This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/mNi0-XbsdFNQ04QxC_SCuZsA_1w.roa File: mNi0-XbsdFNQ04QxC_SCuZsA_1w.roa (raw, json) Hash identifier: MvACiD62AuGz+453QpW4c5eIFMY6tEv9l9mi/XwYQeg= Subject key identifier: 98:D8:B4:F9:76:EC:74:53:50:D3:84:31:0B:F4:82:B9:9B:00:FF:5C Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019A7F587F82EBD63ED88067961EF087CA5B Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/mNi0-XbsdFNQ04QxC_SCuZsA_1w.roa Signing time: Thu 13 Nov 2025 22:31:37 +0000 ROA not before: Thu 13 Nov 2025 22:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207279 IP address blocks: 85.117.239.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 01 Dec 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7f:58:7f:82:eb:d6:3e:d8:80:67:96:1e:f0:87:ca:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Nov 13 22:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=98d8b4f976ec745350d384310bf482b99b00ff5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:eb:2e:70:98:b0:35:c9:48:bf:76:0f:ba: 17:10:64:8b:2d:16:73:c5:85:27:73:ad:6b:9b:65: d8:22:eb:27:ca:c5:ac:12:15:7e:80:3b:da:c2:8a: 66:18:37:91:66:69:84:89:ae:8a:36:2c:e7:1b:d4: 05:0f:9c:1a:e3:ab:6b:53:b7:98:00:8f:c9:b1:f8: 3c:32:56:c5:ed:5c:2e:3e:f2:0e:ac:85:53:43:35: 02:25:ae:fa:00:bd:a9:f4:51:1b:92:ee:83:6f:ef: 59:5a:be:20:28:a3:8e:0d:ad:b4:ef:24:df:36:a2: f2:7f:0e:f6:9d:6b:c0:00:c6:9f:5a:13:eb:58:d3: 15:9c:e6:5b:70:0d:29:75:1b:5f:41:8b:dc:2a:e8: 96:e6:7a:29:e1:2b:fa:83:b8:a1:b2:da:1e:db:81: 55:47:3e:5e:16:d2:cf:9b:1e:32:e3:be:c5:8b:3f: 02:eb:64:35:73:1e:b0:ed:af:6b:83:3a:cd:de:74: d1:f2:2d:29:a0:c0:47:42:80:eb:34:79:e5:e3:b7: 48:79:e1:1e:c5:7d:25:9a:7e:01:a6:e2:8a:f8:27: f1:90:69:32:f6:75:0f:81:43:71:40:92:59:52:79: ea:0c:df:cd:d8:b0:55:76:28:ba:5f:58:1e:8f:dc: ce:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:B4:F9:76:EC:74:53:50:D3:84:31:0B:F4:82:B9:9B:00:FF:5C X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/mNi0-XbsdFNQ04QxC_SCuZsA_1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.239.0/24 Signature Algorithm: sha256WithRSAEncryption 85:32:b4:c6:da:aa:de:e2:4f:5d:95:5f:23:a5:33:a3:c2:de: 2e:bc:49:dd:09:06:8c:e9:7a:58:18:0d:44:fe:59:20:2d:68: 7a:9c:83:8b:ac:8f:82:7f:f1:e3:5b:6e:70:76:c9:21:42:62: 62:30:2f:47:83:b2:13:a1:bb:17:fb:9f:cc:ec:07:9b:ab:7f: f5:ca:9d:17:3d:6f:8b:41:ef:7f:bf:cf:48:6e:97:90:09:34: ac:e3:31:70:cb:3f:c4:6b:70:bb:a7:98:ac:9e:dd:97:14:e4: d6:c8:22:aa:33:1d:19:4b:3e:a8:32:91:fa:82:00:9f:f2:0a: 3f:bf:aa:91:1c:ce:f2:9c:97:2f:76:4a:a2:3e:ae:2d:1e:4d: 71:3b:76:02:7c:e5:39:1c:44:74:04:04:58:9a:ad:56:54:01: d2:dc:b2:2b:bc:95:66:2d:1c:da:44:5d:49:0e:a8:5f:d1:29: 54:11:e7:62:0e:34:37:1b:c0:39:cc:c4:b6:10:84:f8:07:e6: 2a:a1:1d:e1:63:d8:31:71:76:f4:56:01:03:56:7d:a0:4b:3d: bd:53:13:47:b9:0b:ca:06:b4:aa:e2:e3:66:de:6c:0f:a9:7d: 9d:e7:0c:6d:c7:60:05:b8:65:78:d0:8f:45:a1:51:b8:74:db: 99:61:bf:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp/WH+C69Y+2IBnlh7wh8pbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMTEzMjIzMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGQ4YjRmOTc2ZWM3NDUzNTBkMzg0MzEwYmY0ODJiOTliMDBmZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5XrLnCYsDXJSL92D7oXEGSLLRZz xYUnc61rm2XYIusnysWsEhV+gDvawopmGDeRZmmEia6KNiznG9QFD5wa46trU7eY AI/Jsfg8MlbF7VwuPvIOrIVTQzUCJa76AL2p9FEbku6Db+9ZWr4gKKOODa207yTf NqLyfw72nWvAAMafWhPrWNMVnOZbcA0pdRtfQYvcKuiW5nop4Sv6g7ihstoe24FV Rz5eFtLPmx4y477Fiz8C62Q1cx6w7a9rgzrN3nTR8i0poMBHQoDrNHnl47dIeeEe xX0lmn4BpuKK+CfxkGky9nUPgUNxQJJZUnnqDN/N2LBVdii6X1gej9zOEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjYtPl27HRTUNOEMQv0grmbAP9cMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvbU5pMC1YYnNkRk5RMDRReENfU0N1WnNBXzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXXvMA0G CSqGSIb3DQEBCwUAA4IBAQCFMrTG2qre4k9dlV8jpTOjwt4uvEndCQaM6XpYGA1E /lkgLWh6nIOLrI+Cf/HjW25wdskhQmJiMC9Hg7ITobsX+5/M7Aebq3/1yp0XPW+L Qe9/v89IbpeQCTSs4zFwyz/Ea3C7p5isnt2XFOTWyCKqMx0ZSz6oMpH6ggCf8go/ v6qRHM7ynJcvdkqiPq4tHk1xO3YCfOU5HER0BARYmq1WVAHS3LIrvJVmLRzaRF1J Dqhf0SlUEediDjQ3G8A5zMS2EIT4B+YqoR3hY9gxcXb0VgEDVn2gSz29UxNHuQvK BrSq4uNm3mwPqX2d5wxtx2AFuGV40I9FoVG4dNuZYb+q -----END CERTIFICATE-----Generated at Mon Dec 8 00:52:16 2025 by rpki-client