This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YTNA7JARtA_eoNrHu-ePXCfR7dw.roa File: YTNA7JARtA_eoNrHu-ePXCfR7dw.roa (raw, json) Hash identifier: ZXoUedbGrgnG2Aa/KapmYoTRfpubv9gWTyM/0/1x024= Subject key identifier: 61:33:40:EC:90:11:B4:0F:DE:A0:DA:C7:BB:E7:8F:5C:27:D1:ED:DC Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019A60C5A82AADCF4109578A57D7B5CDCF27 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YTNA7JARtA_eoNrHu-ePXCfR7dw.roa Signing time: Sat 08 Nov 2025 00:02:37 +0000 ROA not before: Sat 08 Nov 2025 00:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.100.164.0/22 maxlen: 22 212.100.169.0/24 maxlen: 24 212.100.172.0/22 maxlen: 22 212.100.184.0/22 maxlen: 22 Validation: Failed, certificate revoked on Sun 09 Nov 2025 02:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:60:c5:a8:2a:ad:cf:41:09:57:8a:57:d7:b5:cd:cf:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Nov 8 00:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=613340ec9011b40fdea0dac7bbe78f5c27d1eddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:7c:8c:9e:03:8e:e2:45:eb:c6:84:0e:60: c1:db:2f:03:8c:d2:d5:30:fc:e4:d0:65:35:49:81: 78:67:22:05:27:b5:53:65:d5:63:a5:b9:69:11:3a: ca:ed:f9:31:f4:ca:b4:f4:a2:fd:b8:b2:01:91:41: fd:ed:b6:ec:9f:49:31:82:bf:9a:4d:6c:ab:a1:66: 1c:16:82:2c:df:f8:51:41:18:2e:15:fb:a2:11:c5: 58:4d:51:06:e1:af:53:ca:f3:ec:f8:b9:d5:f1:5e: 80:77:ec:6c:df:18:82:1c:db:a8:12:7f:82:1a:60: 55:49:80:79:aa:a1:61:90:ac:c9:ac:e3:9d:14:c7: 20:ae:4c:cf:91:4f:8f:16:d3:c4:d8:86:40:f4:60: e3:c7:6a:c2:1a:c2:f4:12:2c:ee:1e:84:9e:2d:64: 39:62:e2:0c:7d:ff:4c:6a:11:27:34:6b:3b:95:ca: c9:c4:5e:b1:bc:1e:28:c4:7c:09:66:40:62:f8:6e: 10:b3:9e:cf:ef:1e:4b:d7:f7:b5:ae:06:4e:dc:7f: f2:fa:dc:80:20:0a:0c:8c:88:cb:f1:1d:ff:f0:41: 5a:b0:44:57:bb:da:bb:1e:52:61:b1:37:97:f8:15: 50:21:1b:8e:a4:3a:a3:2c:a4:4c:4e:5b:e1:e4:2c: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:33:40:EC:90:11:B4:0F:DE:A0:DA:C7:BB:E7:8F:5C:27:D1:ED:DC X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YTNA7JARtA_eoNrHu-ePXCfR7dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.164.0/22 212.100.169.0/24 212.100.172.0/22 212.100.184.0/22 Signature Algorithm: sha256WithRSAEncryption 96:00:ad:70:08:86:ca:6b:44:04:ac:3e:1b:d5:92:30:3c:ef: 6f:51:5b:ed:09:17:2b:07:6c:73:51:24:5e:b5:0e:51:b2:75: ec:60:dd:af:b7:71:4a:49:82:ee:33:03:21:13:66:79:af:f0: d9:21:83:8b:4c:35:55:1f:08:f5:7b:89:a9:98:44:44:1a:c2: 2b:f7:39:4a:0d:8c:0d:b8:d6:7c:56:b4:74:fb:19:02:04:69: 66:08:7a:86:1d:3f:e7:30:9b:5b:99:b2:d8:29:34:da:73:3a: c5:53:8a:50:2e:33:a7:85:1f:54:a5:fb:7f:e5:79:ee:2c:47: ec:71:aa:38:83:71:f2:e3:46:e5:1a:2b:64:28:c3:f9:9b:17: 58:37:7f:8e:23:50:23:29:1f:14:fd:cb:36:1b:83:34:89:9e: 7e:71:75:a6:03:18:ac:9d:c4:36:5e:32:03:a0:da:09:a2:79: b3:41:6b:12:d7:18:f1:3f:d9:0b:d5:45:3c:23:1c:b0:75:48: 9e:11:94:2e:90:a3:12:4d:b9:44:b0:48:c1:2c:a0:eb:40:c4: 62:06:f6:14:c0:5c:dd:9c:e8:82:a6:40:4e:a1:1e:c3:9e:de: 03:83:a2:d3:17:93:6d:7b:85:63:52:c9:8e:be:9d:ff:32:23: 17:a0:af:21 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZpgxagqrc9BCVeKV9e1zc8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUxMTA4MDAwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTMzNDBlYzkwMTFiNDBmZGVhMGRhYzdiYmU3OGY1YzI3ZDFlZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Z8jJ4DjuJF68aEDmDB2y8DjNLV MPzk0GU1SYF4ZyIFJ7VTZdVjpblpETrK7fkx9Mq09KL9uLIBkUH97bbsn0kxgr+a TWyroWYcFoIs3/hRQRguFfuiEcVYTVEG4a9TyvPs+LnV8V6Ad+xs3xiCHNuoEn+C GmBVSYB5qqFhkKzJrOOdFMcgrkzPkU+PFtPE2IZA9GDjx2rCGsL0EizuHoSeLWQ5 YuIMff9MahEnNGs7lcrJxF6xvB4oxHwJZkBi+G4Qs57P7x5L1/e1rgZO3H/y+tyA IAoMjIjL8R3/8EFasERXu9q7HlJhsTeX+BVQIRuOpDqjLKRMTlvh5CwtYwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGEzQOyQEbQP3qDax7vnj1wn0e3cMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvWVROQTdKQVJ0QV9lb05ySHUtZVBYQ2ZSN2R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQC1GSkAwQA 1GSpAwQC1GSsAwQC1GS4MA0GCSqGSIb3DQEBCwUAA4IBAQCWAK1wCIbKa0QErD4b 1ZIwPO9vUVvtCRcrB2xzUSRetQ5RsnXsYN2vt3FKSYLuMwMhE2Z5r/DZIYOLTDVV Hwj1e4mpmEREGsIr9zlKDYwNuNZ8VrR0+xkCBGlmCHqGHT/nMJtbmbLYKTTaczrF U4pQLjOnhR9Upft/5XnuLEfscao4g3Hy40blGitkKMP5mxdYN3+OI1AjKR8U/cs2 G4M0iZ5+cXWmAxisncQ2XjIDoNoJonmzQWsS1xjxP9kL1UU8IxywdUieEZQukKMS TblEsEjBLKDrQMRiBvYUwFzdnOiCpkBOoR7Dnt4Dg6LTF5Nte4VjUsmOvp3/MiMX oK8h -----END CERTIFICATE-----Generated at Sun Dec 7 12:38:44 2025 by rpki-client