This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/ZW0pFuzMZWv-4Mc5PYqYvggW9KU.roa File: ZW0pFuzMZWv-4Mc5PYqYvggW9KU.roa (raw, json) Hash identifier: CZmEoZhDl8gmyOno1q+UywKQJZ5SykQO6a/GjnzBr8M= Subject key identifier: 65:6D:29:16:EC:CC:65:6B:FE:E0:C7:39:3D:8A:98:BE:08:16:F4:A5 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019748F4473385DAAC0AAF720B522DA4E9C9 Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/ZW0pFuzMZWv-4Mc5PYqYvggW9KU.roa Signing time: Sat 07 Jun 2025 05:54:17 +0000 ROA not before: Sat 07 Jun 2025 05:54:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210976 IP address blocks: 5.129.208.0/24 maxlen: 24 5.129.209.0/24 maxlen: 24 5.129.210.0/24 maxlen: 24 5.129.212.0/24 maxlen: 24 5.129.213.0/24 maxlen: 24 5.129.214.0/24 maxlen: 24 5.129.216.0/24 maxlen: 24 5.129.217.0/24 maxlen: 24 5.129.218.0/24 maxlen: 24 5.129.219.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 25 Jun 2025 03:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:f4:47:33:85:da:ac:0a:af:72:0b:52:2d:a4:e9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jun 7 05:54:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=656d2916eccc656bfee0c7393d8a98be0816f4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:f7:f9:02:84:c4:3a:2a:2e:05:88:eb:7a: 90:b9:34:d5:8e:00:04:03:7c:8c:4e:74:6d:f2:43: 87:7c:95:71:c7:1c:8f:26:08:81:16:37:1a:30:c8: 05:c2:13:c5:67:6c:45:63:48:7d:0a:dc:07:6f:c3: e8:18:8a:bf:0c:15:36:06:a7:28:4e:32:8d:f6:97: f9:48:8e:e5:96:46:88:f6:ee:22:7a:12:c1:b5:79: 4d:5d:f4:ea:17:25:04:60:b2:67:69:9f:e1:75:fe: 32:09:65:20:67:32:6b:90:71:78:cc:05:51:44:de: 18:e2:a3:0f:8d:eb:9b:79:cc:d1:3d:bc:99:a6:f7: 17:9d:7c:5f:a7:0b:c8:58:56:53:dc:f2:f2:be:f1: c1:4b:20:6e:d3:a0:99:d9:51:2b:1f:0b:3b:6e:55: 8e:a7:54:25:0c:67:0f:f1:86:33:a0:38:98:0d:4a: a4:e6:54:3a:fa:e9:03:73:6b:e3:7b:97:02:23:0c: b6:58:61:03:a4:b1:57:d7:27:8d:dd:c7:a4:7c:4e: b0:34:a7:28:01:41:34:4e:2b:4c:c8:53:52:39:aa: fd:d4:26:20:84:bb:e5:a8:d0:b7:67:0b:0e:81:d7: cc:5a:52:df:09:73:03:3d:cb:33:15:42:53:08:14: d8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6D:29:16:EC:CC:65:6B:FE:E0:C7:39:3D:8A:98:BE:08:16:F4:A5 X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/ZW0pFuzMZWv-4Mc5PYqYvggW9KU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.129.208.0-5.129.210.255 5.129.212.0-5.129.214.255 5.129.216.0/22 Signature Algorithm: sha256WithRSAEncryption 76:c1:56:c6:96:4e:5f:aa:a3:4c:dc:65:9c:a7:c9:29:7c:26: 2b:a1:bc:b7:87:4d:5d:49:77:2f:44:3d:66:96:b9:21:2f:ed: 3f:eb:43:30:3e:a7:75:ac:e7:d4:47:fe:68:01:2d:5c:51:72: dc:21:f5:61:2b:08:ac:7c:ad:bc:7e:cd:ab:91:99:15:7e:46: d4:d3:fa:33:1b:a7:e7:06:68:d9:d7:ab:e6:ca:83:f9:91:69: 2d:d5:61:0f:6d:a2:4e:93:2c:1c:c6:19:e2:b7:49:b9:60:e7: 11:8a:b6:e2:c7:63:b6:01:9c:98:c5:8a:cc:2e:5e:cf:64:b0: 9f:29:87:fb:6e:26:4c:f2:9f:aa:f4:fe:d7:39:b4:b4:96:0b: ed:5b:fb:a6:17:fe:da:e9:e9:69:26:83:9f:11:17:e9:58:df: cc:81:97:15:0e:32:89:64:43:1c:fc:1c:27:24:d5:c3:8c:5b: cb:d7:1f:32:84:98:66:3e:43:ed:80:5c:bf:11:6c:9d:08:fc: 98:3d:d2:27:5f:b3:87:a2:46:db:16:10:eb:63:11:5a:e9:96: 43:9b:e4:e5:2e:ca:80:1f:53:22:ee:7d:49:89:8d:9f:ce:65: a3:ad:be:6e:1e:51:53:9a:b8:8b:df:f2:24:37:f9:5f:90:e3: 1d:bf:fe:80 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZdI9EczhdqsCq9yC1ItpOnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjUwNjA3MDU1NDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTZkMjkxNmVjY2M2NTZiZmVlMGM3MzkzZDhhOThiZTA4MTZmNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTT3+QKExDoqLgWI63qQuTTVjgAE A3yMTnRt8kOHfJVxxxyPJgiBFjcaMMgFwhPFZ2xFY0h9CtwHb8PoGIq/DBU2Bqco TjKN9pf5SI7llkaI9u4iehLBtXlNXfTqFyUEYLJnaZ/hdf4yCWUgZzJrkHF4zAVR RN4Y4qMPjeubeczRPbyZpvcXnXxfpwvIWFZT3PLyvvHBSyBu06CZ2VErHws7blWO p1QlDGcP8YYzoDiYDUqk5lQ6+ukDc2vje5cCIwy2WGEDpLFX1yeN3cekfE6wNKco AUE0TitMyFNSOar91CYghLvlqNC3ZwsOgdfMWlLfCXMDPcszFUJTCBTYuQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGVtKRbszGVr/uDHOT2KmL4IFvSlMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvWlcwcEZ1ek1aV3YtNE1jNVBZcVl2Z2dXOUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAQFgdAD BAAFgdIwDAMEAgWB1AMEAAWB1gMEAgWB2DANBgkqhkiG9w0BAQsFAAOCAQEAdsFW xpZOX6qjTNxlnKfJKXwmK6G8t4dNXUl3L0Q9Zpa5IS/tP+tDMD6ndazn1Ef+aAEt XFFy3CH1YSsIrHytvH7Nq5GZFX5G1NP6Mxun5wZo2der5sqD+ZFpLdVhD22iTpMs HMYZ4rdJuWDnEYq24sdjtgGcmMWKzC5ez2SwnymH+24mTPKfqvT+1zm0tJYL7Vv7 phf+2unpaSaDnxEX6VjfzIGXFQ4yiWRDHPwcJyTVw4xby9cfMoSYZj5D7YBcvxFs nQj8mD3SJ1+zh6JG2xYQ62MRWumWQ5vk5S7KgB9TIu59SYmNn85lo62+bh5RU5q4 i9/yJDf5X5DjHb/+gA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:14:24 2025 by rpki-client