This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/OPB1Rn-3w8QlKhvS6i0ojPKJg20.roa File: OPB1Rn-3w8QlKhvS6i0ojPKJg20.roa (raw, json) Hash identifier: 8HX2sOkSJ7GCUDqGjwOaBg4WZbA8+vh5oizYkV1n4YA= Subject key identifier: 38:F0:75:46:7F:B7:C3:C4:25:2A:1B:D2:EA:2D:28:8C:F2:89:83:6D Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019AFD1E8F550D86A7A307CCC1C3B5B485F5 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/OPB1Rn-3w8QlKhvS6i0ojPKJg20.roa Signing time: Mon 08 Dec 2025 08:40:29 +0000 ROA not before: Mon 08 Dec 2025 08:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13647 IP address blocks: 89.38.200.0/21 maxlen: 24 93.113.136.0/21 maxlen: 24 Validation: Failed, certificate revoked on Mon 08 Dec 2025 12:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:1e:8f:55:0d:86:a7:a3:07:cc:c1:c3:b5:b4:85:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Dec 8 08:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=38f075467fb7c3c4252a1bd2ea2d288cf289836d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:ee:13:16:81:20:6e:18:54:d5:ea:b6:9e: 58:7f:ef:b9:d6:8e:93:bd:0e:1e:52:dd:cf:98:ea: 39:f9:2b:c5:8a:d3:0d:e1:86:4b:59:14:20:49:aa: 43:e0:8c:d3:ca:c1:9f:3a:45:89:48:3b:c2:15:0f: c3:c3:65:a7:1e:09:53:60:07:30:b8:33:24:99:e5: 1e:3a:3f:a1:a0:75:ec:cb:d1:91:77:b7:18:0f:a5: 1e:b4:0b:97:16:0a:0f:2d:58:b9:81:c7:9a:02:50: 3c:01:2b:4d:4c:37:5e:95:97:b7:85:92:64:02:6f: 5a:54:ce:66:b6:c7:d4:c6:04:79:28:ef:0e:d7:73: 1b:f6:0c:41:3d:47:cf:c4:dd:49:58:b4:10:b0:ab: 28:e1:b7:7e:ec:ed:18:42:bc:e4:14:27:85:31:bf: d4:ef:04:34:3e:c7:82:4a:73:86:4a:f5:7d:58:80: 3a:e4:b7:88:fc:80:c9:f7:58:e7:9f:93:d7:c6:45: e5:c8:ef:57:1a:81:a9:f7:f4:a6:4d:0c:bf:81:43: ec:cb:55:1b:bb:94:73:30:f3:24:c0:21:68:50:cf: a8:09:49:7b:5a:c8:53:e4:7b:b1:27:07:73:84:b6: ab:a6:4c:a4:0a:b3:bb:76:53:44:53:4f:e4:dd:cd: 75:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F0:75:46:7F:B7:C3:C4:25:2A:1B:D2:EA:2D:28:8C:F2:89:83:6D X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/OPB1Rn-3w8QlKhvS6i0ojPKJg20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.200.0/21 93.113.136.0/21 Signature Algorithm: sha256WithRSAEncryption 56:2a:ef:a3:79:9e:fd:82:9b:1a:af:76:55:c5:4b:b1:91:0f: 6d:28:9f:c5:75:ff:3d:28:0a:a9:b2:b2:ca:67:0e:fe:ee:87: ae:38:83:a0:86:c6:00:02:9d:56:63:92:c1:41:c4:fd:63:6a: 4a:5c:ac:00:90:59:5d:24:db:28:b8:55:80:7e:ce:65:77:c2: 11:00:22:d7:0e:1f:81:58:3d:cf:e3:1a:34:66:54:d0:39:ae: 67:62:dc:f9:c6:5e:f1:d6:1a:0b:62:b9:67:10:5c:70:ff:01: f2:5a:e5:ae:98:0e:c3:ab:be:97:ea:ff:ed:53:54:a7:43:78: 11:2d:d0:d3:e4:3b:3d:48:3c:87:b7:53:90:19:71:d9:d3:5a: 05:25:72:81:87:1b:6f:5b:d2:6b:8f:f3:4f:7e:8f:0b:51:43: 03:06:65:fa:79:f1:66:35:91:3b:d7:68:46:20:67:0f:0d:6b: cb:76:3f:6c:6f:dd:34:c4:77:6b:87:16:f7:38:a0:a9:08:3b: 84:31:6f:b5:b7:99:61:e4:9a:8e:82:41:18:fe:11:d7:15:da: 2c:06:fb:10:af:ba:70:0b:54:c7:22:52:9c:ef:1d:e3:e4:92: 9c:a9:a9:52:36:c8:12:87:d9:8e:75:3d:e1:d5:5e:b5:ec:d3: ec:2e:c4:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr9Ho9VDYanowfMwcO1tIX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUxMjA4MDg0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGYwNzU0NjdmYjdjM2M0MjUyYTFiZDJlYTJkMjg4Y2YyODk4MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/TuExaBIG4YVNXqtp5Yf++51o6T vQ4eUt3PmOo5+SvFitMN4YZLWRQgSapD4IzTysGfOkWJSDvCFQ/Dw2WnHglTYAcw uDMkmeUeOj+hoHXsy9GRd7cYD6UetAuXFgoPLVi5gceaAlA8AStNTDdelZe3hZJk Am9aVM5mtsfUxgR5KO8O13Mb9gxBPUfPxN1JWLQQsKso4bd+7O0YQrzkFCeFMb/U 7wQ0PseCSnOGSvV9WIA65LeI/IDJ91jnn5PXxkXlyO9XGoGp9/SmTQy/gUPsy1Ub u5RzMPMkwCFoUM+oCUl7WshT5HuxJwdzhLarpkykCrO7dlNEU0/k3c11yQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDjwdUZ/t8PEJSob0uotKIzyiYNtMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvT1BCMVJuLTN3OFFsS2h2UzZpMG9qUEtKZzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDWSbIAwQD XXGIMA0GCSqGSIb3DQEBCwUAA4IBAQBWKu+jeZ79gpsar3ZVxUuxkQ9tKJ/Fdf89 KAqpsrLKZw7+7oeuOIOghsYAAp1WY5LBQcT9Y2pKXKwAkFldJNsouFWAfs5ld8IR ACLXDh+BWD3P4xo0ZlTQOa5nYtz5xl7x1hoLYrlnEFxw/wHyWuWumA7Dq76X6v/t U1SnQ3gRLdDT5Ds9SDyHt1OQGXHZ01oFJXKBhxtvW9Jrj/NPfo8LUUMDBmX6efFm NZE712hGIGcPDWvLdj9sb900xHdrhxb3OKCpCDuEMW+1t5lh5JqOgkEY/hHXFdos BvsQr7pwC1THIlKc7x3j5JKcqalSNsgSh9mOdT3h1V617NPsLsSw -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:24 2025 by rpki-client