This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1pwNihIV7IR-2uYiK2gwdTUyUfA.roa File: 1pwNihIV7IR-2uYiK2gwdTUyUfA.roa (raw, json) Hash identifier: Z+5RTb8uX4ibHXIkZ54NrCCUcIb6s0OeH58KOHXdtfc= Subject key identifier: D6:9C:0D:8A:12:15:EC:84:7E:DA:E6:22:2B:68:30:75:35:32:51:F0 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A6CE8F5C60AB0CD00C07471E56794CEDB Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1pwNihIV7IR-2uYiK2gwdTUyUfA.roa Signing time: Mon 10 Nov 2025 08:36:37 +0000 ROA not before: Mon 10 Nov 2025 08:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33042 IP address blocks: 2a0f:dec0::/29 maxlen: 29 Validation: Failed, certificate revoked on Tue 02 Dec 2025 09:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:e8:f5:c6:0a:b0:cd:00:c0:74:71:e5:67:94:ce:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 10 08:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d69c0d8a1215ec847edae6222b683075353251f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:94:04:ad:1a:f2:eb:22:5b:a7:c3:2e:8c: 7c:49:93:60:61:00:5e:9c:82:43:a6:11:11:93:3a: fa:2b:37:09:e2:19:5f:46:40:be:b9:9e:cf:7a:a7: b3:db:93:bb:00:38:da:e4:b1:7c:f4:13:20:d1:82: 9a:dd:ed:fc:3a:62:63:7c:7e:28:e2:48:c2:a7:45: fd:0d:f5:fe:54:8a:ad:ed:dc:30:7d:1b:3a:03:ab: f0:4c:14:07:34:28:db:1c:b1:48:82:27:8a:ff:57: f0:f8:90:16:27:a8:2e:6c:9b:3e:10:f1:7f:32:c5: be:fa:e1:41:13:6e:fa:44:5a:c4:a8:7d:c2:0c:21: cd:89:00:d2:8e:79:f0:fd:6a:af:5a:43:ec:38:41: 52:e8:cf:3d:d6:6e:48:e8:64:c4:19:a2:98:08:d3: f6:84:bf:07:4e:36:4c:82:44:a2:17:57:12:fc:6b: d2:92:f7:c4:12:de:4d:fb:94:95:e9:00:ec:66:11: 9c:bc:6d:35:52:cb:06:48:b1:de:5d:67:cb:56:14: 0c:59:88:8b:9a:27:9f:94:02:4e:35:bb:4c:85:b5: 1f:68:18:81:be:c3:7e:48:87:ba:97:d8:4a:20:b3: 76:79:50:98:08:bf:73:0a:5c:c1:ef:5d:48:57:a7: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9C:0D:8A:12:15:EC:84:7E:DA:E6:22:2B:68:30:75:35:32:51:F0 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1pwNihIV7IR-2uYiK2gwdTUyUfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:dec0::/29 Signature Algorithm: sha256WithRSAEncryption 24:b1:14:45:55:80:56:26:ac:08:b3:c9:5f:bb:8b:09:ef:a9: f1:54:a5:23:3a:6c:b6:98:76:d4:3f:26:b8:56:aa:bd:0b:2b: 99:47:08:74:af:3f:f0:94:5a:ca:f1:46:6a:9c:dd:04:b3:82: 99:b3:71:ea:d6:e6:73:ec:64:da:fc:41:57:bb:09:04:5b:7d: eb:d9:bb:e9:a6:a2:64:5f:2f:0b:d3:bc:6e:f8:5d:12:fb:c0: 68:64:19:28:da:b9:46:16:a7:fb:f6:2f:03:97:10:d3:cc:13: f9:8f:dc:4e:63:52:d0:ce:47:fd:3d:bb:00:1a:dd:66:45:10: c8:1d:36:7c:58:65:27:2a:cb:ef:0f:cd:bd:a6:5d:83:31:c2: 48:e8:80:fc:88:13:21:ac:9d:bd:38:84:51:09:bb:d0:32:f8: e5:49:01:18:65:22:dd:51:69:1c:f4:c5:bc:00:1d:0e:df:c4: 2b:af:e5:ed:73:b5:95:13:7d:1c:ed:06:3e:fb:c6:0f:e7:84: f8:45:ea:d7:45:96:80:be:15:dd:a8:99:24:94:cb:cc:51:0a: 7d:bf:29:5e:59:0b:7f:52:3c:2f:da:0e:d4:74:bf:91:fe:3e: c4:75:07:ea:a1:c2:66:d3:a5:12:aa:73:eb:27:47:03:b9:62: e6:5b:fa:43 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZps6PXGCrDNAMB0ceVnlM7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTEwMDgzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjljMGQ4YTEyMTVlYzg0N2VkYWU2MjIyYjY4MzA3NTM1MzI1MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15CUBK0a8usiW6fDLox8SZNgYQBe nIJDphERkzr6KzcJ4hlfRkC+uZ7Peqez25O7ADja5LF89BMg0YKa3e38OmJjfH4o 4kjCp0X9DfX+VIqt7dwwfRs6A6vwTBQHNCjbHLFIgieK/1fw+JAWJ6gubJs+EPF/ MsW++uFBE276RFrEqH3CDCHNiQDSjnnw/WqvWkPsOEFS6M891m5I6GTEGaKYCNP2 hL8HTjZMgkSiF1cS/GvSkvfEEt5N+5SV6QDsZhGcvG01UssGSLHeXWfLVhQMWYiL mieflAJONbtMhbUfaBiBvsN+SIe6l9hKILN2eVCYCL9zClzB711IV6f1IQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNacDYoSFeyEftrmIitoMHU1MlHwMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMXB3TmloSVY3SVItMnVZaUsyZ3dkVFV5VWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg/ewDAN BgkqhkiG9w0BAQsFAAOCAQEAJLEURVWAViasCLPJX7uLCe+p8VSlIzpstph21D8m uFaqvQsrmUcIdK8/8JRayvFGapzdBLOCmbNx6tbmc+xk2vxBV7sJBFt969m76aai ZF8vC9O8bvhdEvvAaGQZKNq5Rhan+/YvA5cQ08wT+Y/cTmNS0M5H/T27ABrdZkUQ yB02fFhlJyrL7w/NvaZdgzHCSOiA/IgTIaydvTiEUQm70DL45UkBGGUi3VFpHPTF vAAdDt/EK6/l7XO1lRN9HO0GPvvGD+eE+EXq10WWgL4V3aiZJJTLzFEKfb8pXlkL f1I8L9oO1HS/kf4+xHUH6qHCZtOlEqpz6ydHA7li5lv6Qw== -----END CERTIFICATE-----Generated at Wed Dec 17 04:11:41 2025 by rpki-client