This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kkSumQxXzQ4hSJI45-Jrsj764_c.roa File: kkSumQxXzQ4hSJI45-Jrsj764_c.roa (raw, json) Hash identifier: 3eS9kDahr98YZZe2ZLjmjyDOYYZfy3/E/hB9NwhDP3E= Subject key identifier: 92:44:AE:99:0C:57:CD:0E:21:48:92:38:E7:E2:6B:B2:3E:FA:E3:F7 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 01973A11D9BCAC9CE0CA42DCBD0327953B8C Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kkSumQxXzQ4hSJI45-Jrsj764_c.roa Signing time: Wed 04 Jun 2025 08:32:17 +0000 ROA not before: Wed 04 Jun 2025 08:32:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137409 IP address blocks: 14.102.61.0/24 maxlen: 24 14.102.62.0/24 maxlen: 24 14.102.84.0/24 maxlen: 24 14.102.86.0/24 maxlen: 24 45.150.180.0/24 maxlen: 24 62.169.128.0/24 maxlen: 24 66.56.87.0/24 maxlen: 24 103.61.196.0/24 maxlen: 24 103.138.78.0/24 maxlen: 24 167.160.28.0/24 maxlen: 24 170.62.238.0/24 maxlen: 24 192.253.209.0/24 maxlen: 24 198.55.31.0/24 maxlen: 24 203.188.174.0/24 maxlen: 24 203.188.175.0/24 maxlen: 24 203.188.176.0/24 maxlen: 24 203.188.177.0/24 maxlen: 24 203.188.178.0/24 maxlen: 24 203.188.179.0/24 maxlen: 24 203.188.180.0/24 maxlen: 24 203.188.184.0/24 maxlen: 24 203.188.185.0/24 maxlen: 24 203.188.186.0/24 maxlen: 24 203.188.187.0/24 maxlen: 24 203.188.188.0/24 maxlen: 24 203.188.189.0/24 maxlen: 24 203.188.190.0/24 maxlen: 24 203.188.191.0/24 maxlen: 24 212.32.51.0/24 maxlen: 24 212.32.70.0/24 maxlen: 24 212.32.71.0/24 maxlen: 24 212.32.73.0/24 maxlen: 24 212.32.76.0/24 maxlen: 24 212.32.77.0/24 maxlen: 24 212.32.78.0/24 maxlen: 24 212.32.79.0/24 maxlen: 24 212.56.55.0/24 maxlen: 24 213.254.163.0/24 maxlen: 24 213.254.172.0/24 maxlen: 24 213.254.173.0/24 maxlen: 24 213.254.175.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 04 Jun 2025 09:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3a:11:d9:bc:ac:9c:e0:ca:42:dc:bd:03:27:95:3b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jun 4 08:32:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9244ae990c57cd0e21489238e7e26bb23efae3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:d7:cb:8a:ef:16:98:c8:77:5a:88:18:21: c2:8f:8e:0f:04:42:68:e7:ba:4b:b9:65:48:5e:95: 00:bc:e3:c0:40:f8:9c:af:8c:14:aa:c4:75:ef:dc: f9:d5:8b:10:74:07:9e:f2:25:0b:b9:88:f6:8f:02: 84:a3:07:36:74:a8:be:de:4b:4a:b3:c3:1a:b1:21: 53:ee:e4:87:ea:d2:52:85:58:3b:30:99:a1:b4:5c: 80:d5:ca:7d:28:17:d6:90:6e:dc:da:b6:a2:f7:12: 34:ff:41:fc:f6:f4:02:a3:3d:07:86:8c:ad:6a:15: ed:4d:2d:22:c1:32:fa:3a:ad:f3:21:5b:71:76:83: 03:c6:a2:43:70:41:fe:af:c9:75:05:b1:d7:36:31: f8:14:44:e7:2e:3c:da:ba:4a:91:c5:8d:2f:77:31: 09:34:31:be:06:75:62:7e:92:ee:4f:96:c1:43:6a: fd:e3:b3:a0:5d:54:66:dc:41:5d:ce:30:5e:69:f2: 61:b3:19:8b:1a:40:29:74:99:03:00:ef:d0:99:e7: b0:08:ae:2c:01:05:62:bc:bc:9d:ae:d0:d1:ca:38: 12:9a:0a:ab:68:78:85:0f:db:f6:26:3c:fa:8c:bc: 6c:d8:b8:24:9d:7a:92:1f:45:11:90:fe:68:7c:08: 0a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:44:AE:99:0C:57:CD:0E:21:48:92:38:E7:E2:6B:B2:3E:FA:E3:F7 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kkSumQxXzQ4hSJI45-Jrsj764_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.61.0-14.102.62.255 14.102.84.0/24 14.102.86.0/24 45.150.180.0/24 62.169.128.0/24 66.56.87.0/24 103.61.196.0/24 103.138.78.0/24 167.160.28.0/24 170.62.238.0/24 192.253.209.0/24 198.55.31.0/24 203.188.174.0-203.188.180.255 203.188.184.0/21 212.32.51.0/24 212.32.70.0/23 212.32.73.0/24 212.32.76.0/22 212.56.55.0/24 213.254.163.0/24 213.254.172.0/23 213.254.175.0/24 Signature Algorithm: sha256WithRSAEncryption 84:f9:8d:87:67:9b:8c:c7:eb:48:b6:1f:2d:df:df:b4:21:f3: c5:31:00:9f:69:bc:8b:aa:af:13:ef:3a:92:5a:88:ee:c6:57: 3f:d2:fe:27:d3:80:db:60:34:54:07:f2:30:a9:c7:3e:48:0d: 32:75:c4:a8:4e:a5:2a:78:0d:12:35:71:72:7e:b2:0a:ef:ac: f8:60:77:ae:a4:bf:9f:c8:8e:cb:a1:c8:f6:f2:89:5e:0d:6d: 1c:fd:07:88:fa:ae:66:26:44:40:20:cf:d9:86:67:25:1c:b8: c9:06:da:68:66:61:c8:cf:d6:fe:90:31:fd:f0:68:f1:1b:00: 58:b3:f9:73:a7:e7:49:24:88:28:b7:4a:fb:48:c6:06:05:3e: e4:86:6e:75:64:51:86:db:81:fb:ec:fc:ab:f4:98:20:38:a0: bd:7a:88:e8:ed:e3:83:19:0f:91:62:cc:e7:a5:dc:61:1e:af: 12:e5:dc:37:7b:7c:c8:e5:2b:76:11:42:45:d2:eb:12:66:ce: ef:96:68:b5:c4:a0:64:5a:ed:7f:07:d5:56:b1:4a:71:62:ea: 59:47:13:ad:67:c1:b6:9e:f3:6f:10:23:ad:65:8f:d3:be:b2: 9f:03:7e:25:68:97:f9:e3:f2:d3:1a:66:d8:3c:9d:b0:20:01: 58:79:de:b8 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZc6Edm8rJzgykLcvQMnlTuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUwNjA0MDgzMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQ0YWU5OTBjNTdjZDBlMjE0ODkyMzhlN2UyNmJiMjNlZmFlM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H3Xy4rvFpjId1qIGCHCj44PBEJo 57pLuWVIXpUAvOPAQPicr4wUqsR179z51YsQdAee8iULuYj2jwKEowc2dKi+3ktK s8MasSFT7uSH6tJShVg7MJmhtFyA1cp9KBfWkG7c2rai9xI0/0H89vQCoz0Hhoyt ahXtTS0iwTL6Oq3zIVtxdoMDxqJDcEH+r8l1BbHXNjH4FETnLjzaukqRxY0vdzEJ NDG+BnVifpLuT5bBQ2r947OgXVRm3EFdzjBeafJhsxmLGkApdJkDAO/QmeewCK4s AQVivLydrtDRyjgSmgqraHiFD9v2Jjz6jLxs2LgknXqSH0URkP5ofAgKAwIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFJJErpkMV80OIUiSOOfia7I++uP3MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEva2tTdW1ReFh6UTRoU0pJNDUtSnJzajc2NF9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQwDAME AA5mPQMEAA5mPgMEAA5mVAMEAA5mVgMEAC2WtAMEAD6pgAMEAEI4VwMEAGc9xAME AGeKTgMEAKegHAMEAKo+7gMEAMD90QMEAMY3HzAMAwQBy7yuAwQAy7y0AwQDy7y4 AwQA1CAzAwQB1CBGAwQA1CBJAwQC1CBMAwQA1Dg3AwQA1f6jAwQB1f6sAwQA1f6v MA0GCSqGSIb3DQEBCwUAA4IBAQCE+Y2HZ5uMx+tIth8t39+0IfPFMQCfabyLqq8T 7zqSWojuxlc/0v4n04DbYDRUB/Iwqcc+SA0ydcSoTqUqeA0SNXFyfrIK76z4YHeu pL+fyI7Locj28oleDW0c/QeI+q5mJkRAIM/ZhmclHLjJBtpoZmHIz9b+kDH98Gjx GwBYs/lzp+dJJIgot0r7SMYGBT7khm51ZFGG24H77Pyr9JggOKC9eojo7eODGQ+R YsznpdxhHq8S5dw3e3zI5St2EUJF0usSZs7vlmi1xKBkWu1/B9VWsUpxYupZRxOt Z8G2nvNvECOtZY/TvrKfA34laJf54/LTGmbYPJ2wIAFYed64 -----END CERTIFICATE-----Generated at Sat Dec 20 14:14:29 2025 by rpki-client