This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hh7-KEqTZZNLWxriRiIoz34U1ak.roa File: hh7-KEqTZZNLWxriRiIoz34U1ak.roa (raw, json) Hash identifier: DEq70xhY6GNkhRm+gIPW+RdM19OmsLwvY81Cg9qh33o= Subject key identifier: 86:1E:FE:28:4A:93:65:93:4B:5B:1A:E2:46:22:28:CF:7E:14:D5:A9 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B1E600CDCE124405932C4C3D68F925ABC Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hh7-KEqTZZNLWxriRiIoz34U1ak.roa Signing time: Sun 14 Dec 2025 19:39:29 +0000 ROA not before: Sun 14 Dec 2025 19:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 79.172.200.0/23 maxlen: 24 79.172.201.0/24 maxlen: 24 79.172.219.0/24 maxlen: 24 79.172.250.0/23 maxlen: 24 87.229.8.0/22 maxlen: 22 87.229.11.0/24 maxlen: 24 87.229.12.0/24 maxlen: 24 87.229.23.0/24 maxlen: 24 87.229.37.0/24 maxlen: 24 87.229.80.0/23 maxlen: 24 87.229.81.0/24 maxlen: 24 87.229.124.0/23 maxlen: 24 Validation: Failed, certificate revoked on Mon 15 Dec 2025 07:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:60:0c:dc:e1:24:40:59:32:c4:c3:d6:8f:92:5a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 14 19:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=861efe284a9365934b5b1ae2462228cf7e14d5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:87:68:ea:df:8c:83:bd:b1:9f:20:89:ec: 11:7b:4e:fd:83:5a:96:ea:99:f8:38:b3:19:ec:0c: d1:e5:a6:2f:97:7e:4e:bf:7e:91:d8:af:89:74:55: 54:bf:0d:b0:05:f4:69:a6:41:c6:b2:cb:53:c0:21: 2d:d7:b7:69:69:44:42:b0:5f:a3:61:32:fe:c4:51: 31:bf:da:41:a6:5d:1f:24:28:dd:3b:b8:c6:0a:d1: 0e:08:5b:29:62:ae:a3:a0:d7:d9:9c:b6:45:ce:d9: 12:de:89:98:b3:ff:e1:56:bf:85:c3:7b:8c:11:5f: f5:95:f4:b8:50:7e:f2:cf:3f:15:e1:7d:ee:71:af: 0f:bb:5c:84:0e:1f:42:1f:67:e6:56:5c:38:f5:d6: 8e:e9:b2:50:b4:58:90:b7:fe:09:a9:3d:69:15:29: b6:5e:aa:3d:1b:12:e9:3f:43:ae:7c:1d:0b:63:da: 32:da:ad:c9:2b:34:80:27:29:37:0a:c6:c7:72:c5: 9a:dc:10:9a:0a:ec:84:43:b4:e0:40:41:f0:f8:64: 75:b7:fb:f6:2f:89:3a:b8:13:5b:98:c4:4e:67:8b: 38:d4:4e:9e:fb:3f:05:22:03:05:65:2d:73:0a:a0: 7b:28:5f:d4:30:38:0b:eb:63:24:fb:a5:b5:9c:11: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1E:FE:28:4A:93:65:93:4B:5B:1A:E2:46:22:28:CF:7E:14:D5:A9 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hh7-KEqTZZNLWxriRiIoz34U1ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.200.0/23 79.172.219.0/24 79.172.250.0/23 87.229.8.0-87.229.12.255 87.229.23.0/24 87.229.37.0/24 87.229.80.0/23 87.229.124.0/23 Signature Algorithm: sha256WithRSAEncryption 72:8f:1a:d8:20:bc:37:ff:21:41:47:ae:07:81:4b:fc:46:39: 18:6f:0e:42:da:84:43:36:56:92:d5:5c:d6:4b:a6:aa:ce:fc: bb:ef:68:d4:a9:19:d2:bf:6e:06:e7:c2:4c:62:4e:e4:04:ae: 2f:53:69:16:eb:09:f6:70:f9:88:43:2f:74:d8:5d:63:7d:31: e4:e0:bd:94:33:e7:f3:03:73:cc:71:ad:b8:0b:91:6f:75:f3: dd:ae:21:0d:2d:4d:ff:b9:bc:0f:ce:28:50:7f:6d:d5:8f:52: 97:db:f0:53:46:89:1e:a5:15:c1:44:cb:ac:37:79:c5:72:b7: ec:39:7a:75:83:c4:3f:54:29:f5:63:b2:cd:d9:30:13:62:b4: 03:4d:08:47:ff:e8:d3:ff:28:c7:31:b7:ac:8c:8c:e6:e8:fd: e8:3e:02:8b:41:31:3d:e2:b6:1c:96:fc:17:6a:e0:9b:66:58: 57:ca:9d:8d:bf:c6:e9:55:c5:e2:5e:75:03:d4:5c:79:dc:b1: 0c:2d:f6:e1:92:64:16:2f:77:89:f1:51:38:bf:72:15:58:c4: 24:31:bf:87:ed:70:aa:ac:48:b9:53:cd:05:98:9f:e1:85:d4: 06:92:77:b7:20:32:f2:04:1f:a1:e3:8a:93:d5:9f:db:a4:53: bc:5e:94:4a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZseYAzc4SRAWTLEw9aPklq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjE0MTkzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjFlZmUyODRhOTM2NTkzNGI1YjFhZTI0NjIyMjhjZjdlMTRkNWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dyHaOrfjIO9sZ8giewRe079g1qW 6pn4OLMZ7AzR5aYvl35Ov36R2K+JdFVUvw2wBfRppkHGsstTwCEt17dpaURCsF+j YTL+xFExv9pBpl0fJCjdO7jGCtEOCFspYq6joNfZnLZFztkS3omYs//hVr+Fw3uM EV/1lfS4UH7yzz8V4X3uca8Pu1yEDh9CH2fmVlw49daO6bJQtFiQt/4JqT1pFSm2 Xqo9GxLpP0OufB0LY9oy2q3JKzSAJyk3CsbHcsWa3BCaCuyEQ7TgQEHw+GR1t/v2 L4k6uBNbmMROZ4s41E6e+z8FIgMFZS1zCqB7KF/UMDgL62Mk+6W1nBGTGQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFIYe/ihKk2WTS1sa4kYiKM9+FNWpMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvaGg3LUtFcVRaWk5MV3hyaVJpSW96MzRVMWFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBT6zIAwQA T6zbAwQBT6z6MAwDBANX5QgDBABX5QwDBABX5RcDBABX5SUDBAFX5VADBAFX5Xww DQYJKoZIhvcNAQELBQADggEBAHKPGtggvDf/IUFHrgeBS/xGORhvDkLahEM2VpLV XNZLpqrO/LvvaNSpGdK/bgbnwkxiTuQEri9TaRbrCfZw+YhDL3TYXWN9MeTgvZQz 5/MDc8xxrbgLkW91892uIQ0tTf+5vA/OKFB/bdWPUpfb8FNGiR6lFcFEy6w3ecVy t+w5enWDxD9UKfVjss3ZMBNitANNCEf/6NP/KMcxt6yMjObo/eg+AotBMT3ithyW /Bdq4JtmWFfKnY2/xulVxeJedQPUXHncsQwt9uGSZBYvd4nxUTi/chVYxCQxv4ft cKqsSLlTzQWYn+GF1AaSd7cgMvIEH6HjipPVn9ukU7xelEo= -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:12 2025 by rpki-client