:b1:93: 3c:18:b4:77:42:a8:35:91:c9:4c:bf:09:d8:fc:f3:b2:75:a0: b2:d0:c5:67:d1:45:f9:a0:5d:06:e3:26:45:15:15:e4:07:11: 21:ee:8e:7a:5c:09:c2:6b:61:2d:fb:95:88:0c:eb:98:ef:ee: a6:a5:7a:18:80:8e:ee:03:48:5a:a5:7f:87:6a:5f:53:8c:2e: ab:92:96:95:78:58:f4:29:bd:a9:9e:1c:c8:42:af:b8:56:d0: ee:18:c3:41:6e:a7:d6:f5:5c:49:7e:33:80:ba:47:9d:ab:d7: 98:61:68:30:92:72:fd:54:46:f8:7e:63:bd:70:61:80:81:f0: 3a:56:47:fb -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsTuOjnrYtSOHNEm2tB0DrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjEyMTgwMDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjFhNTE2ZDkyZGJiODg5NjVmY2VjNTIwMWEyYTE0ZjU2NmJiYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPcjhqVJVOJ003OC7QaY5QjtBtL3 uk8ZizjPqArMoDj+QQya3XocwDGBlo/4mgwu6ZAwpiljT/zzd4FDovnxO60RvW2i VaZPwCJQn4v9GBhXTXifKGT5/6rdY9pQXhqPNWeJB3hJk4VzivH1q2akVn8jumxh 4wVXHy4X5q0FYoW+hZpJHYGrkJa1ExiJtDoCzULhGDY6i+VC+Ef8gs9ZyiyUQnyy snohma9VtxEdqX3vTL8dXSdMkATxtkVJfA+19ErdmjLLswuLWjoFpUHJ00PYl366 RcRvvBohvB3ysLV10++P66YJl32kqmZSEKUhQDcJSqVdax7kuoXrLVUvjwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMsaUW2S27iJZfzsUgGioU9Wa7xiMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEveXhwUmJaTGJ1SWxsX094U0FhS2hUMVpydkdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYO4AwQB LZR2AwQAXrF6AwQAixxjMA0GCSqGSIb3DQEBCwUAA4IBAQCpX7PM7fF1NnLKXfP1 pfqfUeD2qXdyKoEpoHobCTz8hTY5Q+DDOJ9fXwj0W7mdp/hwB+OH/qDfUatQ76w0 qIY4k5BqR+4doleGRQrOutBaLcBhw7XolARSE6+R6z8vIM/UXlp0Hn7E2zbnafW3 ayWDiv+bKgDVfWL+vRY1sZM8GLR3Qqg1kclMvwnY/POydaCy0MVn0UX5oF0G4yZF FRXkBxEh7o56XAnCa2Et+5WIDOuY7+6mpXoYgI7uA0hapX+Hal9TjC6rkpaVeFj0 Kb2pnhzIQq+4VtDuGMNBbqfW9VxJfjOAukedq9eYYWgwknL9VEb4fmO9cGGAgfA6 Vkf7 -----END CERTIFICATE-----Generated at Mon Dec 15 04:11:25 2025 by rpki-client