This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rtIRfvipTjLG3xJ21ohwGjyAcpE.roa File: rtIRfvipTjLG3xJ21ohwGjyAcpE.roa (raw, json) Hash identifier: fAtoalzz6xOmbkFvKRHCLxywKqRJ77NobrZ4jAWSo34= Subject key identifier: AE:D2:11:7E:F8:A9:4E:32:C6:DF:12:76:D6:88:70:1A:3C:80:72:91 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1CDF8C112EF82D2FDF5F41FD0F4D0451 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rtIRfvipTjLG3xJ21ohwGjyAcpE.roa Signing time: Sun 14 Dec 2025 12:39:30 +0000 ROA not before: Sun 14 Dec 2025 12:39:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 151.240.152.0/24 maxlen: 24 151.240.153.0/24 maxlen: 24 151.240.226.0/24 maxlen: 24 151.241.11.0/24 maxlen: 24 151.241.12.0/24 maxlen: 24 151.241.25.0/24 maxlen: 24 151.241.104.0/24 maxlen: 24 151.241.149.0/24 maxlen: 24 151.241.150.0/24 maxlen: 24 151.242.128.0/24 maxlen: 24 151.242.239.0/24 maxlen: 24 151.243.16.0/24 maxlen: 24 151.243.189.0/24 maxlen: 24 151.244.12.0/24 maxlen: 24 151.245.0.0/17 maxlen: 24 151.245.29.0/24 maxlen: 24 151.245.145.0/24 maxlen: 24 151.245.182.0/24 maxlen: 24 151.245.220.0/24 maxlen: 24 151.247.138.0/24 maxlen: 24 151.247.145.0/24 maxlen: 24 151.247.238.0/24 maxlen: 24 151.247.242.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 16 Dec 2025 05:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:df:8c:11:2e:f8:2d:2f:df:5f:41:fd:0f:4d:04:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 14 12:39:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aed2117ef8a94e32c6df1276d688701a3c807291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:14:1f:e9:02:f2:96:a4:c2:ac:c5:1f:32: 32:80:17:4a:bd:25:84:10:d1:66:fe:9c:47:d5:be: da:77:97:f6:50:de:3e:7a:92:8a:3d:10:1b:bb:ee: 9c:4b:18:c9:33:b9:59:09:04:1b:97:27:84:2c:77: d5:3f:7b:a6:14:e6:42:06:3c:54:e3:46:b2:2c:33: fc:82:4f:83:df:d4:06:e3:50:56:de:45:79:b2:10: fe:8c:ab:21:4e:84:1e:87:41:a9:d6:4e:45:eb:57: e5:a2:bc:55:81:4a:87:c0:91:0c:bf:f9:a0:0d:6a: c1:c6:45:55:b9:10:1d:8e:7c:1f:ce:b9:44:09:78: b0:a6:45:94:dc:a1:12:ae:6d:16:5d:d5:f9:44:bf: ea:40:16:2e:65:c7:b7:7a:8d:51:d1:ff:84:7a:8c: 70:7d:0c:59:1a:d7:89:85:28:ca:aa:bc:f6:b2:9e: f6:e3:44:64:8c:ca:08:31:c3:94:e8:da:8f:6e:70: 9d:4a:56:17:15:c3:86:6b:60:3d:87:60:e7:7e:cb: 73:a4:e6:f0:26:ac:a4:f9:a0:7f:6c:ef:0e:f3:fe: a9:de:e6:a0:92:ab:33:2a:6a:80:f4:ca:64:bf:ee: ea:4e:fd:af:90:11:0e:a9:48:97:cf:a6:4b:af:4f: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D2:11:7E:F8:A9:4E:32:C6:DF:12:76:D6:88:70:1A:3C:80:72:91 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rtIRfvipTjLG3xJ21ohwGjyAcpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.152.0/23 151.240.226.0/24 151.241.11.0-151.241.12.255 151.241.25.0/24 151.241.104.0/24 151.241.149.0-151.241.150.255 151.242.128.0/24 151.242.239.0/24 151.243.16.0/24 151.243.189.0/24 151.244.12.0/24 151.245.0.0/17 151.245.145.0/24 151.245.182.0/24 151.245.220.0/24 151.247.138.0/24 151.247.145.0/24 151.247.238.0/24 151.247.242.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:fc:12:e0:dc:5e:ec:a2:af:99:1c:b9:7d:ec:24:18:c1:a4: 8f:ee:45:76:f1:8d:93:52:df:11:9b:1d:d9:b4:10:3d:1d:84: 80:48:09:13:0a:a4:66:b6:06:67:b1:b2:3c:72:97:c2:4e:5c: 8a:e1:41:af:20:33:d4:9a:d2:32:7e:b8:13:c5:f8:d2:06:fb: 30:46:f4:20:7d:43:4d:9e:4d:8d:c0:dd:3b:78:7a:c9:27:a9: fc:4e:5b:ba:83:29:72:73:d5:d2:f5:c7:93:10:1e:da:18:d0: 18:07:2c:83:7f:ef:8c:5f:fd:b8:a4:7f:09:06:17:00:38:d5: 3b:94:b6:0c:4c:76:9c:7e:64:33:3f:bf:19:bc:f6:08:f1:f7: 8a:9b:d5:6e:7f:10:39:64:1f:a3:31:f3:4c:1a:51:7d:09:8b: 61:78:e6:f9:11:90:2b:cd:e0:9d:54:71:ec:dd:e2:07:f4:ea: eb:22:52:6b:e8:15:54:09:b8:da:df:f4:55:73:fb:2b:d6:d5: 5d:64:f5:ec:0a:f0:2f:d3:0f:03:b0:29:1a:7b:0d:ca:4f:16: 61:8e:fe:45:a5:1a:a2:1d:d5:de:a0:c0:59:7b:37:ef:0f:07: 02:e3:76:75:c1:78:68:6f:60:85:d6:43:c3:b9:4b:bc:d7:15: 06:03:58:da -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZsc34wRLvgtL99fQf0PTQRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE0MTIzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWQyMTE3ZWY4YTk0ZTMyYzZkZjEyNzZkNjg4NzAxYTNjODA3MjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+oUH+kC8pakwqzFHzIygBdKvSWE ENFm/pxH1b7ad5f2UN4+epKKPRAbu+6cSxjJM7lZCQQblyeELHfVP3umFOZCBjxU 40ayLDP8gk+D39QG41BW3kV5shD+jKshToQeh0Gp1k5F61florxVgUqHwJEMv/mg DWrBxkVVuRAdjnwfzrlECXiwpkWU3KESrm0WXdX5RL/qQBYuZce3eo1R0f+Eeoxw fQxZGteJhSjKqrz2sp7240RkjMoIMcOU6NqPbnCdSlYXFcOGa2A9h2DnfstzpObw Jqyk+aB/bO8O8/6p3uagkqszKmqA9Mpkv+7qTv2vkBEOqUiXz6ZLr0/uwQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFK7SEX74qU4yxt8SdtaIcBo8gHKRMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcnRJUmZ2aXBUakxHM3hKMjFvaHdHanlBY3BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAGX 8JgDBACX8OIwDAMEAJfxCwMEAJfxDAMEAJfxGQMEAJfxaDAMAwQAl/GVAwQAl/GW AwQAl/KAAwQAl/LvAwQAl/MQAwQAl/O9AwQAl/QMAwQHl/UAAwQAl/WRAwQAl/W2 AwQAl/XcAwQAl/eKAwQAl/eRAwQAl/fuAwQAl/fyMA0GCSqGSIb3DQEBCwUAA4IB AQAv/BLg3F7soq+ZHLl97CQYwaSP7kV28Y2TUt8Rmx3ZtBA9HYSASAkTCqRmtgZn sbI8cpfCTlyK4UGvIDPUmtIyfrgTxfjSBvswRvQgfUNNnk2NwN07eHrJJ6n8Tlu6 gylyc9XS9ceTEB7aGNAYByyDf++MX/24pH8JBhcAONU7lLYMTHacfmQzP78ZvPYI 8feKm9VufxA5ZB+jMfNMGlF9CYtheOb5EZArzeCdVHHs3eIH9OrrIlJr6BVUCbja 3/RVc/sr1tVdZPXsCvAv0w8DsCkaew3KTxZhjv5FpRqiHdXeoMBZezfvDwcC43Z1 wXhob2CF1kPDuUu81xUGA1ja -----END CERTIFICATE-----Generated at Tue Dec 16 11:44:33 2025 by rpki-client