This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nMdYjkElI3d6qEHmTPrRWiWITl4.roa
File: nMdYjkElI3d6qEHmTPrRWiWITl4.roa (raw, json)
Hash identifier: Mn8tlnYkd2XzrN46T8ZRCSaCYKdBShQNw/ozND8vVaE=
Subject key identifier: 9C:C7:58:8E:41:25:23:77:7A:A8:41:E6:4C:FA:D1:5A:25:88:4E:5E
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01973A3A22AA9702204505970B8C519BA426
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nMdYjkElI3d6qEHmTPrRWiWITl4.roa
Signing time: Wed 04 Jun 2025 09:16:17 +0000
ROA not before: Wed 04 Jun 2025 09:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12548
IP address blocks: 212.68.160.0/22 maxlen: 22
212.68.172.0/22 maxlen: 22
212.68.172.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:3a:22:aa:97:02:20:45:05:97:0b:8c:51:9b:a4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Jun 4 09:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc7588e412523777aa841e64cfad15a25884e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:97:fc:2f:84:8e:4f:1a:c6:0a:56:a3:c2:
ac:af:85:f2:69:1f:f2:42:b2:93:02:1d:b6:da:7e:
b2:da:9c:32:aa:8c:f8:20:09:57:c1:85:40:53:7f:
67:db:38:4c:a6:e0:d1:0a:5b:41:e0:8b:3d:d2:05:
5a:a3:1a:88:43:08:33:00:46:61:d9:ff:38:3f:7a:
c2:62:25:c0:1b:4e:e6:6b:0c:9c:a1:49:e5:45:01:
4e:66:d8:9f:6e:e2:13:db:6d:28:17:3c:9b:f6:d9:
da:3e:1d:cb:ae:9c:dd:fe:05:fd:d2:f3:ee:88:aa:
cf:94:d2:d9:b2:c5:09:6c:10:2b:36:2a:9e:ea:61:
a2:83:81:26:ed:68:7a:69:f9:3f:41:75:65:09:29:
e9:64:1e:eb:4d:45:df:5b:97:a7:c6:b2:44:c7:45:
63:1d:bb:05:85:2e:5d:48:4a:78:23:f9:93:e8:53:
f7:5a:7a:fc:29:61:b6:8b:f6:96:7d:8c:cb:eb:02:
ef:5c:fa:2a:fd:ab:aa:fe:15:bc:fa:3f:55:b4:eb:
86:ac:a9:b3:08:10:65:4b:00:d6:c2:72:92:68:a5:
ec:2c:66:c2:8a:a2:11:9c:3a:21:6f:2b:72:eb:85:
82:79:bb:d4:0d:68:15:9d:a3:fd:d2:88:1c:6a:a7:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:58:8E:41:25:23:77:7A:A8:41:E6:4C:FA:D1:5A:25:88:4E:5E
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nMdYjkElI3d6qEHmTPrRWiWITl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.160.0/22
212.68.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:97:5d:3e:c7:01:8c:dd:ee:d6:02:a2:91:4b:50:7e:d3:0e:
e0:d5:a1:06:54:6a:cd:df:e9:cb:17:44:b0:47:24:40:82:5e:
60:10:c1:46:31:2f:93:8c:a6:7d:cb:a4:6e:dc:82:8b:bc:ec:
48:ff:4b:82:36:a5:46:72:5e:6c:a6:e9:3e:f3:1e:24:8d:00:
b9:04:d6:26:4c:0e:50:7c:dc:44:c1:89:b1:14:93:f0:c4:f8:
fe:71:df:34:28:d5:c4:a9:93:b4:0f:43:d1:c9:33:9a:98:e9:
b4:69:bc:bd:2c:bc:c1:a5:e8:e5:73:50:93:37:a4:05:bf:91:
d2:d5:52:2b:b0:ea:95:ec:d4:f1:b7:19:57:11:43:31:54:12:
d9:8f:9d:20:76:5e:fe:17:00:34:19:81:6c:de:2e:44:ec:72:
14:b4:32:5f:20:8c:a1:d6:cd:f2:5e:2f:34:75:d8:9f:f7:4d:
18:8c:c0:b7:40:43:69:73:d0:df:1c:e7:31:b8:a1:0d:8a:d6:
4f:b0:5a:0f:80:e7:3c:4e:27:9b:34:a5:be:50:a7:21:fe:71:
03:81:62:a6:93:e3:db:8b:eb:bb:0d:e9:9b:c5:65:90:b4:ee:
07:a7:18:f6:0f:1f:1e:2e:c8:27:da:e6:4c:ac:63:6b:27:95:
cf:e9:68:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZc6OiKqlwIgRQWXC4xRm6QmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3
Njg5YWMwHhcNMjUwNjA0MDkxNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2M3NTg4ZTQxMjUyMzc3N2FhODQxZTY0Y2ZhZDE1YTI1ODg0ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pGX/C+Ejk8axgpWo8Ksr4XyaR/y
QrKTAh222n6y2pwyqoz4IAlXwYVAU39n2zhMpuDRCltB4Is90gVaoxqIQwgzAEZh
2f84P3rCYiXAG07mawycoUnlRQFOZtifbuIT220oFzyb9tnaPh3Lrpzd/gX90vPu
iKrPlNLZssUJbBArNiqe6mGig4Em7Wh6afk/QXVlCSnpZB7rTUXfW5enxrJEx0Vj
HbsFhS5dSEp4I/mT6FP3Wnr8KWG2i/aWfYzL6wLvXPoq/auq/hW8+j9VtOuGrKmz
CBBlSwDWwnKSaKXsLGbCiqIRnDohbyty64WCebvUDWgVnaP90ogcaqeazQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJzHWI5BJSN3eqhB5kz60VoliE5eMB8GA1UdIwQY
MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct
NTVjNDM0ZWVjOTZjLzEvbk1kWWprRWxJM2Q2cUVIbVRQclJXaVdJVGw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj
LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1ESgAwQC
1ESsMA0GCSqGSIb3DQEBCwUAA4IBAQCMl10+xwGM3e7WAqKRS1B+0w7g1aEGVGrN
3+nLF0SwRyRAgl5gEMFGMS+TjKZ9y6Ru3IKLvOxI/0uCNqVGcl5spuk+8x4kjQC5
BNYmTA5QfNxEwYmxFJPwxPj+cd80KNXEqZO0D0PRyTOamOm0aby9LLzBpejlc1CT
N6QFv5HS1VIrsOqV7NTxtxlXEUMxVBLZj50gdl7+FwA0GYFs3i5E7HIUtDJfIIyh
1s3yXi80ddif900YjMC3QENpc9DfHOcxuKENitZPsFoPgOc8TiebNKW+UKch/nED
gWKmk+Pbi+u7DembxWWQtO4Hpxj2Dx8eLsgn2uZMrGNrJ5XP6Wgs
-----END CERTIFICATE-----
Generated at Fri Dec 19 07:49:30 2025 by rpki-client