This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QwZpkS2c9beGzbxdLxRWRbCtSJ8.roa File: QwZpkS2c9beGzbxdLxRWRbCtSJ8.roa (raw, json) Hash identifier: DezfIGO4EScanwy4GKcETAnIzdnNnK8qPRMXGuIl8bs= Subject key identifier: 43:06:69:91:2D:9C:F5:B7:86:CD:BC:5D:2F:14:56:45:B0:AD:48:9F Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019ADA1BDC8E4ED0BF3452E9245177626FC1 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QwZpkS2c9beGzbxdLxRWRbCtSJ8.roa Signing time: Mon 01 Dec 2025 13:30:50 +0000 ROA not before: Mon 01 Dec 2025 13:30:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26272 IP address blocks: 89.213.41.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 01 Dec 2025 14:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:1b:dc:8e:4e:d0:bf:34:52:e9:24:51:77:62:6f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 13:30:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=430669912d9cf5b786cdbc5d2f145645b0ad489f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:cc:83:e9:ea:84:6a:f8:5c:ac:61:dd:ea: d9:cf:35:0d:1e:30:11:4a:4a:48:34:78:a2:91:45: 6f:2a:87:92:d3:d3:6c:e2:f1:ee:64:57:28:7a:66: df:dc:87:59:55:9b:0f:3a:d1:79:7b:16:4f:a8:b4: 1d:07:66:e8:c6:9a:ce:91:63:28:dd:83:6f:cb:71: 2a:66:73:51:01:ad:83:19:34:bf:f5:ec:48:ed:68: e6:87:72:2d:c2:a0:74:cc:f5:49:32:f6:fd:dc:5c: 76:ca:5f:20:40:2d:d1:38:0f:3a:29:94:a2:de:8c: 87:f8:17:31:ef:98:9c:d7:ab:da:ea:de:3b:86:30: 19:af:eb:4b:a7:c7:da:32:3a:9e:a5:57:65:0b:8f: d6:59:72:40:51:08:83:55:7b:41:43:86:2d:59:48: ec:74:0b:cf:5e:ca:fb:12:bb:5a:f7:51:37:0a:56: 40:01:2c:77:aa:11:70:14:96:03:c7:44:e0:25:46: 5c:6b:99:c0:32:f8:b5:21:2e:48:2a:22:e8:e6:7d: 51:1e:e4:3b:5f:b5:a0:df:c1:ce:1c:d0:1e:39:5b: 2f:c3:f9:7c:a5:6b:ba:0d:a7:50:7d:7b:e3:9d:f3: 8c:23:07:bd:53:d0:1f:a4:99:98:1c:8a:29:72:c5: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:69:91:2D:9C:F5:B7:86:CD:BC:5D:2F:14:56:45:B0:AD:48:9F X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QwZpkS2c9beGzbxdLxRWRbCtSJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.41.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:90:39:54:f1:0d:4b:03:e7:04:cc:14:25:04:fa:15:a3:32: 56:96:94:ca:f7:6a:04:06:4e:e5:91:aa:f0:43:58:71:9a:7b: 52:7c:77:99:03:52:40:8b:41:e6:0a:e8:c2:3f:18:e2:a5:71: af:52:7e:8c:00:ee:b0:7f:1e:e8:5a:2e:1f:cb:0e:c7:08:bf: 31:56:3f:db:d0:0f:16:9a:4b:27:e2:9e:74:4f:a2:c5:b3:49: be:ca:f7:77:c7:f4:76:5d:a7:08:96:2f:bd:b9:40:7b:4f:bc: c0:9e:d7:2f:f7:d4:bc:2c:a3:bd:75:76:29:08:fc:8f:cb:27: 43:ff:a6:a3:e5:f4:78:45:ee:27:12:84:b9:ea:88:4a:48:11: 4c:3d:dd:02:e8:c5:bc:60:c9:3b:98:db:a5:be:f4:c0:db:ea: a7:e1:4b:a0:7e:23:33:03:e6:dc:fe:e9:57:f1:72:86:e0:08: 29:0a:54:d5:c2:2d:51:7a:1b:08:61:3f:b9:8f:11:43:96:58: 24:3d:3c:ad:aa:60:f9:44:c8:51:57:35:40:0c:be:5a:0c:d7: 1f:c0:62:28:46:38:af:59:fa:dd:09:d7:aa:0a:0f:e1:30:bc: dc:04:0f:a1:a2:07:61:ae:69:d9:d1:b3:df:82:56:34:5e:96: ab:a2:fe:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZraG9yOTtC/NFLpJFF3Ym/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMTMzMDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzA2Njk5MTJkOWNmNWI3ODZjZGJjNWQyZjE0NTY0NWIwYWQ0ODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ADMg+nqhGr4XKxh3erZzzUNHjAR SkpINHiikUVvKoeS09Ns4vHuZFcoembf3IdZVZsPOtF5exZPqLQdB2boxprOkWMo 3YNvy3EqZnNRAa2DGTS/9exI7Wjmh3ItwqB0zPVJMvb93Fx2yl8gQC3ROA86KZSi 3oyH+Bcx75ic16va6t47hjAZr+tLp8faMjqepVdlC4/WWXJAUQiDVXtBQ4YtWUjs dAvPXsr7Erta91E3ClZAASx3qhFwFJYDx0TgJUZca5nAMvi1IS5IKiLo5n1RHuQ7 X7Wg38HOHNAeOVsvw/l8pWu6DadQfXvjnfOMIwe9U9AfpJmYHIopcsUxXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEMGaZEtnPW3hs28XS8UVkWwrUifMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUXdacGtTMmM5YmVHemJ4ZEx4UldSYkN0U0o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdUpMA0G CSqGSIb3DQEBCwUAA4IBAQBrkDlU8Q1LA+cEzBQlBPoVozJWlpTK92oEBk7lkarw Q1hxmntSfHeZA1JAi0HmCujCPxjipXGvUn6MAO6wfx7oWi4fyw7HCL8xVj/b0A8W mksn4p50T6LFs0m+yvd3x/R2XacIli+9uUB7T7zAntcv99S8LKO9dXYpCPyPyydD /6aj5fR4Re4nEoS56ohKSBFMPd0C6MW8YMk7mNulvvTA2+qn4UugfiMzA+bc/ulX 8XKG4AgpClTVwi1RehsIYT+5jxFDllgkPTytqmD5RMhRVzVADL5aDNcfwGIoRjiv WfrdCdeqCg/hMLzcBA+hogdhrmnZ0bPfglY0Xparov4g -----END CERTIFICATE-----Generated at Fri Dec 19 20:48:40 2025 by rpki-client