This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/y1YiOwCd-mxlnJZnxKZbAQUGD-c.roa File: y1YiOwCd-mxlnJZnxKZbAQUGD-c.roa (raw, json) Hash identifier: YkCoArxNWJfwbuGhsy31kv0cC0nvm+BHZFXA6bTslKA= Subject key identifier: CB:56:22:3B:00:9D:FA:6C:65:9C:96:67:C4:A6:5B:01:05:06:0F:E7 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1387F2D436773189FA5D8C5D9313AE Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/y1YiOwCd-mxlnJZnxKZbAQUGD-c.roa Signing time: Fri 02 Jan 2026 00:20:13 +0000 ROA not before: Fri 02 Jan 2026 00:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205886 IP address blocks: 185.199.159.0/24 maxlen: 24 185.246.112.0/24 maxlen: 24 193.8.114.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 02 Jan 2026 13:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:87:f2:d4:36:77:31:89:fa:5d:8c:5d:93:13:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb56223b009dfa6c659c9667c4a65b0105060fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:7e:05:07:e7:57:b2:3f:e3:2c:48:96:3f: 66:cf:52:e2:bb:95:ac:14:8b:dc:ca:fc:95:12:f6: c4:af:61:07:72:0b:e0:8b:d7:9f:15:e3:63:8d:b3: 45:6a:d9:4b:a1:1d:eb:54:86:6a:4e:32:76:0a:ef: 83:02:97:b8:b9:f9:da:91:f0:60:cd:c1:f8:ef:0f: eb:f0:b0:05:f2:17:a8:33:9c:23:4c:35:9f:73:d9: 8d:3a:ea:84:e7:f0:55:ba:76:99:7d:7f:b0:b7:79: 1b:f7:79:78:fd:5a:9c:b9:4a:30:91:c2:24:c2:7e: 1b:7d:5b:fb:4e:b9:d9:cb:ac:01:35:35:b2:de:2e: d5:fb:e6:3b:b0:51:50:af:0b:b9:c4:84:5e:df:25: ee:4c:2f:89:c2:85:3f:6b:02:c3:c3:59:d8:ec:c3: e7:ff:9f:3e:a5:4c:7b:3c:92:19:b7:97:34:03:bf: d5:73:eb:ad:31:de:14:00:15:c3:d5:a0:fa:7b:42: d7:c1:d4:91:bd:22:74:e2:df:48:cb:ef:9e:43:3d: d6:5d:c1:a0:ad:49:13:84:eb:b3:91:30:da:88:2f: e0:e5:06:02:3a:b6:58:27:4a:95:64:6a:42:b2:86: fd:53:df:87:76:bd:bc:54:28:3d:ee:31:d6:48:a8: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:22:3B:00:9D:FA:6C:65:9C:96:67:C4:A6:5B:01:05:06:0F:E7 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/y1YiOwCd-mxlnJZnxKZbAQUGD-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.159.0/24 185.246.112.0/24 193.8.114.0/24 Signature Algorithm: sha256WithRSAEncryption b7:45:71:dd:00:40:7c:ad:a0:06:f7:99:f4:13:d7:83:b8:4a: 57:e9:28:d4:2b:ba:19:e1:b6:88:6b:2c:18:5b:09:54:1d:a5: 18:92:d4:67:eb:ef:9e:c5:a7:f1:69:3c:63:d1:46:4e:ce:d8: fa:aa:af:00:f5:81:1b:9e:59:a9:62:3b:8d:b8:f7:75:be:23: cc:16:a1:1f:02:1c:bf:ad:ca:3c:58:44:47:de:f3:f4:84:1d: bc:f3:90:62:cd:b5:fd:50:ec:be:a4:4a:2f:3f:b4:a0:b1:bd: 57:28:0a:98:0e:0b:54:d7:df:8c:a6:89:c7:d7:00:a1:67:9f: 60:dc:10:0f:1b:3c:49:de:b9:11:2c:8c:97:c2:55:77:7c:10: ed:be:e1:85:f2:59:a0:ac:b5:a9:9d:26:13:70:9a:6e:4a:42: 95:e7:39:ac:8e:14:81:a3:fe:fa:07:b8:ff:c9:af:cf:c8:3e: f0:5b:32:39:f7:99:75:d4:59:17:c0:f0:30:0f:1a:73:2f:b0: f3:a5:d5:96:75:7c:d3:f5:99:bb:e0:3f:ec:19:23:bd:5e:c0: 48:89:0d:14:13:a5:20:d8:32:30:bd:20:ba:e9:38:1b:11:d9: 43:1f:c4:d1:6b:63:c1:d1:4f:09:c3:0a:e3:62:d5:6f:25:7e: 78:f5:86:07 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E4fy1DZ3MYn6XYxdkxOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjU2MjIzYjAwOWRmYTZjNjU5Yzk2NjdjNGE2NWIwMTA1MDYwZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl21+BQfnV7I/4yxIlj9mz1Liu5Ws FIvcyvyVEvbEr2EHcgvgi9efFeNjjbNFatlLoR3rVIZqTjJ2Cu+DApe4ufnakfBg zcH47w/r8LAF8heoM5wjTDWfc9mNOuqE5/BVunaZfX+wt3kb93l4/VqcuUowkcIk wn4bfVv7TrnZy6wBNTWy3i7V++Y7sFFQrwu5xIRe3yXuTC+JwoU/awLDw1nY7MPn /58+pUx7PJIZt5c0A7/Vc+utMd4UABXD1aD6e0LXwdSRvSJ04t9Iy++eQz3WXcGg rUkThOuzkTDaiC/g5QYCOrZYJ0qVZGpCsob9U9+Hdr28VCg97jHWSKhL0QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMtWIjsAnfpsZZyWZ8SmWwEFBg/nMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEveTFZaU93Q2QtbXhsbkpabnhLWmJBUVVHRC1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAucefAwQA ufZwAwQAwQhyMA0GCSqGSIb3DQEBCwUAA4IBAQC3RXHdAEB8raAG95n0E9eDuEpX 6SjUK7oZ4baIaywYWwlUHaUYktRn6++exafxaTxj0UZOztj6qq8A9YEbnlmpYjuN uPd1viPMFqEfAhy/rco8WERH3vP0hB2885BizbX9UOy+pEovP7Sgsb1XKAqYDgtU 19+MponH1wChZ59g3BAPGzxJ3rkRLIyXwlV3fBDtvuGF8lmgrLWpnSYTcJpuSkKV 5zmsjhSBo/76B7j/ya/PyD7wWzI595l11FkXwPAwDxpzL7DzpdWWdXzT9Zm74D/s GSO9XsBIiQ0UE6Ug2DIwvSC66TgbEdlDH8TRa2PB0U8JwwrjYtVvJX549YYH -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:17 2026 by rpki-client