This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/6dumzngP2kuokAR_qYcmxK9yYp0.roa File: 6dumzngP2kuokAR_qYcmxK9yYp0.roa (raw, json) Hash identifier: DHDuzkoqJVfxBCX34p0B2X1GXWO4fFC1MPfvyTjidpE= Subject key identifier: E9:DB:A6:CE:78:0F:DA:4B:A8:90:04:7F:A9:87:26:C4:AF:72:62:9D Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Certificate serial: 0196E8E9ACEA115906A14E1CC867331751AD Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/6dumzngP2kuokAR_qYcmxK9yYp0.roa Signing time: Mon 19 May 2025 14:19:10 +0000 ROA not before: Mon 19 May 2025 14:19:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36224 IP address blocks: 164.138.69.0/24 maxlen: 24 185.33.114.0/24 maxlen: 24 202.162.49.0/24 maxlen: 24 202.162.51.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 26 Jun 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:e8:e9:ac:ea:11:59:06:a1:4e:1c:c8:67:33:17:51:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Validity Not Before: May 19 14:19:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e9dba6ce780fda4ba890047fa98726c4af72629d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:bd:0f:69:a6:60:53:1e:98:eb:2d:c5:15: fc:4e:cc:67:90:b4:ef:3b:ee:32:06:81:41:b0:a8: 63:71:0b:87:12:75:e1:b2:7f:c0:d0:18:eb:81:1e: b7:df:33:18:bd:8e:23:11:f7:50:9a:d0:8b:93:54: 6d:8f:68:74:f4:96:e4:1e:e6:c4:7b:6a:02:7d:0b: ca:fb:f0:05:1d:b5:b5:eb:39:29:71:a1:85:0f:f2: 82:3e:20:9a:df:b3:dd:c8:90:19:fc:f7:a7:3c:88: db:6b:62:90:85:74:c1:1d:50:6e:aa:7d:08:f3:5d: ab:93:88:2c:0b:1e:66:86:5e:a2:53:39:b6:d6:a7: 0b:48:fb:dd:98:60:a9:f9:85:49:ee:4e:dc:99:fc: 5e:39:a1:0f:e1:64:38:2f:89:b8:1a:ac:5d:90:f0: 0b:c0:11:b1:e8:64:6c:bd:98:79:34:1f:67:a8:86: 45:ce:4f:0f:16:02:aa:ab:41:2b:ff:f7:04:72:e8: 2c:fd:74:dd:c4:a4:c3:fb:e5:0c:82:81:4a:e0:21: 7d:9a:9f:6b:6d:01:29:53:c4:3f:e9:a9:96:17:56: 34:d7:eb:66:4c:9d:a6:e3:ee:49:5a:34:65:45:cd: bc:15:d1:50:cc:60:31:e3:54:12:85:35:9d:bf:3d: aa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DB:A6:CE:78:0F:DA:4B:A8:90:04:7F:A9:87:26:C4:AF:72:62:9D X509v3 Authority Key Identifier: keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/6dumzngP2kuokAR_qYcmxK9yYp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.69.0/24 185.33.114.0/24 202.162.49.0/24 202.162.51.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:0a:bb:38:e8:a5:43:74:78:42:97:8b:76:df:3d:44:11:a9: d0:8f:47:02:ec:d0:07:34:e1:23:e4:45:bc:16:af:92:83:ae: 06:e1:3e:aa:4f:5b:e1:28:71:d2:99:24:a8:5f:58:10:ec:7d: ac:27:21:09:b2:63:55:c8:87:41:15:37:81:d1:05:01:91:0c: 13:6b:b4:8d:fc:10:bf:1c:1e:29:f9:55:9b:5f:bd:93:80:35: 8a:c4:ad:5a:eb:28:50:b3:94:2d:6a:12:52:2b:a6:2f:20:62: eb:ff:c6:0a:53:1b:6f:ac:e6:e6:06:87:8e:18:9b:27:6a:03: 7c:0b:36:fc:00:fa:1b:cb:3f:42:e0:25:1e:8f:7d:16:19:69: da:f7:21:d6:3e:d2:6f:d7:45:ce:03:09:f0:bf:5f:56:b7:6e: b9:4b:24:d4:50:56:0c:2a:82:ca:83:97:2f:24:8c:c6:cb:9c: 4b:9a:5e:b6:ec:37:38:47:dd:f1:ce:26:fb:d2:90:79:00:f4: 0b:55:23:11:e2:8e:0c:aa:93:9b:b3:e5:f4:5e:2b:7c:cc:fd: 53:21:9a:3d:95:19:40:ea:5f:29:ed:47:01:f0:70:41:0b:05: fa:4a:7f:7e:bd:52:38:89:9c:18:1e:25:f1:c4:07:01:35:f8: ba:e5:8a:08 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZbo6azqEVkGoU4cyGczF1GtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzYwYTU0ZTAzYzlmODE1Y2MzM2FmZDQ1ZDNjNGRiOWFm NzZmMTYwHhcNMjUwNTE5MTQxOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWRiYTZjZTc4MGZkYTRiYTg5MDA0N2ZhOTg3MjZjNGFmNzI2MjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjG9D2mmYFMemOstxRX8TsxnkLTv O+4yBoFBsKhjcQuHEnXhsn/A0BjrgR633zMYvY4jEfdQmtCLk1Rtj2h09JbkHubE e2oCfQvK+/AFHbW16zkpcaGFD/KCPiCa37PdyJAZ/PenPIjba2KQhXTBHVBuqn0I 812rk4gsCx5mhl6iUzm21qcLSPvdmGCp+YVJ7k7cmfxeOaEP4WQ4L4m4GqxdkPAL wBGx6GRsvZh5NB9nqIZFzk8PFgKqq0Er//cEcugs/XTdxKTD++UMgoFK4CF9mp9r bQEpU8Q/6amWF1Y01+tmTJ2m4+5JWjRlRc28FdFQzGAx41QShTWdvz2q2wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOnbps54D9pLqJAEf6mHJsSvcmKdMB8GA1UdIwQY MBaAFNfGClTgPJ+BXMM6/UXTxNua928WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgt MzgzMWYzZWQxY2E4LzEvNmR1bXpuZ1Aya3Vva0FSX3FZY214Szl5WXAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgtMzgzMWYzZWQxY2E4 LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQApIpFAwQA uSFyAwQAyqIxAwQAyqIzMA0GCSqGSIb3DQEBCwUAA4IBAQA9Crs46KVDdHhCl4t2 3z1EEanQj0cC7NAHNOEj5EW8Fq+Sg64G4T6qT1vhKHHSmSSoX1gQ7H2sJyEJsmNV yIdBFTeB0QUBkQwTa7SN/BC/HB4p+VWbX72TgDWKxK1a6yhQs5QtahJSK6YvIGLr /8YKUxtvrObmBoeOGJsnagN8Czb8APobyz9C4CUej30WGWna9yHWPtJv10XOAwnw v19Wt265SyTUUFYMKoLKg5cvJIzGy5xLml627Dc4R93xzib70pB5APQLVSMR4o4M qpObs+X0Xit8zP1TIZo9lRlA6l8p7UcB8HBBCwX6Sn9+vVI4iZwYHiXxxAcBNfi6 5YoI -----END CERTIFICATE-----Generated at Fri Dec 19 23:07:36 2025 by rpki-client