This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nLi9evu2RsLWw2nYtSaGlXseNLc.roa File: nLi9evu2RsLWw2nYtSaGlXseNLc.roa (raw, json) Hash identifier: yTCC8/i5oVXgU/j3YXoxZ2oLnx/GxUrM9fQ2IQSA2xI= Subject key identifier: 9C:B8:BD:7A:FB:B6:46:C2:D6:C3:69:D8:B5:26:86:95:7B:1E:34:B7 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A6C79450C0289370D90FC9C0B75C5D265 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nLi9evu2RsLWw2nYtSaGlXseNLc.roa Signing time: Mon 10 Nov 2025 06:34:38 +0000 ROA not before: Mon 10 Nov 2025 06:34:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 37.202.220.0/24 maxlen: 24 151.240.80.0/23 maxlen: 24 151.240.118.0/23 maxlen: 24 151.240.165.0/24 maxlen: 24 151.240.249.0/24 maxlen: 24 151.241.26.0/24 maxlen: 24 151.241.174.0/24 maxlen: 24 151.242.143.0/24 maxlen: 24 151.242.236.0/22 maxlen: 24 151.243.138.0/23 maxlen: 24 151.243.144.0/23 maxlen: 24 151.243.158.0/24 maxlen: 24 151.243.170.0/24 maxlen: 24 151.243.172.0/24 maxlen: 24 151.243.224.0/24 maxlen: 24 151.243.247.0/24 maxlen: 24 151.244.64.0/24 maxlen: 24 151.244.196.0/24 maxlen: 24 151.245.42.0/24 maxlen: 24 151.245.61.0/24 maxlen: 24 151.245.63.0/24 maxlen: 24 151.245.64.0/22 maxlen: 24 151.245.88.0/24 maxlen: 24 151.245.91.0/24 maxlen: 24 151.245.224.0/23 maxlen: 24 151.245.226.0/23 maxlen: 24 151.246.164.0/23 maxlen: 24 151.246.176.0/24 maxlen: 24 151.246.180.0/24 maxlen: 24 151.246.181.0/24 maxlen: 24 151.246.184.0/24 maxlen: 24 151.246.185.0/24 maxlen: 24 151.246.186.0/24 maxlen: 24 151.246.187.0/24 maxlen: 24 151.246.189.0/24 maxlen: 24 151.246.246.0/23 maxlen: 24 151.246.249.0/24 maxlen: 24 151.246.250.0/23 maxlen: 24 151.246.255.0/24 maxlen: 24 151.247.137.0/24 maxlen: 24 151.247.161.0/24 maxlen: 24 151.247.162.0/24 maxlen: 24 151.247.163.0/24 maxlen: 24 151.247.164.0/24 maxlen: 24 151.247.165.0/24 maxlen: 24 151.247.167.0/24 maxlen: 24 151.247.169.0/24 maxlen: 24 151.247.170.0/24 maxlen: 24 151.247.177.0/24 maxlen: 24 151.247.248.0/24 maxlen: 24 151.247.249.0/24 maxlen: 24 151.247.250.0/24 maxlen: 24 151.247.253.0/24 maxlen: 24 151.247.254.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 11 Nov 2025 12:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:79:45:0c:02:89:37:0d:90:fc:9c:0b:75:c5:d2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 10 06:34:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9cb8bd7afbb646c2d6c369d8b52686957b1e34b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:de:c0:30:0a:0f:9a:8d:38:8f:1b:2d:b5: 6d:2e:85:2a:64:2c:61:98:87:fe:f6:e1:13:1c:b0: 74:c5:ce:b6:e5:16:60:6e:46:ac:c5:65:85:57:d6: 41:38:46:65:50:4f:49:81:3a:b8:c5:9d:63:d4:75: b5:8f:b9:d4:4f:59:d2:d1:1f:94:8d:21:8a:ea:36: c3:2f:0a:aa:97:a5:24:0e:a9:b7:57:37:61:e0:97: d7:c9:2f:62:8c:79:05:95:61:05:91:a9:6b:e8:d3: e2:58:20:24:09:85:d4:df:25:80:81:8e:62:b1:91: 4b:d7:67:06:de:7c:f0:70:41:a0:65:ab:bf:6c:7e: 98:6e:9f:a5:b0:ea:42:c7:48:01:5b:46:1b:94:3b: 44:d5:ac:ed:d6:5e:8b:08:c1:2a:6e:7a:33:9f:04: 02:e1:4b:cc:dc:dc:b7:66:46:c5:a1:6c:e3:50:0d: 13:10:5c:8d:15:8a:27:8d:48:4c:d5:e1:bb:ae:f4: 73:95:c2:fc:c6:41:16:b9:29:3f:c5:7d:f0:96:69: 8f:8e:b4:21:48:69:eb:a1:98:58:56:9f:63:42:10: 77:c8:44:6e:75:5f:3c:25:f8:f2:2c:9f:08:74:2e: a1:34:d2:72:c0:89:71:3a:c2:28:db:0e:88:19:de: fa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B8:BD:7A:FB:B6:46:C2:D6:C3:69:D8:B5:26:86:95:7B:1E:34:B7 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nLi9evu2RsLWw2nYtSaGlXseNLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.220.0/24 151.240.80.0/23 151.240.118.0/23 151.240.165.0/24 151.240.249.0/24 151.241.26.0/24 151.241.174.0/24 151.242.143.0/24 151.242.236.0/22 151.243.138.0/23 151.243.144.0/23 151.243.158.0/24 151.243.170.0/24 151.243.172.0/24 151.243.224.0/24 151.243.247.0/24 151.244.64.0/24 151.244.196.0/24 151.245.42.0/24 151.245.61.0/24 151.245.63.0-151.245.67.255 151.245.88.0/24 151.245.91.0/24 151.245.224.0/22 151.246.164.0/23 151.246.176.0/24 151.246.180.0/23 151.246.184.0/22 151.246.189.0/24 151.246.246.0/23 151.246.249.0-151.246.251.255 151.246.255.0/24 151.247.137.0/24 151.247.161.0-151.247.165.255 151.247.167.0/24 151.247.169.0-151.247.170.255 151.247.177.0/24 151.247.248.0-151.247.250.255 151.247.253.0-151.247.254.255 Signature Algorithm: sha256WithRSAEncryption 94:e1:20:28:8c:09:a2:71:1b:b6:5c:07:38:50:08:37:dd:bc: 69:26:06:c9:f2:d6:9a:2e:69:ab:2c:cb:eb:60:3a:63:c8:15: 1b:7b:74:b3:8f:cf:30:41:06:49:01:f7:98:79:17:29:94:b9: 63:6a:8a:fb:af:70:95:c7:58:bb:0d:b2:14:9e:e9:8d:f0:63: a5:5f:42:fd:43:8c:1f:82:c5:d3:64:9e:f3:3d:ce:35:72:cd: 05:3b:00:83:e9:3e:e2:c5:e1:9a:43:9f:28:dc:0b:d1:00:2d: 0c:bd:cf:58:d9:71:9b:30:1a:3a:12:ec:45:75:dc:08:4f:29: f4:97:61:6c:5b:f9:6f:33:b1:3e:d6:9d:46:b7:73:19:d1:55: d2:12:26:c5:76:17:e9:0c:a8:3a:d2:f3:c7:26:90:05:9a:98: 1b:1c:6d:9a:a1:6f:77:b6:d3:72:62:fc:f8:12:c4:3e:7b:42: dc:8e:8d:8b:a1:9b:c5:a5:33:9a:0a:f2:75:77:0a:fb:c8:30: 3d:fa:d1:37:9f:58:eb:df:96:f8:4e:04:93:a5:29:66:46:7c: bc:87:1a:db:ab:bc:9e:f1:e0:a4:cb:46:b9:af:bb:1d:e8:31: 25:b0:85:22:89:7c:c7:b1:9f:ce:1c:40:89:26:cd:40:a5:13: 1b:30:2a:91 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISAZpseUUMAok3DZD8nAt1xdJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTEwMDYzNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2I4YmQ3YWZiYjY0NmMyZDZjMzY5ZDhiNTI2ODY5NTdiMWUzNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunTewDAKD5qNOI8bLbVtLoUqZCxh mIf+9uETHLB0xc625RZgbkasxWWFV9ZBOEZlUE9JgTq4xZ1j1HW1j7nUT1nS0R+U jSGK6jbDLwqql6UkDqm3Vzdh4JfXyS9ijHkFlWEFkalr6NPiWCAkCYXU3yWAgY5i sZFL12cG3nzwcEGgZau/bH6Ybp+lsOpCx0gBW0YblDtE1azt1l6LCMEqbnoznwQC 4UvM3Ny3ZkbFoWzjUA0TEFyNFYonjUhM1eG7rvRzlcL8xkEWuSk/xX3wlmmPjrQh SGnroZhYVp9jQhB3yERudV88JfjyLJ8IdC6hNNJywIlxOsIo2w6IGd76JQIDAQAB o4IDJzCCAyMwHQYDVR0OBBYEFJy4vXr7tkbC1sNp2LUmhpV7HjS3MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbkxpOWV2dTJSc0xXdzJuWXRTYUdsWHNlTkxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjCCASIEAgABMIIB GgMEACXK3AMEAZfwUAMEAZfwdgMEAJfwpQMEAJfw+QMEAJfxGgMEAJfxrgMEAJfy jwMEApfy7AMEAZfzigMEAZfzkAMEAJfzngMEAJfzqgMEAJfzrAMEAJfz4AMEAJfz 9wMEAJf0QAMEAJf0xAMEAJf1KgMEAJf1PTAMAwQAl/U/AwQCl/VAAwQAl/VYAwQA l/VbAwQCl/XgAwQBl/akAwQAl/awAwQBl/a0AwQCl/a4AwQAl/a9AwQBl/b2MAwD BACX9vkDBAKX9vgDBACX9v8DBACX94kwDAMEAJf3oQMEAZf3pAMEAJf3pzAMAwQA l/epAwQAl/eqAwQAl/exMAwDBAOX9/gDBACX9/owDAMEAJf3/QMEAJf3/jANBgkq hkiG9w0BAQsFAAOCAQEAlOEgKIwJonEbtlwHOFAIN928aSYGyfLWmi5pqyzL62A6 Y8gVG3t0s4/PMEEGSQH3mHkXKZS5Y2qK+69wlcdYuw2yFJ7pjfBjpV9C/UOMH4LF 02Se8z3ONXLNBTsAg+k+4sXhmkOfKNwL0QAtDL3PWNlxmzAaOhLsRXXcCE8p9Jdh bFv5bzOxPtadRrdzGdFV0hImxXYX6QyoOtLzxyaQBZqYGxxtmqFvd7bTcmL8+BLE PntC3I6Ni6GbxaUzmgrydXcK+8gwPfrRN59Y69+W+E4Ek6UpZkZ8vIca26u8nvHg pMtGua+7HegxJbCFIol8x7GfzhxAiSbNQKUTGzAqkQ== -----END CERTIFICATE-----Generated at Sun Dec 7 09:24:58 2025 by rpki-client