This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SsS0gKB8n5sXR9NuZsYmZCwXUJ0.roa File: SsS0gKB8n5sXR9NuZsYmZCwXUJ0.roa (raw, json) Hash identifier: +dCo2EJG6HKHKJR6AoerSxAOLjrZbWpqvwgJEgRAK0g= Subject key identifier: 4A:C4:B4:80:A0:7C:9F:9B:17:47:D3:6E:66:C6:26:64:2C:17:50:9D Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B12D5A495C438B822479447EC105CC810 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SsS0gKB8n5sXR9NuZsYmZCwXUJ0.roa Signing time: Fri 12 Dec 2025 13:52:29 +0000 ROA not before: Fri 12 Dec 2025 13:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396190 IP address blocks: 152.163.4.0/22 maxlen: 22 152.163.64.0/22 maxlen: 22 152.163.88.0/22 maxlen: 22 152.163.104.0/22 maxlen: 22 152.163.140.0/22 maxlen: 22 152.163.192.0/22 maxlen: 22 152.163.216.0/22 maxlen: 22 152.163.240.0/22 maxlen: 22 Validation: Failed, certificate revoked on Mon 15 Dec 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:d5:a4:95:c4:38:b8:22:47:94:47:ec:10:5c:c8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Dec 12 13:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ac4b480a07c9f9b1747d36e66c626642c17509d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:5f:76:e6:51:34:99:13:dd:d0:c0:1a:bf: 98:36:6d:6d:65:b1:21:ab:0b:85:54:88:93:e7:d7: 4a:fe:eb:8b:70:40:89:25:df:28:7a:ce:ae:67:7e: 26:40:93:43:50:f2:e1:1a:b7:c8:6c:c8:ea:00:f8: 00:92:12:f5:a4:b5:7c:82:89:91:90:d6:26:6d:5c: 58:0a:66:d9:61:f1:7e:bb:cb:3c:0b:94:29:88:8d: 63:c6:cf:75:7e:e5:a5:2a:e3:e8:9c:fc:79:d1:31: 15:2d:7b:4b:97:d9:fa:7f:b0:5d:18:7c:90:b0:8c: d2:a8:ce:0f:01:fb:e5:ee:44:02:c7:c1:1b:f2:c9: bd:4a:b0:f3:0e:03:92:17:e0:da:a6:d2:7f:4d:0a: 59:0c:02:77:59:76:bd:c5:9e:62:ee:ad:82:22:0f: 0e:14:df:0b:92:a2:ad:27:e0:d9:0a:1e:75:09:6e: d8:56:a2:07:b3:ed:95:db:f4:46:53:52:28:81:db: 61:eb:43:61:ab:a8:3f:e9:cd:45:e9:d0:0e:91:27: 6f:86:81:eb:29:5c:6b:de:09:e2:fe:ed:37:3b:4b: 4b:bc:5e:67:bb:10:3d:63:8f:df:67:d1:9f:3a:57: 2d:c5:93:71:e5:8e:07:8b:82:4b:b5:c0:3c:15:a6: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C4:B4:80:A0:7C:9F:9B:17:47:D3:6E:66:C6:26:64:2C:17:50:9D X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SsS0gKB8n5sXR9NuZsYmZCwXUJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.163.4.0/22 152.163.64.0/22 152.163.88.0/22 152.163.104.0/22 152.163.140.0/22 152.163.192.0/22 152.163.216.0/22 152.163.240.0/22 Signature Algorithm: sha256WithRSAEncryption 97:ed:7b:c1:55:99:36:6b:87:37:02:03:68:7f:86:59:47:d4: 90:63:6f:a2:18:91:41:fd:be:ba:e0:91:7f:7f:c2:93:bc:14: 4c:1c:5c:00:9f:82:6d:5e:98:0e:c7:5f:6b:76:70:c7:55:59: 69:70:bc:10:ef:fb:bc:14:b5:76:b2:0f:09:a3:18:80:28:cb: 7f:ae:71:74:62:54:f7:84:25:a7:f1:95:eb:92:63:ea:5a:73: 14:ce:1a:9a:d6:df:7a:0b:9d:c3:6d:81:e1:54:e7:b1:e0:88: 19:24:07:cc:5f:f4:7d:22:f6:71:47:10:e4:88:34:13:50:4a: 42:2e:d4:cc:8a:bd:be:5e:d9:3b:a8:22:73:ff:87:41:8e:fe: 50:39:11:34:cb:ee:17:71:f1:da:b1:91:7f:32:56:4d:90:7a: 8b:7d:98:25:05:f2:dc:0b:1f:9d:fc:16:76:91:61:79:60:ab: 35:7c:fb:49:d2:37:92:e2:cc:d0:49:70:d4:e7:d0:59:a3:d8: 3b:6a:24:83:47:09:f8:b4:d3:ab:74:fc:2d:d9:ed:b6:49:bf: f8:a2:25:ba:e4:d6:68:0a:09:ab:5d:b9:79:f8:bb:2e:32:0f: f9:d9:56:20:eb:eb:e2:13:d8:75:aa:09:07:79:01:e9:e8:0f: 1c:b6:f2:b4 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZsS1aSVxDi4IkeUR+wQXMgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMjEyMTM1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWM0YjQ4MGEwN2M5ZjliMTc0N2QzNmU2NmM2MjY2NDJjMTc1MDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIVfduZRNJkT3dDAGr+YNm1tZbEh qwuFVIiT59dK/uuLcECJJd8oes6uZ34mQJNDUPLhGrfIbMjqAPgAkhL1pLV8gomR kNYmbVxYCmbZYfF+u8s8C5QpiI1jxs91fuWlKuPonPx50TEVLXtLl9n6f7BdGHyQ sIzSqM4PAfvl7kQCx8Eb8sm9SrDzDgOSF+DaptJ/TQpZDAJ3WXa9xZ5i7q2CIg8O FN8LkqKtJ+DZCh51CW7YVqIHs+2V2/RGU1Iogdth60Nhq6g/6c1F6dAOkSdvhoHr KVxr3gni/u03O0tLvF5nuxA9Y4/fZ9GfOlctxZNx5Y4Hi4JLtcA8FabqDQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFErEtICgfJ+bF0fTbmbGJmQsF1CdMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvU3NTMGdLQjhuNXNYUjlOdVpzWW1aQ3dYVUowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCmKMEAwQC mKNAAwQCmKNYAwQCmKNoAwQCmKOMAwQCmKPAAwQCmKPYAwQCmKPwMA0GCSqGSIb3 DQEBCwUAA4IBAQCX7XvBVZk2a4c3AgNof4ZZR9SQY2+iGJFB/b664JF/f8KTvBRM HFwAn4JtXpgOx19rdnDHVVlpcLwQ7/u8FLV2sg8JoxiAKMt/rnF0YlT3hCWn8ZXr kmPqWnMUzhqa1t96C53DbYHhVOex4IgZJAfMX/R9IvZxRxDkiDQTUEpCLtTMir2+ Xtk7qCJz/4dBjv5QORE0y+4XcfHasZF/MlZNkHqLfZglBfLcCx+d/BZ2kWF5YKs1 fPtJ0jeS4szQSXDU59BZo9g7aiSDRwn4tNOrdPwt2e22Sb/4oiW65NZoCgmrXbl5 +LsuMg/52VYg6+viE9h1qgkHeQHp6A8ctvK0 -----END CERTIFICATE-----Generated at Mon Dec 15 18:49:47 2025 by rpki-client