This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/khiC85DUjlsg1o7l9dF2gRsEBF0.roa File: khiC85DUjlsg1o7l9dF2gRsEBF0.roa (raw, json) Hash identifier: qYLFWH/+atttNch5GsTRIBcpVCWB/wVyM/QBIlR8hc0= Subject key identifier: 92:18:82:F3:90:D4:8E:5B:20:D6:8E:E5:F5:D1:76:81:1B:04:04:5D Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb Certificate serial: 01970C654D4313E5F43E3A1044B2A7E4B157 Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/khiC85DUjlsg1o7l9dF2gRsEBF0.roa Signing time: Mon 26 May 2025 11:40:54 +0000 ROA not before: Mon 26 May 2025 11:40:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214526 IP address blocks: 91.231.222.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 25 Jun 2025 07:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:0c:65:4d:43:13:e5:f4:3e:3a:10:44:b2:a7:e4:b1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb Validity Not Before: May 26 11:40:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=921882f390d48e5b20d68ee5f5d176811b04045d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:10:aa:b7:7d:54:f9:15:17:32:13:4f:42: a8:10:af:f7:69:3e:e4:93:ff:f1:e5:77:24:27:7d: 0f:19:a5:cd:d8:9a:3b:e7:66:be:74:fa:f6:f8:f8: f5:07:ca:a8:16:b6:32:71:df:5c:7d:78:fc:96:78: ee:70:e9:29:01:20:3c:b6:c3:d3:43:56:1d:8c:21: ff:bb:6a:45:cf:e6:9f:cb:77:14:29:3c:7b:ce:55: d9:d5:0f:72:87:44:d6:50:30:71:b7:fd:da:8e:1e: 14:51:84:36:55:c6:0d:d9:6d:73:91:69:a2:6d:eb: 70:cd:94:84:9d:3d:15:81:12:dc:e8:c5:0a:1d:12: 5a:3b:01:d0:a9:b5:b3:bf:0a:14:f4:68:ad:f4:19: 58:4e:b0:be:36:cd:68:64:54:62:34:d8:13:0b:32: 64:cc:24:59:f8:1a:8a:7e:00:02:59:39:c4:85:03: 17:23:a6:75:54:95:ec:5c:b4:2e:a9:f8:3f:bf:ca: 1f:67:f6:9d:58:07:4d:4d:bb:2e:b5:c0:8e:e1:2f: 88:95:88:02:8f:4f:29:49:2c:e9:b9:4b:39:a3:44: a7:49:1a:8a:63:88:85:0f:4c:ef:ff:b4:51:49:50: 23:f9:66:dd:06:c7:df:57:e8:99:ec:1b:39:a5:a8: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:18:82:F3:90:D4:8E:5B:20:D6:8E:E5:F5:D1:76:81:1B:04:04:5D X509v3 Authority Key Identifier: keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/khiC85DUjlsg1o7l9dF2gRsEBF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.222.0/24 Signature Algorithm: sha256WithRSAEncryption a0:2e:a3:42:b9:e8:bb:e9:c9:a7:80:37:95:eb:a4:ed:ea:54: 4b:7c:1a:47:33:e4:6a:65:e0:4c:2e:ce:3d:26:75:27:70:24: 94:60:bb:ac:f7:eb:50:3d:48:f7:9b:17:92:c6:39:7b:5f:3a: d7:c8:ba:4d:4a:77:f7:5b:f1:8c:a0:31:73:75:2f:9d:0f:7c: fe:1d:31:57:61:e4:b8:42:ac:20:0d:c2:d9:ec:4e:2e:5a:02: 10:7c:c1:e5:34:7f:b5:41:5a:16:b9:63:a2:9b:b4:c5:1f:5a: 89:3b:f6:a9:e4:b6:80:e8:17:ce:4b:14:7f:7e:8a:15:91:dd: 1e:a6:01:77:4f:1b:08:f1:ea:22:1a:dd:55:bf:7e:00:50:09: 58:c2:7c:92:97:cc:49:99:71:35:4f:22:ce:37:9e:2c:f5:cd: f5:90:7d:ec:ce:52:08:3a:01:cf:fd:bc:67:89:0e:a4:54:56: 23:77:c9:a2:87:c1:d5:e7:ee:12:b7:79:be:ac:b8:79:89:93: bc:41:06:63:99:59:a8:4e:a3:75:0b:b4:d1:4c:9a:67:e6:03: 33:07:76:01:48:6e:fe:aa:58:8a:30:c8:86:5e:95:03:a7:28: 50:30:0d:9e:19:59:1b:5d:c4:ab:a0:36:ab:68:2d:6c:bc:e6: 94:cb:4b:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZcMZU1DE+X0PjoQRLKn5LFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MGQxZTg5YjRlNzQyZTY5MDYyYTk1ZDM1MWRlZWE5NmI1 MTc4ZmIwHhcNMjUwNTI2MTE0MDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjE4ODJmMzkwZDQ4ZTViMjBkNjhlZTVmNWQxNzY4MTFiMDQwNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeIQqrd9VPkVFzITT0KoEK/3aT7k k//x5XckJ30PGaXN2Jo752a+dPr2+Pj1B8qoFrYycd9cfXj8lnjucOkpASA8tsPT Q1YdjCH/u2pFz+afy3cUKTx7zlXZ1Q9yh0TWUDBxt/3ajh4UUYQ2VcYN2W1zkWmi betwzZSEnT0VgRLc6MUKHRJaOwHQqbWzvwoU9Git9BlYTrC+Ns1oZFRiNNgTCzJk zCRZ+BqKfgACWTnEhQMXI6Z1VJXsXLQuqfg/v8ofZ/adWAdNTbsutcCO4S+IlYgC j08pSSzpuUs5o0SnSRqKY4iFD0zv/7RRSVAj+WbdBsffV+iZ7Bs5paiYjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIYgvOQ1I5bINaO5fXRdoEbBARdMB8GA1UdIwQY MBaAFFYNHom050LmkGKpXTUd7qlrUXj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTct NTBkNmJhNmFhY2I4LzEva2hpQzg1RFVqbHNnMW83bDlkRjJnUnNFQkYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTctNTBkNmJhNmFhY2I4 LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+feMA0G CSqGSIb3DQEBCwUAA4IBAQCgLqNCuei76cmngDeV66Tt6lRLfBpHM+RqZeBMLs49 JnUncCSUYLus9+tQPUj3mxeSxjl7XzrXyLpNSnf3W/GMoDFzdS+dD3z+HTFXYeS4 QqwgDcLZ7E4uWgIQfMHlNH+1QVoWuWOim7TFH1qJO/ap5LaA6BfOSxR/fooVkd0e pgF3TxsI8eoiGt1Vv34AUAlYwnySl8xJmXE1TyLON54s9c31kH3szlIIOgHP/bxn iQ6kVFYjd8mih8HV5+4St3m+rLh5iZO8QQZjmVmoTqN1C7TRTJpn5gMzB3YBSG7+ qliKMMiGXpUDpyhQMA2eGVkbXcSroDaraC1svOaUy0t9 -----END CERTIFICATE-----Generated at Sat Dec 20 07:16:44 2025 by rpki-client