This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/__xLKsv3fSU6u5Jl1kiefG1XL0w.roa File: __xLKsv3fSU6u5Jl1kiefG1XL0w.roa (raw, json) Hash identifier: BjBVaQSfgg1p7rTDEwqGS+OEHeyiispOLl9E6GigkTk= Subject key identifier: FF:FC:4B:2A:CB:F7:7D:25:3A:BB:92:65:D6:48:9E:7C:6D:57:2F:4C Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019AFD69A23AE5FB16A0AC7A12A6549BD374 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/__xLKsv3fSU6u5Jl1kiefG1XL0w.roa Signing time: Mon 08 Dec 2025 10:02:29 +0000 ROA not before: Mon 08 Dec 2025 10:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 62.72.162.0/23 maxlen: 23 62.72.164.0/22 maxlen: 22 62.72.164.0/23 maxlen: 23 62.72.168.0/24 maxlen: 24 62.72.171.0/24 maxlen: 24 62.72.187.0/24 maxlen: 24 81.21.1.0/24 maxlen: 24 81.21.2.0/23 maxlen: 23 81.21.4.0/22 maxlen: 24 176.57.56.0/24 maxlen: 24 176.57.63.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 10 Dec 2025 17:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:69:a2:3a:e5:fb:16:a0:ac:7a:12:a6:54:9b:d3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Dec 8 10:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fffc4b2acbf77d253abb9265d6489e7c6d572f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:9b:d9:dc:65:99:33:e5:e4:04:6b:ba:ae: 7d:72:82:06:27:c9:ce:5a:dc:28:98:6b:3a:92:5e: 40:39:39:c7:db:cd:1f:73:1c:82:f8:ae:d6:9c:71: d0:16:5e:ad:7d:e8:23:80:1d:f6:04:31:95:bd:d5: 15:b2:97:03:2d:eb:dc:72:f6:db:dd:19:dc:94:56: 01:07:f3:ec:06:24:39:28:52:4e:a4:12:c9:a3:d4: b9:fc:8c:a4:30:9d:94:be:87:25:d6:fe:aa:b5:60: 1b:fc:3c:4b:02:b3:a5:fe:61:1e:1d:8c:36:14:92: 7f:2c:3a:6f:71:28:81:4b:48:f6:be:27:b8:e5:87: e9:58:ef:4b:35:19:6e:f9:87:4d:47:2a:0a:73:2d: b9:1c:3a:60:41:e8:72:e0:ed:7f:a1:72:56:ee:1c: cb:b2:e1:90:7a:4c:7f:f8:d6:12:e0:14:2a:c7:cf: f9:cb:f0:95:5c:6d:b5:81:14:b4:52:9f:51:67:c6: 8f:d2:6b:1c:af:44:25:bd:0b:0b:42:40:4f:00:39: 35:f2:0f:2b:fb:40:56:66:76:d7:93:c6:dc:0d:d2: a3:40:71:cc:e4:37:a3:78:78:9d:be:19:a2:75:45: e8:c2:16:8b:88:c2:d3:d6:08:11:4c:e3:53:b4:f1: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FC:4B:2A:CB:F7:7D:25:3A:BB:92:65:D6:48:9E:7C:6D:57:2F:4C X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/__xLKsv3fSU6u5Jl1kiefG1XL0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.162.0-62.72.168.255 62.72.171.0/24 62.72.187.0/24 81.21.1.0-81.21.7.255 176.57.56.0/24 176.57.63.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:f9:ca:17:d5:42:91:fb:a1:ef:bd:e2:1e:03:c8:5e:13:ea: 01:c2:5b:e1:bf:7e:9c:d2:82:b1:7a:03:ba:76:d7:98:f9:e8: 7c:74:45:34:44:70:7e:51:47:85:8b:10:f7:1a:ff:57:52:01: 85:36:a0:6a:4a:3c:15:9a:fa:53:04:7a:b6:b3:7f:b5:74:9f: a5:6e:9f:3f:10:45:f7:e9:d9:ab:98:68:18:d9:02:49:17:ba: 30:d2:48:e1:b9:3d:84:8a:cc:a6:da:ea:5e:86:50:13:93:cf: e9:ef:88:29:83:23:3f:60:d7:cf:cf:09:2a:42:04:68:d2:18: d0:96:c4:f1:5c:2e:77:14:7b:aa:d9:d4:9e:b6:21:13:5b:0b: 90:c6:9e:89:8e:c2:ff:cb:a3:0d:dd:db:5a:e8:de:3c:78:ec: 8f:d1:18:26:3d:33:ed:aa:84:4d:71:4d:50:b0:4a:ff:b7:2c: 6a:13:61:02:bb:08:06:ac:e8:07:fd:f6:63:a3:88:13:da:c4: 8e:41:89:91:a9:b3:07:71:45:23:54:84:97:b8:bb:d7:08:a6: b1:1f:be:b9:e4:e8:fc:b1:67:09:dd:75:ad:33:d3:54:34:d0: e0:9f:bb:f4:47:db:fe:fd:0c:ca:9c:78:cf:15:7f:a1:a5:92: e1:75:06:8d -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZr9aaI65fsWoKx6EqZUm9N0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjUxMjA4MTAwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmZjNGIyYWNiZjc3ZDI1M2FiYjkyNjVkNjQ4OWU3YzZkNTcyZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAKb2dxlmTPl5ARruq59coIGJ8nO WtwomGs6kl5AOTnH280fcxyC+K7WnHHQFl6tfegjgB32BDGVvdUVspcDLevccvbb 3RnclFYBB/PsBiQ5KFJOpBLJo9S5/IykMJ2Uvocl1v6qtWAb/DxLArOl/mEeHYw2 FJJ/LDpvcSiBS0j2vie45YfpWO9LNRlu+YdNRyoKcy25HDpgQehy4O1/oXJW7hzL suGQekx/+NYS4BQqx8/5y/CVXG21gRS0Up9RZ8aP0mscr0QlvQsLQkBPADk18g8r +0BWZnbXk8bcDdKjQHHM5DejeHidvhmidUXowhaLiMLT1ggRTONTtPGwoQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFP/8SyrL930lOruSZdZInnxtVy9MMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvX194TEtzdjNmU1U2dTVKbDFraWVmRzFYTDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAE+SKID BAA+SKgDBAA+SKsDBAA+SLswDAMEAFEVAQMEA1EVAAMEALA5OAMEALA5PzANBgkq hkiG9w0BAQsFAAOCAQEAT/nKF9VCkfuh773iHgPIXhPqAcJb4b9+nNKCsXoDunbX mPnofHRFNERwflFHhYsQ9xr/V1IBhTagako8FZr6UwR6trN/tXSfpW6fPxBF9+nZ q5hoGNkCSRe6MNJI4bk9hIrMptrqXoZQE5PP6e+IKYMjP2DXz88JKkIEaNIY0JbE 8VwudxR7qtnUnrYhE1sLkMaeiY7C/8ujDd3bWujePHjsj9EYJj0z7aqETXFNULBK /7csahNhArsIBqzoB/32Y6OIE9rEjkGJkamzB3FFI1SEl7i71wimsR++ueTo/LFn Cd11rTPTVDTQ4J+79Efb/v0Mypx4zxV/oaWS4XUGjQ== -----END CERTIFICATE-----Generated at Thu Dec 11 02:55:39 2025 by rpki-client