This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/AbcY2XYBhqjBsEXJl9vvrJmIvGo.roa File: AbcY2XYBhqjBsEXJl9vvrJmIvGo.roa (raw, json) Hash identifier: Pc031yZM6F4DnE+XcpfeItqnKe4z22C9hqeiZD3m+GQ= Subject key identifier: 01:B7:18:D9:76:01:86:A8:C1:B0:45:C9:97:DB:EF:AC:99:88:BC:6A Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019A6CE28F7F45C26DF0849FFE8F9B387FF7 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/AbcY2XYBhqjBsEXJl9vvrJmIvGo.roa Signing time: Mon 10 Nov 2025 08:29:38 +0000 ROA not before: Mon 10 Nov 2025 08:29:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 194.238.40.0/23 maxlen: 24 217.179.50.0/23 maxlen: 24 217.179.72.0/23 maxlen: 24 217.179.228.0/22 maxlen: 24 Validation: Failed, certificate revoked on Mon 24 Nov 2025 08:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:e2:8f:7f:45:c2:6d:f0:84:9f:fe:8f:9b:38:7f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Nov 10 08:29:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01b718d9760186a8c1b045c997dbefac9988bc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:07:ad:3a:52:56:e6:3c:54:8e:96:84:e2: 7c:ec:09:89:b9:4d:28:e6:dd:65:a6:d5:1f:35:da: 32:54:9d:69:3f:90:f4:ef:e5:80:e2:08:7c:0a:04: 4b:23:0e:36:3d:0f:37:4f:f3:bb:b6:bf:c8:de:04: 9a:59:87:b7:ca:5c:24:d8:c3:95:e4:cd:8f:0f:ff: 76:38:01:97:41:cc:9c:1c:46:dc:e7:c6:e3:25:7d: 79:9a:e4:8c:63:ce:2d:f4:44:2e:73:3d:ea:6b:d4: 76:32:e5:98:06:07:04:29:e0:98:f6:d8:6b:a1:9b: ae:3f:ae:7b:cd:bd:d2:16:90:ad:39:7b:dd:e2:b8: d9:03:36:bc:fc:a6:36:43:31:fe:cc:30:67:19:01: 42:9b:a0:b1:19:5a:47:3d:c1:fe:20:a3:7f:0e:c3: bc:2c:62:6e:c7:09:21:6a:bc:37:93:e8:b8:04:92: 11:05:4e:62:a1:55:ad:06:cd:c5:f3:7f:75:98:8f: 94:75:d5:94:07:6c:c1:56:99:a6:21:f7:ed:f1:83: 41:11:db:88:4e:f4:2a:66:cf:46:74:69:12:dc:d1: fd:02:2f:02:be:41:a7:7b:5e:85:77:bb:21:67:70: fc:b8:2e:96:a3:c2:48:ce:56:8f:28:a2:c8:15:9d: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B7:18:D9:76:01:86:A8:C1:B0:45:C9:97:DB:EF:AC:99:88:BC:6A X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/AbcY2XYBhqjBsEXJl9vvrJmIvGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.238.40.0/23 217.179.50.0/23 217.179.72.0/23 217.179.228.0/22 Signature Algorithm: sha256WithRSAEncryption 03:fe:ae:62:8a:4e:c0:44:86:1f:ae:74:1f:95:b4:e6:e5:4e: 45:a1:a0:01:12:0d:d5:84:7b:c4:16:bd:03:1b:8e:11:65:7e: 87:17:f7:8f:e9:9e:e7:04:26:0a:d7:d3:14:1e:c4:eb:26:79: 89:f7:ee:d0:db:44:02:f1:68:fa:1e:76:28:d0:84:8a:8b:38: a4:00:41:15:19:36:03:fb:9f:fa:1e:45:5a:43:97:92:d1:bb: a5:85:61:fc:6c:2e:61:49:66:b3:d8:1e:98:9d:9e:8a:98:48: 67:9a:b2:a0:9b:0f:7f:da:f7:7e:30:b8:ae:4d:bc:21:de:36: 83:21:7f:53:ad:07:11:f1:50:a0:b4:b9:e1:01:3c:90:8c:cd: 24:ac:d1:66:fa:c2:a5:f8:b6:2e:d1:ed:8f:5b:02:54:30:1d: 8e:65:74:09:52:66:40:4f:c6:31:0f:aa:6d:8e:ea:b8:df:80: 9c:91:85:f0:4c:21:ca:2c:cc:d7:a4:a8:b2:22:6b:59:6e:c9: c6:1b:13:0d:39:d5:af:2d:7e:59:0e:31:19:7c:b2:6e:1d:5a: ab:66:5e:7d:41:6e:d7:6f:01:21:7a:d3:c4:ff:ef:bd:cb:23: 43:d4:88:66:d0:55:9d:f9:c0:32:9d:78:17:eb:9f:d1:c2:43: b0:d9:60:be -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZps4o9/RcJt8ISf/o+bOH/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjUxMTEwMDgyOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWI3MThkOTc2MDE4NmE4YzFiMDQ1Yzk5N2RiZWZhYzk5ODhiYzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNoHrTpSVuY8VI6WhOJ87AmJuU0o 5t1lptUfNdoyVJ1pP5D07+WA4gh8CgRLIw42PQ83T/O7tr/I3gSaWYe3ylwk2MOV 5M2PD/92OAGXQcycHEbc58bjJX15muSMY84t9EQucz3qa9R2MuWYBgcEKeCY9thr oZuuP657zb3SFpCtOXvd4rjZAza8/KY2QzH+zDBnGQFCm6CxGVpHPcH+IKN/DsO8 LGJuxwkharw3k+i4BJIRBU5ioVWtBs3F8391mI+UddWUB2zBVpmmIfft8YNBEduI TvQqZs9GdGkS3NH9Ai8CvkGne16Fd7shZ3D8uC6Wo8JIzlaPKKLIFZ1MBQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAG3GNl2AYaowbBFyZfb76yZiLxqMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvQWJjWTJYWUJocWpCc0VYSmw5dnZySm1JdkdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBwu4oAwQB 2bMyAwQB2bNIAwQC2bPkMA0GCSqGSIb3DQEBCwUAA4IBAQAD/q5iik7ARIYfrnQf lbTm5U5FoaABEg3VhHvEFr0DG44RZX6HF/eP6Z7nBCYK19MUHsTrJnmJ9+7Q20QC 8Wj6HnYo0ISKizikAEEVGTYD+5/6HkVaQ5eS0bulhWH8bC5hSWaz2B6YnZ6KmEhn mrKgmw9/2vd+MLiuTbwh3jaDIX9TrQcR8VCgtLnhATyQjM0krNFm+sKl+LYu0e2P WwJUMB2OZXQJUmZAT8YxD6ptjuq434CckYXwTCHKLMzXpKiyImtZbsnGGxMNOdWv LX5ZDjEZfLJuHVqrZl59QW7XbwEhetPE/++9yyND1Ihm0FWd+cAynXgX65/RwkOw 2WC+ -----END CERTIFICATE-----Generated at Sun Dec 7 09:25:03 2025 by rpki-client