This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-N35x9FyxYKRo2FX8k6mtTHvN-k.roa File: 1-N35x9FyxYKRo2FX8k6mtTHvN-k.roa (raw, json) Hash identifier: P/CKsfR93uzhThT43M9iLt6Yoyl0dFDKY50Y4BCGr6o= Subject key identifier: F8:DD:F9:C7:D1:72:C5:82:91:A3:61:57:F2:4E:A6:B5:31:EF:37:E9 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B128254734D0F58995B68C39806DB88F6 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-N35x9FyxYKRo2FX8k6mtTHvN-k.roa Signing time: Fri 12 Dec 2025 12:21:29 +0000 ROA not before: Fri 12 Dec 2025 12:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 77.242.146.0/23 maxlen: 24 83.137.158.0/24 maxlen: 24 88.151.56.0/23 maxlen: 24 88.151.61.0/24 maxlen: 24 88.209.198.0/24 maxlen: 24 88.209.201.0/24 maxlen: 24 88.209.226.0/24 maxlen: 24 88.209.227.0/24 maxlen: 24 88.209.232.0/22 maxlen: 24 88.209.247.0/24 maxlen: 24 88.209.254.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 15 Dec 2025 08:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:82:54:73:4d:0f:58:99:5b:68:c3:98:06:db:88:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Dec 12 12:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8ddf9c7d172c58291a36157f24ea6b531ef37e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:94:2d:e5:49:9e:cb:e1:79:30:81:c3:37: 02:70:68:88:26:c4:43:dc:84:04:00:20:71:3c:a8: 2b:0e:93:5c:f9:1b:16:bc:0e:28:07:9c:0a:39:06: 9e:f1:84:36:3f:69:97:a0:0f:86:8d:c0:a8:27:08: 99:03:70:26:d5:6d:04:30:f5:4d:70:77:c3:97:bb: 16:4f:33:e0:67:b3:64:20:38:a7:e6:76:83:ba:20: f5:b7:f4:7b:c7:66:b8:45:80:ad:a7:b4:49:15:e9: 18:da:ba:67:52:60:c1:8e:e5:e7:ba:30:4e:3d:56: f1:54:f6:4f:52:5b:91:69:de:59:46:a2:28:7d:aa: 65:2e:2a:63:e9:81:83:fc:1c:16:bd:67:73:ed:3c: 48:c5:2b:a4:b8:71:65:c8:68:b8:9e:5d:c1:a4:64: eb:23:2c:b1:b1:bf:50:d9:06:b3:85:3b:81:19:53: 5b:4f:d1:f3:c5:88:9f:8a:a1:6f:b7:49:af:5d:e9: 09:32:1f:20:94:36:17:52:2e:fd:f5:7e:5b:be:55: d6:07:70:af:ca:d5:c8:18:ce:3d:da:68:d9:24:67: 60:fe:42:d8:f1:d8:d1:de:8b:e7:71:50:88:4e:92: 96:f6:31:d6:61:24:a9:13:45:9a:dc:d3:a1:14:92: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DD:F9:C7:D1:72:C5:82:91:A3:61:57:F2:4E:A6:B5:31:EF:37:E9 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-N35x9FyxYKRo2FX8k6mtTHvN-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.242.146.0/23 83.137.158.0/24 88.151.56.0/23 88.151.61.0/24 88.209.198.0/24 88.209.201.0/24 88.209.226.0/23 88.209.232.0/22 88.209.247.0/24 88.209.254.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:36:b1:7e:ac:31:ac:ba:be:c4:77:c6:4b:7d:9b:88:54:17: 60:3d:22:60:68:63:2c:1e:30:fc:ae:07:43:36:04:6d:a6:73: a7:d2:1d:52:8e:68:e9:53:5e:d5:a6:85:a8:4e:e0:ef:6d:3f: 2f:6a:15:c2:6f:48:08:ae:22:95:3a:dc:2f:fe:12:c9:cb:3c: a3:0d:65:6c:94:57:e4:82:0e:6f:f4:d7:3a:f0:63:71:c0:f0: 65:8a:26:7e:e1:d7:3a:4f:c6:43:a2:9e:2a:77:61:4b:7c:eb: 61:29:12:b2:4f:3d:86:f5:63:d8:ce:d8:7d:6f:27:4e:eb:12: 3c:1a:65:a6:c7:f4:3a:24:59:e7:e5:f9:d4:5d:3c:a1:b2:2c: 5f:4f:2f:9f:ae:ca:e6:f8:0b:44:ab:57:f9:8e:de:42:d0:f2: 78:d4:ed:e3:8d:5c:ec:3c:90:68:1f:53:58:5f:53:b4:8c:2c: 30:b9:5f:dc:44:f2:1c:5c:4c:de:97:f0:cd:fa:ae:8c:e6:82: 34:8c:4a:13:55:9b:11:0b:c6:93:1f:76:0c:70:9f:fb:00:51: 5a:e3:a7:97:fa:35:1a:fc:fb:25:e4:2a:92:f6:2a:bb:82:d7: 1b:47:e1:ab:ac:d7:84:36:85:9c:77:89:9c:e5:83:46:b5:11: 2e:e8:27:e6 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZsSglRzTQ9YmVtow5gG24j2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjUxMjEyMTIyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGRkZjljN2QxNzJjNTgyOTFhMzYxNTdmMjRlYTZiNTMxZWYzN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWKULeVJnsvheTCBwzcCcGiIJsRD 3IQEACBxPKgrDpNc+RsWvA4oB5wKOQae8YQ2P2mXoA+GjcCoJwiZA3Am1W0EMPVN cHfDl7sWTzPgZ7NkIDin5naDuiD1t/R7x2a4RYCtp7RJFekY2rpnUmDBjuXnujBO PVbxVPZPUluRad5ZRqIofaplLipj6YGD/BwWvWdz7TxIxSukuHFlyGi4nl3BpGTr Iyyxsb9Q2QazhTuBGVNbT9HzxYifiqFvt0mvXekJMh8glDYXUi799X5bvlXWB3Cv ytXIGM492mjZJGdg/kLY8djR3ovncVCITpKW9jHWYSSpE0Wa3NOhFJLhwQIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFPjd+cfRcsWCkaNhV/JOprUx7zfpMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvMS1OMzV4OUZ5eFlLUm8yRlg4azZtdFRIdk4tay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGQvNTg5MTI3LTEwOTYtNGM5MS05NmNjLTdlNGQ2ZjZmNmU2 Ni8xL3phcWc0SUkyQTJDczJqUjJaT3VERk9zUjJoQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAU3ykgME AFOJngMEAViXOAMEAFiXPQMEAFjRxgMEAFjRyQMEAVjR4gMEAljR6AMEAFjR9wME AFjR/jANBgkqhkiG9w0BAQsFAAOCAQEAnzaxfqwxrLq+xHfGS32biFQXYD0iYGhj LB4w/K4HQzYEbaZzp9IdUo5o6VNe1aaFqE7g720/L2oVwm9ICK4ilTrcL/4Sycs8 ow1lbJRX5IIOb/TXOvBjccDwZYomfuHXOk/GQ6KeKndhS3zrYSkSsk89hvVj2M7Y fW8nTusSPBplpsf0OiRZ5+X51F08obIsX08vn67K5vgLRKtX+Y7eQtDyeNTt441c 7DyQaB9TWF9TtIwsMLlf3ETyHFxM3pfwzfqujOaCNIxKE1WbEQvGkx92DHCf+wBR WuOnl/o1Gvz7JeQqkvYqu4LXG0fhq6zXhDaFnHeJnOWDRrURLugn5g== -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:00 2025 by rpki-client