This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GZUOfWCeY8Z-KVqQFmu9h9cGHDs.roa File: GZUOfWCeY8Z-KVqQFmu9h9cGHDs.roa (raw, json) Hash identifier: OccMal/1C+/t6nYwlcBSumqyPb/hiC6fBjVPfHeZFKM= Subject key identifier: 19:95:0E:7D:60:9E:63:C6:7E:29:5A:90:16:6B:BD:87:D7:06:1C:3B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B0E7F6AB63E9633A8748ECC8B70A5 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GZUOfWCeY8Z-KVqQFmu9h9cGHDs.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207350 IP address blocks: 45.159.148.0/24 maxlen: 24 2a05:9080:1::/48 maxlen: 48 2a05:9080:15::/48 maxlen: 48 Validation: Failed, certificate revoked on Sat 03 Jan 2026 18:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0e:7f:6a:b6:3e:96:33:a8:74:8e:cc:8b:70:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19950e7d609e63c67e295a90166bbd87d7061c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e0:a6:0f:24:d0:b1:6c:e0:81:0f:fa:ad:1e: a3:ee:2a:29:0b:7c:86:d7:5e:6e:9d:70:46:71:6d: 08:cf:b1:cf:1d:da:6a:60:07:58:93:c8:d2:b4:5e: 50:b0:41:1b:0d:31:21:24:25:92:ff:96:92:c4:05: 9e:97:94:33:ba:f2:9e:ea:17:83:3b:17:87:1e:d4: 38:5b:17:8f:3b:ac:31:7e:32:f8:7e:b7:21:4f:47: 79:76:f2:2a:19:0f:ad:39:85:65:29:31:1c:b5:d8: 6b:ec:5c:19:ab:61:1a:b8:08:e5:b5:34:68:7a:8a: c1:62:5f:43:3b:40:c2:f4:cb:eb:4f:57:48:fa:1f: c3:9a:f9:27:82:1f:6a:43:2c:30:d1:5e:81:0a:49: 5c:01:66:50:e4:5e:13:1a:4b:4c:0a:5c:09:23:93: 18:8c:dc:02:fb:d2:cd:85:fc:d0:44:4f:67:fd:39: 35:e3:75:08:f1:a3:e9:4d:26:08:5b:c8:af:aa:5a: 6e:ac:4e:2f:71:0f:7a:43:77:80:23:dc:ab:91:79: 88:28:99:f6:56:79:d3:a5:a8:6d:04:1d:9e:a0:b4: f6:84:a1:88:56:6b:15:1a:bf:01:2b:aa:1e:be:2a: 35:06:bf:b6:c8:5f:ee:3b:4c:ff:f2:a3:31:a5:a9: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:95:0E:7D:60:9E:63:C6:7E:29:5A:90:16:6B:BD:87:D7:06:1C:3B X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GZUOfWCeY8Z-KVqQFmu9h9cGHDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.148.0/24 IPv6: 2a05:9080:1::/48 2a05:9080:15::/48 Signature Algorithm: sha256WithRSAEncryption 62:0c:3d:3d:c0:87:5a:16:70:b0:d9:01:67:3c:83:6f:52:1d: 1d:5e:5c:89:e0:f0:48:fd:67:ed:65:b1:8d:e3:b3:6f:92:3f: 60:15:cf:9b:06:7e:aa:a1:67:1c:39:54:27:94:7b:52:63:6d: 74:cf:90:9d:ff:fe:fd:3e:f9:de:d4:88:d3:91:24:eb:42:18: d0:38:1f:61:7b:79:60:28:b4:3b:97:b6:6b:3c:12:4a:93:ff: cd:1b:27:b9:60:8b:79:83:49:0c:a7:77:ee:61:33:ef:f9:65: 61:c9:4b:46:0f:ab:e9:7e:4a:8b:8c:af:e6:ee:d8:2c:23:47: 92:98:bb:9a:f8:d2:21:cf:67:32:d5:0b:a3:43:74:51:b6:0e: c9:40:b9:92:4a:c0:11:63:9f:a2:22:cc:62:b4:ce:bc:6f:12: c4:f9:b0:d0:1e:7b:b1:79:dc:01:ff:1a:e1:cc:36:fb:05:a9: bc:3e:e1:10:cd:1c:35:8f:35:91:11:05:9c:08:33:79:4e:3e: 02:23:e2:a3:03:c0:82:a9:2f:d9:f9:8b:e6:b3:9c:15:ca:81: 56:8a:b3:e6:0d:b1:a4:84:fe:f4:89:b6:ed:ef:2c:d4:3b:64: a9:26:1b:8e:44:36:4c:82:e6:f5:c1:e8:e0:b3:e8:89:95:99: 27:76:ce:34 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6Ww5/arY+ljOodI7Mi3ClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTk1MGU3ZDYwOWU2M2M2N2UyOTVhOTAxNjZiYmQ4N2Q3MDYxYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOCmDyTQsWzggQ/6rR6j7iopC3yG 115unXBGcW0Iz7HPHdpqYAdYk8jStF5QsEEbDTEhJCWS/5aSxAWel5QzuvKe6heD OxeHHtQ4WxePO6wxfjL4frchT0d5dvIqGQ+tOYVlKTEctdhr7FwZq2EauAjltTRo eorBYl9DO0DC9MvrT1dI+h/Dmvkngh9qQyww0V6BCklcAWZQ5F4TGktMClwJI5MY jNwC+9LNhfzQRE9n/Tk143UI8aPpTSYIW8ivqlpurE4vcQ96Q3eAI9yrkXmIKJn2 VnnTpahtBB2eoLT2hKGIVmsVGr8BK6oevio1Br+2yF/uO0z/8qMxpanFAwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBmVDn1gnmPGfilakBZrvYfXBhw7MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvR1pVT2ZXQ2VZOFotS1ZxUUZtdTloOWNHSERzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQALZ+UMBgE AgACMBIDBwAqBZCAAAEDBwAqBZCAABUwDQYJKoZIhvcNAQELBQADggEBAGIMPT3A h1oWcLDZAWc8g29SHR1eXIng8Ej9Z+1lsY3js2+SP2AVz5sGfqqhZxw5VCeUe1Jj bXTPkJ3//v0++d7UiNORJOtCGNA4H2F7eWAotDuXtms8EkqT/80bJ7lgi3mDSQyn d+5hM+/5ZWHJS0YPq+l+SouMr+bu2CwjR5KYu5r40iHPZzLVC6NDdFG2DslAuZJK wBFjn6IizGK0zrxvEsT5sNAee7F53AH/GuHMNvsFqbw+4RDNHDWPNZERBZwIM3lO PgIj4qMDwIKpL9n5i+aznBXKgVaKs+YNsaSE/vSJtu3vLNQ7ZKkmG45ENkyC5vXB 6OCz6ImVmSd2zjQ= -----END CERTIFICATE-----Generated at Mon Jan 5 13:06:16 2026 by rpki-client