This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/MzqdLN3l5V16fN-79v7GtbvymeQ.roa File: MzqdLN3l5V16fN-79v7GtbvymeQ.roa (raw, json) Hash identifier: 5sMGCuFO+6EgRIu8knjHUtKWHkf9YV5t78e+JcHLzR0= Subject key identifier: 33:3A:9D:2C:DD:E5:E5:5D:7A:7C:DF:BB:F6:FE:C6:B5:BB:F2:99:E4 Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3 Certificate serial: 019B7B35C4130EDC8489DCFF236AFE2EAAEC Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/MzqdLN3l5V16fN-79v7GtbvymeQ.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215324 IP address blocks: 185.140.53.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 02 Jan 2026 11:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c4:13:0e:dc:84:89:dc:ff:23:6a:fe:2e:aa:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=333a9d2cdde5e55d7a7cdfbbf6fec6b5bbf299e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:18:12:7c:8d:9f:ad:b4:15:57:8e:86:07:eb: d9:de:68:a5:0c:bc:65:06:1b:1f:a3:ee:37:11:a1: 57:70:1e:2a:cb:52:72:91:b7:47:6a:cb:35:0a:b4: a1:f7:54:9f:7a:a4:6c:15:8b:9c:1f:70:7f:a6:2a: cc:0c:25:b9:22:9b:30:07:4c:2c:fe:d5:0e:ef:9d: 6e:3f:96:af:c2:0d:b9:15:14:08:97:08:c6:1a:b2: cd:0a:3c:e2:d4:8a:26:63:9f:63:c8:91:b3:14:fd: 87:9f:b9:f1:cf:b1:f9:44:2b:09:6e:08:f5:fb:c5: 44:b5:20:56:7b:d6:c7:48:9b:70:75:14:cf:52:08: 31:60:c5:74:06:cc:80:35:3d:7f:59:42:eb:11:ed: 9c:31:9a:d7:51:f6:3a:3a:e1:73:d4:ff:cf:c9:17: 60:e9:2d:06:c1:11:48:bd:8b:5c:89:16:44:ad:68: 94:f8:50:4b:40:c7:77:10:9e:a7:07:6a:f6:03:c1: b0:aa:c1:6b:f2:cc:a4:e9:d4:72:fa:3c:f1:e7:9b: 5e:bb:5d:30:e1:72:77:27:3d:09:0c:4d:38:53:f9: 0b:d3:c7:9d:a3:34:93:3d:13:7b:89:03:67:02:df: 04:09:92:bb:0d:46:9f:e3:02:ce:e5:e8:ec:40:08: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:9D:2C:DD:E5:E5:5D:7A:7C:DF:BB:F6:FE:C6:B5:BB:F2:99:E4 X509v3 Authority Key Identifier: keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/MzqdLN3l5V16fN-79v7GtbvymeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.53.0/24 Signature Algorithm: sha256WithRSAEncryption 12:a4:ca:91:d7:2c:f2:15:a0:a9:b9:69:5c:67:22:26:c7:2e: 77:2a:55:d4:8a:cd:d6:c5:07:f7:cd:09:b3:38:f3:98:62:81: 14:e8:d2:0f:75:77:67:b5:92:86:ef:c3:7a:10:9c:91:ba:b5: 16:4f:e1:34:12:18:52:1a:10:8f:a4:65:d3:98:22:d5:bd:03: fb:26:50:2c:b6:ae:65:47:42:ad:5a:67:0f:ae:c0:94:9a:a1: 2e:0d:54:d6:bf:fe:19:1e:1e:28:00:f1:9c:dd:c0:03:37:fb: 27:65:76:33:f6:b5:3b:2f:0a:f0:15:7a:33:ec:fa:d9:e4:73: b9:70:39:c6:41:ef:cd:a9:84:ce:0c:45:6c:a0:35:c8:44:9c: 87:d4:ec:b3:76:6a:44:72:cc:f3:71:8c:cd:b8:58:8e:a5:aa: e9:9c:47:94:99:56:3f:33:bb:23:d4:c1:56:db:80:8b:85:3e: 09:ef:c7:00:ef:f5:36:7a:70:10:14:b9:11:52:31:0a:a5:55: 7c:6c:d1:5f:f4:5b:61:97:dc:11:4c:25:c4:49:41:54:51:29: 03:24:0a:f7:82:4b:fb:3e:42:a5:eb:39:c3:27:11:a5:f8:13: 9e:f2:bb:d5:a4:97:93:27:53:dd:52:81:a0:9a:f1:6d:3a:fd: 95:3d:13:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcQTDtyEidz/I2r+LqrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz OGM1YjMwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzNhOWQyY2RkZTVlNTVkN2E3Y2RmYmJmNmZlYzZiNWJiZjI5OWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hgSfI2frbQVV46GB+vZ3milDLxl Bhsfo+43EaFXcB4qy1JykbdHass1CrSh91SfeqRsFYucH3B/pirMDCW5IpswB0ws /tUO751uP5avwg25FRQIlwjGGrLNCjzi1IomY59jyJGzFP2Hn7nxz7H5RCsJbgj1 +8VEtSBWe9bHSJtwdRTPUggxYMV0BsyANT1/WULrEe2cMZrXUfY6OuFz1P/PyRdg 6S0GwRFIvYtciRZErWiU+FBLQMd3EJ6nB2r2A8GwqsFr8syk6dRy+jzx55teu10w 4XJ3Jz0JDE04U/kL08edozSTPRN7iQNnAt8ECZK7DUaf4wLO5ejsQAgZGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDM6nSzd5eVdenzfu/b+xrW78pnkMB8GA1UdIwQY MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct ZTk3ODIwNDFjYzI0LzEvTXpxZExOM2w1VjE2Zk4tNzl2N0d0YnZ5bWVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0 LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYw1MA0G CSqGSIb3DQEBCwUAA4IBAQASpMqR1yzyFaCpuWlcZyImxy53KlXUis3WxQf3zQmz OPOYYoEU6NIPdXdntZKG78N6EJyRurUWT+E0EhhSGhCPpGXTmCLVvQP7JlAstq5l R0KtWmcPrsCUmqEuDVTWv/4ZHh4oAPGc3cADN/snZXYz9rU7LwrwFXoz7PrZ5HO5 cDnGQe/NqYTODEVsoDXIRJyH1OyzdmpEcszzcYzNuFiOparpnEeUmVY/M7sj1MFW 24CLhT4J78cA7/U2enAQFLkRUjEKpVV8bNFf9Fthl9wRTCXESUFUUSkDJAr3gkv7 PkKl6znDJxGl+BOe8rvVpJeTJ1PdUoGgmvFtOv2VPRM8 -----END CERTIFICATE-----Generated at Thu Jan 29 13:07:35 2026 by rpki-client