This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/SSckaSdGsGza-p9ibXclYAxko90.roa File: SSckaSdGsGza-p9ibXclYAxko90.roa (raw, json) Hash identifier: oC6q7zPDob6UgFHT7bIOJ+n8vutLeFbtGxk/JfKiooY= Subject key identifier: 49:27:24:69:27:46:B0:6C:DA:FA:9F:62:6D:77:25:60:0C:64:A3:DD Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Certificate serial: 019B08502889E095031A283293023BC17A02 Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/SSckaSdGsGza-p9ibXclYAxko90.roa Signing time: Wed 10 Dec 2025 12:50:29 +0000 ROA not before: Wed 10 Dec 2025 12:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13099 IP address blocks: 213.172.65.0/24 maxlen: 24 213.172.70.0/24 maxlen: 24 213.172.71.0/24 maxlen: 24 213.172.83.0/24 maxlen: 24 213.172.84.0/24 maxlen: 24 213.172.92.0/24 maxlen: 24 213.172.94.0/24 maxlen: 24 213.172.95.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 16 Dec 2025 10:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:50:28:89:e0:95:03:1a:28:32:93:02:3b:c1:7a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Validity Not Before: Dec 10 12:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=492724692746b06cdafa9f626d7725600c64a3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:02:17:dc:98:75:8a:da:d9:11:d2:b6:52:57: 92:ad:8c:13:6f:70:25:9c:d7:e7:e4:47:37:f9:75: 44:8c:25:8d:be:9f:fd:02:18:07:0a:bc:00:de:c5: 64:d1:8e:f3:8a:1c:6e:7a:89:14:06:2e:2a:0b:12: ff:0b:d9:24:31:2e:d4:11:54:d5:fa:d5:6f:70:71: ef:99:44:22:ba:aa:bb:5d:c1:d8:18:dd:d9:20:0f: c1:21:5b:25:17:0f:b7:90:ad:76:eb:7a:0c:cd:0e: 68:2e:28:ca:8f:15:8c:2d:78:49:c6:fb:da:ac:ab: 7d:56:03:b4:8e:99:5e:1c:f7:51:42:87:5f:0c:61: 4c:0f:c4:cb:c4:f4:df:ae:7e:14:77:cb:6f:7f:e3: 20:6c:c5:6a:74:83:78:d9:33:5f:4f:83:b4:25:1a: 02:62:b8:5a:84:42:e2:be:32:44:90:54:5e:eb:07: e0:1c:6a:d9:b5:d1:a6:f5:ac:6b:26:c8:c3:af:a4: a4:00:3d:6f:09:c7:f2:b2:09:ef:67:c1:b7:79:f1: 6b:d1:cc:3e:01:b7:b0:e2:4e:6e:76:7a:83:f9:52: e7:74:e7:75:a0:bf:7f:1a:99:46:cc:92:b9:03:ed: e4:d1:40:71:e6:31:01:00:63:24:d0:42:07:be:5c: 97:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:27:24:69:27:46:B0:6C:DA:FA:9F:62:6D:77:25:60:0C:64:A3:DD X509v3 Authority Key Identifier: keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/SSckaSdGsGza-p9ibXclYAxko90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.172.65.0/24 213.172.70.0/23 213.172.83.0-213.172.84.255 213.172.92.0/24 213.172.94.0/23 Signature Algorithm: sha256WithRSAEncryption 08:10:6a:b6:cc:e1:03:2e:f4:de:37:bf:91:5c:12:7c:4d:99: 88:7b:e9:ae:97:4f:23:65:49:dc:05:0a:7f:f9:f9:12:f9:13: 0d:f8:c8:ea:55:59:31:91:a5:f8:91:3a:9b:3d:0d:c9:29:11: 60:02:9e:12:8e:c4:f7:96:e0:66:c2:b0:9b:e8:4a:ea:5a:77: 78:72:c8:98:21:8a:af:49:98:37:a0:c7:3d:bc:13:e7:f1:85: 92:5a:cc:19:ec:12:37:ff:62:81:0b:91:a9:e8:38:12:39:a5: 34:81:50:a8:bb:fd:2c:dc:81:0d:06:5a:d9:1c:4e:c9:41:53: c1:40:51:29:d5:ab:0d:be:3f:f5:6b:9d:75:a0:99:fa:7d:95: d3:23:bb:ba:99:86:09:bd:c0:90:ef:9d:d8:fb:d6:97:ea:73: 2f:9b:54:72:3e:e7:a7:53:be:bd:44:a1:f2:89:77:38:79:57: 74:20:01:2e:fe:b6:07:9c:1f:f1:3c:c9:4b:85:f4:fb:57:80: fb:72:0a:79:62:c1:32:dc:16:9d:b1:9c:c6:cd:44:3f:bb:eb: 09:ee:b9:f3:c5:04:f5:9b:5d:fa:74:f9:d9:c9:cb:7e:11:d0: 7b:55:a8:bb:a6:6b:4f:29:da:53:8b:8e:9f:3e:57:43:3e:cc: 45:af:4a:fa -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZsIUCiJ4JUDGigykwI7wXoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0 YjRmZTUwHhcNMjUxMjEwMTI1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTI3MjQ2OTI3NDZiMDZjZGFmYTlmNjI2ZDc3MjU2MDBjNjRhM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/gIX3Jh1itrZEdK2UleSrYwTb3Al nNfn5Ec3+XVEjCWNvp/9AhgHCrwA3sVk0Y7zihxueokUBi4qCxL/C9kkMS7UEVTV +tVvcHHvmUQiuqq7XcHYGN3ZIA/BIVslFw+3kK1263oMzQ5oLijKjxWMLXhJxvva rKt9VgO0jpleHPdRQodfDGFMD8TLxPTfrn4Ud8tvf+MgbMVqdIN42TNfT4O0JRoC YrhahELivjJEkFRe6wfgHGrZtdGm9axrJsjDr6SkAD1vCcfysgnvZ8G3efFr0cw+ Abew4k5udnqD+VLndOd1oL9/GplGzJK5A+3k0UBx5jEBAGMk0EIHvlyXmwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFEknJGknRrBs2vqfYm13JWAMZKPdMB8GA1UdIwQY MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt YTI4YmNlNWQ1ZGE1LzEvU1Nja2FTZEdzR3phLXA5aWJYY2xZQXhrbzkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1 LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQA1axBAwQB 1axGMAwDBADVrFMDBADVrFQDBADVrFwDBAHVrF4wDQYJKoZIhvcNAQELBQADggEB AAgQarbM4QMu9N43v5FcEnxNmYh76a6XTyNlSdwFCn/5+RL5Ew34yOpVWTGRpfiR Ops9DckpEWACnhKOxPeW4GbCsJvoSupad3hyyJghiq9JmDegxz28E+fxhZJazBns Ejf/YoELkanoOBI5pTSBUKi7/SzcgQ0GWtkcTslBU8FAUSnVqw2+P/VrnXWgmfp9 ldMju7qZhgm9wJDvndj71pfqcy+bVHI+56dTvr1EofKJdzh5V3QgAS7+tgecH/E8 yUuF9PtXgPtyCnliwTLcFp2xnMbNRD+76wnuufPFBPWbXfp0+dnJy34R0HtVqLum a08p2lOLjp8+V0M+zEWvSvo= -----END CERTIFICATE-----Generated at Tue Dec 16 18:40:45 2025 by rpki-client