This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/sSJUqC7tj4wGr5ArR_XaXNIwjdk.roa File: sSJUqC7tj4wGr5ArR_XaXNIwjdk.roa (raw, json) Hash identifier: 0mA2VPQnpCncJo4NkD7Dergg/TS/sSfoxKAtnDWBRRU= Subject key identifier: B1:22:54:A8:2E:ED:8F:8C:06:AF:90:2B:47:F5:DA:5C:D2:30:8D:D9 Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B7AC89B9B04BFD7E398537B4246440FF0 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/sSJUqC7tj4wGr5ArR_XaXNIwjdk.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 62.106.83.0/24 maxlen: 24 77.246.242.0/24 maxlen: 24 146.19.142.0/24 maxlen: 24 146.19.228.0/24 maxlen: 24 185.218.184.0/24 maxlen: 24 193.109.82.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 06 Jan 2026 21:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9b:9b:04:bf:d7:e3:98:53:7b:42:46:44:0f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b12254a82eed8f8c06af902b47f5da5cd2308dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:20:ba:cf:24:3b:05:0d:99:38:40:c8:ef: a4:db:a9:b1:35:17:48:ef:30:48:87:b8:a8:e4:67: 01:b3:37:ee:02:ef:0f:87:1f:22:ec:6d:07:5a:1e: f0:2d:a2:83:3a:b5:5c:43:de:06:17:1b:0d:36:5a: f7:b2:57:c4:b2:3f:c4:6d:d5:56:99:1b:61:f8:b2: 61:60:f6:97:b3:bc:76:19:28:c6:51:8a:23:e7:e5: 76:d4:0b:fe:10:36:d9:63:7f:98:8c:5c:1d:91:84: 4e:30:25:c2:2f:fd:c7:6d:12:7a:ad:23:1a:69:7f: 3c:ae:7a:27:4e:07:de:07:87:0f:e5:8c:99:53:0c: 51:23:bc:34:6c:ac:3c:9a:a1:16:5c:3b:47:d3:57: ba:94:30:c1:c1:50:6c:ee:17:73:ce:e6:ce:bf:fe: 57:1d:2f:37:fa:78:8b:a5:13:6f:eb:51:10:58:15: 3b:13:36:3c:41:ad:07:91:ff:99:31:3a:70:d0:32: a7:88:42:e4:b3:75:43:64:bd:6c:f6:16:12:76:6e: e8:d5:09:c8:d1:3f:f7:a3:45:e1:ed:26:56:72:32: ab:48:0b:b6:6a:ad:92:0e:b4:95:d7:df:49:31:5c: 3f:47:f0:07:a9:37:9e:e3:4e:77:75:9e:36:12:1c: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:22:54:A8:2E:ED:8F:8C:06:AF:90:2B:47:F5:DA:5C:D2:30:8D:D9 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/sSJUqC7tj4wGr5ArR_XaXNIwjdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.83.0/24 77.246.242.0/24 146.19.142.0/24 146.19.228.0/24 185.218.184.0/24 193.109.82.0/24 Signature Algorithm: sha256WithRSAEncryption 49:54:ac:23:99:82:50:b3:78:2d:df:fc:a0:cd:fb:cc:7d:b8: df:b1:20:12:8f:34:d9:2c:d2:06:01:62:f2:df:00:a5:32:96: 68:d2:d1:5f:ba:f1:76:ae:e0:03:cb:0f:49:56:e6:6f:ba:21: 91:1b:36:38:e4:67:a2:79:d9:6c:82:54:3a:be:11:13:8b:48: 2d:a4:9b:bf:0c:c6:80:d8:9b:57:1e:3a:f3:be:75:dd:16:c8: ea:b6:7a:7d:75:ac:4e:b8:44:d8:72:7f:25:df:d4:c6:22:e5: 24:ec:4f:4b:d4:11:17:a8:01:ce:d5:7b:5a:78:c5:82:28:74: b7:0b:e3:2a:cc:91:b2:d0:e9:cb:da:ae:8e:ff:ea:5c:76:72: e7:09:64:a0:5f:47:5c:c6:20:0e:62:f8:c2:57:8c:0f:00:a5: e2:de:bb:e3:13:06:9e:10:f5:ba:2b:a2:c4:9d:98:55:ff:e6: 30:4d:5b:c4:36:7e:a2:e3:22:51:b5:e4:9c:97:82:21:1e:2a: a5:0a:2d:c2:6b:8b:fd:16:af:58:78:c3:36:81:38:2f:66:67: b3:21:02:49:8b:f8:f4:53:f4:fa:55:a0:f2:48:8d:26:4f:b7: bb:33:b4:8e:bb:46:9f:99:10:30:f8:45:44:37:29:b9:4c:a0: a5:d2:b7:e4 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6yJubBL/X45hTe0JGRA/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTIyNTRhODJlZWQ4ZjhjMDZhZjkwMmI0N2Y1ZGE1Y2QyMzA4ZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx4gus8kOwUNmThAyO+k26mxNRdI 7zBIh7io5GcBszfuAu8Phx8i7G0HWh7wLaKDOrVcQ94GFxsNNlr3slfEsj/EbdVW mRth+LJhYPaXs7x2GSjGUYoj5+V21Av+EDbZY3+YjFwdkYROMCXCL/3HbRJ6rSMa aX88rnonTgfeB4cP5YyZUwxRI7w0bKw8mqEWXDtH01e6lDDBwVBs7hdzzubOv/5X HS83+niLpRNv61EQWBU7EzY8Qa0Hkf+ZMTpw0DKniELks3VDZL1s9hYSdm7o1QnI 0T/3o0Xh7SZWcjKrSAu2aq2SDrSV199JMVw/R/AHqTee4053dZ42EhwwGwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLEiVKgu7Y+MBq+QK0f12lzSMI3ZMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvc1NKVXFDN3RqNHdHcjVBclJfWGFYTkl3amRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAPmpTAwQA TfbyAwQAkhOOAwQAkhPkAwQAudq4AwQAwW1SMA0GCSqGSIb3DQEBCwUAA4IBAQBJ VKwjmYJQs3gt3/ygzfvMfbjfsSASjzTZLNIGAWLy3wClMpZo0tFfuvF2ruADyw9J VuZvuiGRGzY45GeiedlsglQ6vhETi0gtpJu/DMaA2JtXHjrzvnXdFsjqtnp9daxO uETYcn8l39TGIuUk7E9L1BEXqAHO1XtaeMWCKHS3C+MqzJGy0OnL2q6O/+pcdnLn CWSgX0dcxiAOYvjCV4wPAKXi3rvjEwaeEPW6K6LEnZhV/+YwTVvENn6i4yJRteSc l4IhHiqlCi3Ca4v9Fq9YeMM2gTgvZmezIQJJi/j0U/T6VaDySI0mT7e7M7SOu0af mRAw+EVENym5TKCl0rfk -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:49 2026 by rpki-client