This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/ELOXlZ8KbBs9awbb1A1CvzZEaVU.roa File: ELOXlZ8KbBs9awbb1A1CvzZEaVU.roa (raw, json) Hash identifier: hM1Dz0sDLMYFcwlxZ4ZtX7otB/e6t0wvdWoBi6YAe3Q= Subject key identifier: 10:B3:97:95:9F:0A:6C:1B:3D:6B:06:DB:D4:0D:42:BF:36:44:69:55 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 01965C9D89D0A4E81F4CF60F9F2FBCD32017 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/ELOXlZ8KbBs9awbb1A1CvzZEaVU.roa Signing time: Tue 22 Apr 2025 08:29:10 +0000 ROA not before: Tue 22 Apr 2025 08:29:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49685 IP address blocks: 31.3.8.0/21 maxlen: 24 31.3.96.0/21 maxlen: 24 31.223.160.0/20 maxlen: 24 37.17.208.0/20 maxlen: 24 37.34.48.0/21 maxlen: 24 37.230.96.0/21 maxlen: 24 46.226.56.0/21 maxlen: 24 78.108.128.0/20 maxlen: 24 79.170.88.0/21 maxlen: 24 80.84.224.0/19 maxlen: 24 80.84.224.0/20 maxlen: 24 80.84.240.0/20 maxlen: 24 80.246.192.0/20 maxlen: 24 80.246.207.0/24 maxlen: 24 80.255.240.0/20 maxlen: 24 81.4.64.0/19 maxlen: 24 81.4.84.0/22 maxlen: 24 81.4.96.0/22 maxlen: 24 81.4.112.0/21 maxlen: 24 81.4.112.0/22 maxlen: 24 81.21.136.0/21 maxlen: 24 81.30.32.0/20 maxlen: 24 83.96.128.0/17 maxlen: 24 83.96.157.0/24 maxlen: 24 83.96.200.0/22 maxlen: 24 83.96.204.0/22 maxlen: 24 83.96.212.0/22 maxlen: 24 83.96.216.0/22 maxlen: 24 83.96.224.0/19 maxlen: 24 83.96.236.0/22 maxlen: 24 83.96.240.0/22 maxlen: 24 83.96.244.0/22 maxlen: 24 83.96.252.0/22 maxlen: 24 85.10.160.0/19 maxlen: 24 85.10.172.0/22 maxlen: 24 85.10.176.0/22 maxlen: 24 85.222.224.0/21 maxlen: 24 89.31.96.0/21 maxlen: 24 91.142.240.0/20 maxlen: 24 91.189.208.0/22 maxlen: 24 91.205.32.0/22 maxlen: 24 91.216.162.0/24 maxlen: 24 93.191.128.0/21 maxlen: 24 94.142.208.0/21 maxlen: 24 141.138.192.0/20 maxlen: 24 141.255.176.0/22 maxlen: 24 141.255.180.0/22 maxlen: 24 171.33.128.0/21 maxlen: 24 171.33.128.0/24 maxlen: 24 176.74.224.0/19 maxlen: 24 178.18.80.0/20 maxlen: 24 185.3.208.0/22 maxlen: 24 185.15.248.0/22 maxlen: 24 185.21.188.0/22 maxlen: 24 185.65.52.0/22 maxlen: 24 185.69.232.0/22 maxlen: 24 185.84.72.0/22 maxlen: 24 185.89.152.0/22 maxlen: 24 185.95.68.0/22 maxlen: 24 185.105.204.0/22 maxlen: 24 185.105.216.0/22 maxlen: 24 185.110.172.0/22 maxlen: 24 185.110.173.0/24 maxlen: 24 185.110.200.0/22 maxlen: 24 193.93.172.0/22 maxlen: 24 193.138.204.0/22 maxlen: 24 193.242.119.0/24 maxlen: 24 194.60.207.0/24 maxlen: 24 213.187.240.0/21 maxlen: 24 217.21.240.0/20 maxlen: 24 217.149.128.0/20 maxlen: 24 2001:828::/32 maxlen: 48 2001:4cb8::/29 maxlen: 48 2001:4cb8:e::/48 maxlen: 48 2001:4cb8:40b::/48 maxlen: 48 2a00:c080::/32 maxlen: 48 2a02:348::/32 maxlen: 48 2a02:348:28::/48 maxlen: 48 2a02:348:29::/48 maxlen: 48 2a02:348:7d::/48 maxlen: 48 2a03:4f00::/32 maxlen: 48 2a03:5700::/32 maxlen: 48 2a05:2500::/32 maxlen: 48 2a05:a282::/32 maxlen: 48 Validation: Failed, certificate revoked on Tue 22 Apr 2025 08:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:5c:9d:89:d0:a4:e8:1f:4c:f6:0f:9f:2f:bc:d3:20:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Apr 22 08:29:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=10b397959f0a6c1b3d6b06dbd40d42bf36446955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:8f:ae:86:93:db:eb:6e:d7:87:e1:dd:17: a9:a3:e1:b6:e5:09:a3:70:62:cd:e2:96:24:d8:c5: 39:91:59:8f:79:b0:f4:a1:53:cb:f4:e6:43:aa:0f: b9:0f:2c:0f:64:85:cb:a3:8f:88:19:c2:44:d7:77: 3a:57:e4:19:bf:38:80:c7:b9:56:3d:3c:d0:ab:71: e6:b6:c6:9d:80:ac:79:6c:75:98:96:66:71:97:d5: 19:c9:71:a5:9d:ff:84:e1:49:9c:57:ca:db:e1:41: 1c:7c:25:08:c9:f8:77:81:55:ea:ad:ba:d6:f3:7e: 96:2a:4a:f0:af:f3:7f:e6:f2:e1:c8:e5:b5:49:76: 33:43:f9:76:86:12:99:70:52:a8:ad:81:2e:5c:f6: 63:bf:72:0c:03:3d:66:67:ae:97:14:11:91:78:2c: d1:4a:f9:32:4f:67:f5:39:65:d2:33:11:2a:e1:34: 20:3c:b8:9e:28:f8:e4:ae:3c:1f:00:82:6f:e8:b3: 45:48:c8:3d:cf:d7:59:25:a9:91:d0:21:a9:d6:25: 4e:0e:3c:bb:5b:ab:f3:d7:ac:7e:25:1c:5b:67:98: ac:6e:6c:a8:64:4d:1f:58:5b:96:a8:c3:71:b0:99: ba:f7:74:5c:a8:ce:d3:f4:b1:2f:0c:4e:33:b4:2a: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B3:97:95:9F:0A:6C:1B:3D:6B:06:DB:D4:0D:42:BF:36:44:69:55 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/ELOXlZ8KbBs9awbb1A1CvzZEaVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.8.0/21 31.3.96.0/21 31.223.160.0/20 37.17.208.0/20 37.34.48.0/21 37.230.96.0/21 46.226.56.0/21 78.108.128.0/20 79.170.88.0/21 80.84.224.0/19 80.246.192.0/20 80.255.240.0/20 81.4.64.0-81.4.99.255 81.4.112.0/21 81.21.136.0/21 81.30.32.0/20 83.96.128.0/17 85.10.160.0/19 85.222.224.0/21 89.31.96.0/21 91.142.240.0/20 91.189.208.0/22 91.205.32.0/22 91.216.162.0/24 93.191.128.0/21 94.142.208.0/21 141.138.192.0/20 141.255.176.0/21 171.33.128.0/21 176.74.224.0/19 178.18.80.0/20 185.3.208.0/22 185.15.248.0/22 185.21.188.0/22 185.65.52.0/22 185.69.232.0/22 185.84.72.0/22 185.89.152.0/22 185.95.68.0/22 185.105.204.0/22 185.105.216.0/22 185.110.172.0/22 185.110.200.0/22 193.93.172.0/22 193.138.204.0/22 193.242.119.0/24 194.60.207.0/24 213.187.240.0/21 217.21.240.0/20 217.149.128.0/20 IPv6: 2001:828::/32 2001:4cb8::/29 2a00:c080::/32 2a02:348::/32 2a03:4f00::/32 2a03:5700::/32 2a05:2500::/32 2a05:a282::/32 Signature Algorithm: sha256WithRSAEncryption 19:4d:47:0d:cd:06:1a:7c:a3:3d:26:6b:bb:1e:ff:c2:be:6a: 19:7e:62:e5:59:cc:2c:13:9f:84:2c:b3:1d:ce:08:79:a2:e2: f2:47:83:b2:13:7e:72:13:ba:45:87:0e:d3:7b:1b:7c:5a:61: d6:be:47:e2:10:bf:a9:6e:b4:7e:cd:c1:da:fb:43:97:53:fc: 61:7e:dc:3a:9d:13:8d:fa:e2:db:d1:06:eb:bb:0b:19:db:f6: 6f:a5:3c:a5:94:66:b1:c1:d6:b9:59:02:9a:b8:64:c4:70:19: 38:04:88:ec:f8:f8:e8:b1:35:c5:1d:6d:06:12:b3:ae:73:d2: fe:fd:69:9a:73:43:29:d8:d5:18:2f:2d:b8:79:7f:25:0e:dd: 38:18:0f:40:f4:19:89:29:ab:6a:64:e8:af:20:9f:15:70:b2: 5b:35:05:ee:47:84:c2:4f:ac:74:9b:33:a8:e0:d8:3b:cf:b6: f8:5a:7a:69:6c:f6:f9:d9:c5:fa:cb:17:fa:62:f8:5d:d2:9a: bf:f9:09:d2:f6:aa:bf:3a:04:b7:ec:fb:24:14:d0:da:7c:c9: e6:90:58:4c:ff:fc:36:ac:d6:c5:64:a2:0d:9b:b6:fb:f1:c5: af:84:95:3b:d9:ec:ad:c1:37:32:56:a7:9d:82:9d:1a:8b:62: 54:69:57:58 -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISAZZcnYnQpOgfTPYPny+80yAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUwNDIyMDgyOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGIzOTc5NTlmMGE2YzFiM2Q2YjA2ZGJkNDBkNDJiZjM2NDQ2OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMeProaT2+tu14fh3Repo+G25Qmj cGLN4pYk2MU5kVmPebD0oVPL9OZDqg+5DywPZIXLo4+IGcJE13c6V+QZvziAx7lW PTzQq3HmtsadgKx5bHWYlmZxl9UZyXGlnf+E4UmcV8rb4UEcfCUIyfh3gVXqrbrW 836WKkrwr/N/5vLhyOW1SXYzQ/l2hhKZcFKorYEuXPZjv3IMAz1mZ66XFBGReCzR SvkyT2f1OWXSMxEq4TQgPLieKPjkrjwfAIJv6LNFSMg9z9dZJamR0CGp1iVODjy7 W6vz16x+JRxbZ5isbmyoZE0fWFuWqMNxsJm693RcqM7T9LEvDE4ztCrvfwIDAQAB o4IDgTCCA30wHQYDVR0OBBYEFBCzl5WfCmwbPWsG29QNQr82RGlVMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvRUxPWGxaOEtiQnM5YXdiYjFBMUN2elpFYVZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBlQYIKwYBBQUHAQcBAf8EggGEMIIBgDCCATwEAgABMIIB NAMEAx8DCAMEAx8DYAMEBB/foAMEBCUR0AMEAyUiMAMEAyXmYAMEAy7iOAMEBE5s gAMEA0+qWAMEBVBU4AMEBFD2wAMEBFD/8DAMAwQGUQRAAwQCUQRgAwQDUQRwAwQD URWIAwQEUR4gAwQHU2CAAwQFVQqgAwQDVd7gAwQDWR9gAwQEW47wAwQCW73QAwQC W80gAwQAW9iiAwQDXb+AAwQDXo7QAwQEjYrAAwQDjf+wAwQDqyGAAwQFsErgAwQE shJQAwQCuQPQAwQCuQ/4AwQCuRW8AwQCuUE0AwQCuUXoAwQCuVRIAwQCuVmYAwQC uV9EAwQCuWnMAwQCuWnYAwQCuW6sAwQCuW7IAwQCwV2sAwQCwYrMAwQAwfJ3AwQA wjzPAwQD1bvwAwQE2RXwAwQE2ZWAMD4EAgACMDgDBQAgAQgoAwUDIAFMuAMFACoA wIADBQAqAgNIAwUAKgNPAAMFACoDVwADBQAqBSUAAwUAKgWigjANBgkqhkiG9w0B AQsFAAOCAQEAGU1HDc0GGnyjPSZrux7/wr5qGX5i5VnMLBOfhCyzHc4IeaLi8keD shN+chO6RYcO03sbfFph1r5H4hC/qW60fs3B2vtDl1P8YX7cOp0Tjfri29EG67sL Gdv2b6U8pZRmscHWuVkCmrhkxHAZOASI7Pj46LE1xR1tBhKzrnPS/v1pmnNDKdjV GC8tuHl/JQ7dOBgPQPQZiSmramToryCfFXCyWzUF7keEwk+sdJszqODYO8+2+Fp6 aWz2+dnF+ssX+mL4XdKav/kJ0vaqvzoEt+z7JBTQ2nzJ5pBYTP/8NqzWxWSiDZu2 +/HFr4SVO9nsrcE3MlannYKdGotiVGlXWA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:43 2025 by rpki-client