This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lmo4AeZDXmtj7UgbxCkT5T7EpME.roa File: lmo4AeZDXmtj7UgbxCkT5T7EpME.roa (raw, json) Hash identifier: ChN2xk2IvqFqSDFGfctjmhJ5sM154nWHaJ8nFx9WJTw= Subject key identifier: 96:6A:38:01:E6:43:5E:6B:63:ED:48:1B:C4:29:13:E5:3E:C4:A4:C1 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A6D532BAE6F4A0A2C34587A2A94516F2A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lmo4AeZDXmtj7UgbxCkT5T7EpME.roa Signing time: Mon 10 Nov 2025 10:32:38 +0000 ROA not before: Mon 10 Nov 2025 10:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 37.252.26.0/24 maxlen: 24 77.93.136.0/24 maxlen: 24 79.99.76.0/24 maxlen: 24 82.152.61.0/24 maxlen: 24 82.152.71.0/24 maxlen: 24 82.152.107.0/24 maxlen: 24 82.153.41.0/24 maxlen: 24 82.153.144.0/24 maxlen: 24 89.213.127.0/24 maxlen: 24 89.213.129.0/24 maxlen: 24 89.213.132.0/24 maxlen: 24 89.213.212.0/24 maxlen: 24 89.213.224.0/24 maxlen: 24 213.130.135.0/24 maxlen: 24 213.210.11.0/24 maxlen: 24 217.144.153.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 11 Nov 2025 11:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:53:2b:ae:6f:4a:0a:2c:34:58:7a:2a:94:51:6f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 10 10:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=966a3801e6435e6b63ed481bc42913e53ec4a4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:5c:f0:6f:d7:59:94:79:e5:f1:9c:6a:37: 0b:ae:c2:00:6c:41:e6:c3:e1:7d:c9:38:cb:be:70: 64:e4:31:ac:3b:79:07:6f:5d:c6:6d:a4:e0:44:bf: 48:1a:1b:e5:0b:54:9a:45:33:ca:5f:3b:41:cc:d0: 17:82:b8:af:4c:34:fb:45:81:77:bb:d1:73:aa:a5: ab:92:6d:b0:7d:4d:3f:e2:14:37:eb:77:5a:76:88: 7e:b3:8b:bb:61:98:03:97:6d:64:97:c6:5a:38:32: f0:63:8e:1c:dd:ea:30:40:d4:0f:3e:dd:02:a4:49: 74:69:c8:5e:d8:28:46:b2:ee:87:bb:28:1d:c6:56: 80:22:03:5f:d4:4a:da:bd:fa:03:ae:78:ea:1d:bb: de:86:7e:c4:2f:90:57:b8:b3:6a:d9:bd:70:48:f2: 38:02:c5:93:e8:a1:4c:a7:4f:f8:09:e5:c2:61:2b: 8a:63:8c:a2:ef:92:ef:ab:80:fc:0e:87:32:e1:1d: f3:39:56:28:3d:d6:ab:99:58:6b:b0:96:3e:6b:e7: 55:a4:8e:91:17:99:fc:67:c3:7b:f7:d8:1f:07:28: 25:b3:f3:b4:3d:b7:ed:a1:fc:14:f1:99:62:cc:51: c8:86:f8:e3:1a:04:78:25:87:26:df:bf:d3:d1:8f: 54:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:38:01:E6:43:5E:6B:63:ED:48:1B:C4:29:13:E5:3E:C4:A4:C1 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lmo4AeZDXmtj7UgbxCkT5T7EpME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.26.0/24 77.93.136.0/24 79.99.76.0/24 82.152.61.0/24 82.152.71.0/24 82.152.107.0/24 82.153.41.0/24 82.153.144.0/24 89.213.127.0/24 89.213.129.0/24 89.213.132.0/24 89.213.212.0/24 89.213.224.0/24 213.130.135.0/24 213.210.11.0/24 217.144.153.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d6:a8:fd:07:7b:8b:9f:0f:a7:7d:07:d3:6b:29:54:f8:56: 7d:e3:f4:8e:50:2f:33:f1:4a:d3:71:f4:a9:eb:1b:b5:93:d1: 9a:0f:87:c1:cc:e3:62:c4:de:16:88:c2:5f:01:fd:67:66:90: 6e:1b:1c:44:e0:f6:23:4c:78:ef:92:bd:2c:9e:d4:74:ca:24: f7:a2:17:16:ab:fc:31:8e:6a:20:c1:2e:d0:c1:52:b1:b7:66: 37:5a:dc:c5:61:0c:5c:f8:1f:0a:60:41:35:7c:47:d8:a5:8e: 20:bc:78:8d:c3:56:3a:dd:bf:1e:eb:21:66:e9:23:3c:73:e8: 14:5d:e2:50:96:61:68:ac:07:12:e3:9c:58:bd:7c:ce:70:34: 8c:36:56:aa:a0:98:d1:64:d7:c3:0d:5d:44:cf:da:26:d4:3f: 31:ae:b5:17:81:5c:f9:cc:e9:33:e8:19:04:60:5f:91:5d:19: a5:07:4c:90:bf:43:18:0b:53:95:5d:a5:56:25:51:70:04:5d: 10:5b:97:03:61:f4:08:2a:1a:fb:fe:d6:c7:c6:48:61:7c:05: ba:68:65:5e:1a:6e:f1:1d:8c:a8:98:6f:dc:b6:46:6e:ea:18: d3:ea:fe:d7:a3:11:cc:16:8a:22:cd:64:7d:95:00:41:c6:28: ab:f1:60:8b -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZptUyuub0oKLDRYeiqUUW8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTEwMTAzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjZhMzgwMWU2NDM1ZTZiNjNlZDQ4MWJjNDI5MTNlNTNlYzRhNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYpc8G/XWZR55fGcajcLrsIAbEHm w+F9yTjLvnBk5DGsO3kHb13GbaTgRL9IGhvlC1SaRTPKXztBzNAXgrivTDT7RYF3 u9FzqqWrkm2wfU0/4hQ363dadoh+s4u7YZgDl21kl8ZaODLwY44c3eowQNQPPt0C pEl0ache2ChGsu6HuygdxlaAIgNf1EravfoDrnjqHbvehn7EL5BXuLNq2b1wSPI4 AsWT6KFMp0/4CeXCYSuKY4yi75Lvq4D8Docy4R3zOVYoPdarmVhrsJY+a+dVpI6R F5n8Z8N799gfBygls/O0PbftofwU8ZlizFHIhvjjGgR4JYcm37/T0Y9UIwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFJZqOAHmQ15rY+1IG8QpE+U+xKTBMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvbG1vNEFlWkRYbXRqN1VnYnhDa1Q1VDdFcE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAJfwaAwQA TV2IAwQAT2NMAwQAUpg9AwQAUphHAwQAUphrAwQAUpkpAwQAUpmQAwQAWdV/AwQA WdWBAwQAWdWEAwQAWdXUAwQAWdXgAwQA1YKHAwQA1dILAwQA2ZCZMA0GCSqGSIb3 DQEBCwUAA4IBAQCE1qj9B3uLnw+nfQfTaylU+FZ94/SOUC8z8UrTcfSp6xu1k9Ga D4fBzONixN4WiMJfAf1nZpBuGxxE4PYjTHjvkr0sntR0yiT3ohcWq/wxjmogwS7Q wVKxt2Y3WtzFYQxc+B8KYEE1fEfYpY4gvHiNw1Y63b8e6yFm6SM8c+gUXeJQlmFo rAcS45xYvXzOcDSMNlaqoJjRZNfDDV1Ez9om1D8xrrUXgVz5zOkz6BkEYF+RXRml B0yQv0MYC1OVXaVWJVFwBF0QW5cDYfQIKhr7/tbHxkhhfAW6aGVeGm7xHYyomG/c tkZu6hjT6v7XoxHMFooizWR9lQBBxiir8WCL -----END CERTIFICATE-----Generated at Sun Dec 7 09:25:04 2025 by rpki-client