This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GEb5hCGKaGKBS6Iknr5SBfbBbZY.roa File: GEb5hCGKaGKBS6Iknr5SBfbBbZY.roa (raw, json) Hash identifier: +lw7xE2W4rUpQaThiA3ugd/VTkJG7olSJVjztW52x8U= Subject key identifier: 18:46:F9:84:21:8A:68:62:81:4B:A2:24:9E:BE:52:05:F6:C1:6D:96 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B1AA352F75E722BC438B946E8F5A81747 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GEb5hCGKaGKBS6Iknr5SBfbBbZY.roa Signing time: Sun 14 Dec 2025 02:14:29 +0000 ROA not before: Sun 14 Dec 2025 02:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213877 IP address blocks: 64.188.73.0/24 maxlen: 24 64.188.75.0/24 maxlen: 24 64.188.92.0/22 maxlen: 24 64.188.96.0/24 maxlen: 24 64.188.97.0/24 maxlen: 24 64.188.112.0/23 maxlen: 24 64.188.124.0/24 maxlen: 24 64.188.125.0/24 maxlen: 24 64.188.126.0/24 maxlen: 24 77.239.104.0/24 maxlen: 24 77.239.105.0/24 maxlen: 24 77.239.122.0/24 maxlen: 24 77.239.123.0/24 maxlen: 24 144.31.26.0/23 maxlen: 24 144.31.64.0/22 maxlen: 24 144.31.68.0/22 maxlen: 24 144.31.72.0/22 maxlen: 24 144.31.76.0/22 maxlen: 24 144.31.86.0/23 maxlen: 24 144.31.89.0/24 maxlen: 24 144.31.104.0/23 maxlen: 24 144.31.114.0/23 maxlen: 24 144.31.120.0/23 maxlen: 24 144.31.137.0/24 maxlen: 24 144.31.142.0/23 maxlen: 24 144.31.192.0/23 maxlen: 24 144.31.198.0/23 maxlen: 24 144.31.246.0/23 maxlen: 24 150.241.105.0/24 maxlen: 24 150.241.108.0/24 maxlen: 24 150.241.123.0/24 maxlen: 24 185.184.122.0/24 maxlen: 24 185.184.123.0/24 maxlen: 24 185.207.133.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 15 Dec 2025 17:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:a3:52:f7:5e:72:2b:c4:38:b9:46:e8:f5:a8:17:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 14 02:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1846f984218a6862814ba2249ebe5205f6c16d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a5:b4:bc:89:3e:b8:97:fc:5f:a8:68:cf:a9: 58:ce:5a:79:d2:3f:24:9f:b6:92:36:2d:d9:c3:c0: 4d:66:38:5c:e1:b2:c2:bb:fc:d3:8e:c8:f9:f5:27: 84:f3:e2:e5:46:5d:10:81:14:d2:54:44:77:d2:b7: f8:7a:4a:22:84:de:ea:3b:b0:3f:c5:63:54:2f:25: c7:e2:a5:91:6f:86:9b:4a:83:4a:44:4e:9d:77:7d: 39:5f:82:43:0d:e2:10:82:f1:40:3d:5f:c1:cb:01: 30:84:88:0d:b4:ee:5d:4a:45:47:78:92:00:3e:22: 0f:ad:fb:e1:b7:19:d0:3e:29:97:18:3f:b4:44:bc: 6a:b9:ef:7d:d2:12:5d:97:23:3a:73:5d:9f:55:8d: 2d:6b:c5:54:a8:8f:a6:78:ad:90:7e:ce:80:62:cb: c0:76:10:f3:2a:7d:37:a4:03:f1:47:18:7b:ff:43: 74:60:ed:9d:53:98:4a:4f:fc:2a:7a:bc:89:f3:fe: e1:54:33:da:05:d9:f9:f0:f5:56:87:65:f0:0d:d3: 74:3e:45:77:d0:03:f0:55:ac:95:91:fb:cf:e5:9f: b4:9d:c8:82:14:b2:93:9a:63:ce:2b:63:aa:08:5a: 7e:8f:93:ab:06:51:fb:10:56:01:a5:0b:2c:62:56: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:46:F9:84:21:8A:68:62:81:4B:A2:24:9E:BE:52:05:F6:C1:6D:96 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GEb5hCGKaGKBS6Iknr5SBfbBbZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.73.0/24 64.188.75.0/24 64.188.92.0-64.188.97.255 64.188.112.0/23 64.188.124.0-64.188.126.255 77.239.104.0/23 77.239.122.0/23 144.31.26.0/23 144.31.64.0/20 144.31.86.0/23 144.31.89.0/24 144.31.104.0/23 144.31.114.0/23 144.31.120.0/23 144.31.137.0/24 144.31.142.0/23 144.31.192.0/23 144.31.198.0/23 144.31.246.0/23 150.241.105.0/24 150.241.108.0/24 150.241.123.0/24 185.184.122.0/23 185.207.133.0/24 Signature Algorithm: sha256WithRSAEncryption 95:48:5b:7c:15:d1:03:c6:80:fa:68:24:9c:8a:f1:9b:8f:7d: e3:02:c0:75:d9:e8:ae:79:a0:4f:47:44:2f:51:26:7a:a7:db: 71:0f:04:bd:9f:59:1d:db:33:c2:76:97:88:2d:8e:f9:78:f3: 6f:92:ee:d7:e2:cf:e3:13:34:62:5d:e0:b1:2b:1e:3b:01:dc: f2:a4:99:9b:a5:af:b1:fd:8d:43:bc:75:d2:90:98:a1:1b:4e: 93:f1:b4:3a:f0:67:45:93:c1:14:ec:5e:1e:8c:25:aa:8a:a6: fb:d1:7d:7b:ca:31:5a:ad:0d:3a:6e:60:49:4c:7f:1f:a9:65: 90:2c:eb:e7:69:5a:7a:05:6c:98:6f:f6:9b:3d:a1:92:d2:c1: fe:4d:2c:af:a8:79:0a:f7:64:96:f2:d4:f2:cd:bd:b7:1f:f8: 9e:b2:f0:75:fe:8b:df:64:be:6b:ea:35:69:28:35:26:61:ff: 4e:ad:d2:12:e9:c1:cb:6e:85:66:a7:16:82:1f:bb:71:d9:b0: 40:78:12:45:f3:31:bf:34:13:a3:26:58:e8:4e:ee:98:b3:28: 23:ca:c8:f4:23:72:c2:b4:ae:87:6e:fb:fb:f9:3f:5b:03:18: da:cb:5c:45:b4:b6:4b:63:4b:dd:be:b6:80:0a:7a:fd:53:87: 96:90:e2:ec -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZsao1L3XnIrxDi5Ruj1qBdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE0MDIxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODQ2Zjk4NDIxOGE2ODYyODE0YmEyMjQ5ZWJlNTIwNWY2YzE2ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaW0vIk+uJf8X6hoz6lYzlp50j8k n7aSNi3Zw8BNZjhc4bLCu/zTjsj59SeE8+LlRl0QgRTSVER30rf4ekoihN7qO7A/ xWNULyXH4qWRb4abSoNKRE6dd305X4JDDeIQgvFAPV/BywEwhIgNtO5dSkVHeJIA PiIPrfvhtxnQPimXGD+0RLxque990hJdlyM6c12fVY0ta8VUqI+meK2Qfs6AYsvA dhDzKn03pAPxRxh7/0N0YO2dU5hKT/wqeryJ8/7hVDPaBdn58PVWh2XwDdN0PkV3 0APwVayVkfvP5Z+0nciCFLKTmmPOK2OqCFp+j5OrBlH7EFYBpQssYla/oQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFBhG+YQhimhigUuiJJ6+UgX2wW2WMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvR0ViNWhDR0thR0tCUzZJa25yNVNCZmJCYlpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBpwQCAAEwgaADBABA vEkDBABAvEswDAMEAkC8XAMEAUC8YAMEAUC8cDAMAwQCQLx8AwQAQLx+AwQBTe9o AwQBTe96AwQBkB8aAwQEkB9AAwQBkB9WAwQAkB9ZAwQBkB9oAwQBkB9yAwQBkB94 AwQAkB+JAwQBkB+OAwQBkB/AAwQBkB/GAwQBkB/2AwQAlvFpAwQAlvFsAwQAlvF7 AwQBubh6AwQAuc+FMA0GCSqGSIb3DQEBCwUAA4IBAQCVSFt8FdEDxoD6aCScivGb j33jAsB12eiueaBPR0QvUSZ6p9txDwS9n1kd2zPCdpeILY75ePNvku7X4s/jEzRi XeCxKx47AdzypJmbpa+x/Y1DvHXSkJihG06T8bQ68GdFk8EU7F4ejCWqiqb70X17 yjFarQ06bmBJTH8fqWWQLOvnaVp6BWyYb/abPaGS0sH+TSyvqHkK92SW8tTyzb23 H/iesvB1/ovfZL5r6jVpKDUmYf9OrdIS6cHLboVmpxaCH7tx2bBAeBJF8zG/NBOj JljoTu6Ysygjysj0I3LCtK6Hbvv7+T9bAxjay1xFtLZLY0vdvraACnr9U4eWkOLs -----END CERTIFICATE-----Generated at Mon Dec 15 19:46:18 2025 by rpki-client