This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-qSD-BHNS0rreIYzdCklMjXQOas.roa File: 1-qSD-BHNS0rreIYzdCklMjXQOas.roa (raw, json) Hash identifier: aTeXNLY59XxoLnltOX+S8Uy3AH0CvquPFXZz/+BLQRQ= Subject key identifier: FA:A4:83:F8:11:CD:4B:4A:EB:78:86:33:74:29:25:32:35:D0:39:AB Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019A584C3F8F66035C44AA8E6F01FF87880B Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-qSD-BHNS0rreIYzdCklMjXQOas.roa Signing time: Thu 06 Nov 2025 08:33:03 +0000 ROA not before: Thu 06 Nov 2025 08:33:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 77.242.146.0/23 maxlen: 24 88.151.56.0/23 maxlen: 24 88.151.61.0/24 maxlen: 24 88.209.201.0/24 maxlen: 24 88.209.227.0/24 maxlen: 24 88.209.232.0/22 maxlen: 24 Validation: Failed, certificate revoked on Wed 12 Nov 2025 07:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:4c:3f:8f:66:03:5c:44:aa:8e:6f:01:ff:87:88:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Nov 6 08:33:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=faa483f811cd4b4aeb7886337429253235d039ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:8c:82:98:2e:9c:02:8f:a2:e5:e2:4f:9c: 18:89:f5:2c:f3:1c:b0:4c:e1:8c:e4:2f:89:d2:db: e4:f3:b9:31:0f:13:41:ef:7b:93:a6:c6:7a:d6:f4: 7d:f6:c4:34:70:ad:ad:3c:9a:ec:7b:43:06:ec:de: 20:46:36:f7:b2:83:53:12:17:f3:cf:a7:1c:99:de: eb:79:95:64:72:c1:bc:f9:c4:27:8f:c5:33:4a:d4: d2:a2:e0:e1:5e:c7:aa:e4:3a:ad:96:c3:e0:6c:10: d3:df:e7:47:96:86:0f:db:21:2b:56:65:9f:fe:83: f9:23:90:8c:12:f9:6b:82:55:7b:0f:f4:fa:4b:a9: 39:10:5d:09:68:88:7a:e6:e4:3c:93:0d:34:da:62: 19:ca:51:33:8d:2a:8e:c5:f9:77:67:74:d6:4e:4f: a4:b5:e0:e4:83:8c:a3:62:c0:e2:6b:81:62:5f:1f: cd:4e:73:f9:4b:e3:7b:8d:73:96:cb:14:92:d7:51: 5b:ab:7d:a1:2e:53:8a:70:ae:69:5f:63:27:de:fc: 3d:b6:bc:cd:05:f7:40:6c:10:1e:60:8f:a5:39:43: 1a:db:fc:0a:f5:b0:45:f5:c9:ef:dc:5c:5a:b9:2f: 2e:3c:40:74:f3:43:c1:d3:f7:6e:0f:81:8b:46:c0: f7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A4:83:F8:11:CD:4B:4A:EB:78:86:33:74:29:25:32:35:D0:39:AB X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-qSD-BHNS0rreIYzdCklMjXQOas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.242.146.0/23 88.151.56.0/23 88.151.61.0/24 88.209.201.0/24 88.209.227.0/24 88.209.232.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:ea:8c:0a:1f:98:e4:da:a5:c5:5e:bf:45:cb:9e:51:29:db: 6c:b5:ba:cf:36:ad:24:e7:45:d1:b5:72:c8:9c:c1:d3:7d:88: eb:5c:41:0e:05:8a:1e:d1:f6:7e:d5:5a:a5:51:24:db:30:e8: 83:a5:cb:93:d8:4e:de:55:5d:87:74:c0:bb:fd:d6:ab:6a:47: 2d:15:c9:44:a7:69:09:1d:87:9c:09:eb:28:82:ee:32:9c:fb: 6b:4a:b1:5b:3c:e9:05:90:3e:97:37:b3:76:2d:d0:b6:f7:c2: 4b:0f:47:06:20:81:b3:b1:51:2d:54:00:ab:ef:62:dc:f3:1b: fb:c7:f7:bf:29:2a:da:44:59:a1:ea:31:42:bb:23:56:d6:b3: 14:7e:9a:1b:ab:cd:eb:a1:22:69:95:40:be:32:c4:2c:18:2b: bf:bc:15:a8:a7:3e:e7:33:9d:72:53:86:0e:f8:83:0d:77:e8: 70:05:73:fc:ad:08:5f:9f:4e:4f:1a:64:31:47:de:1c:d8:fb: 1b:a6:c1:eb:01:4d:05:34:88:5a:75:46:6e:a1:35:dc:92:10: 00:6c:f1:36:59:f4:b3:74:8d:a1:b3:36:3b:62:45:90:85:b4: b6:b6:e4:11:3d:2a:b0:bc:d7:dd:fb:21:52:dd:73:23:c8:c7: e4:72:4d:d0 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZpYTD+PZgNcRKqObwH/h4gLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjUxMTA2MDgzMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWE0ODNmODExY2Q0YjRhZWI3ODg2MzM3NDI5MjUzMjM1ZDAzOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5qMgpgunAKPouXiT5wYifUs8xyw TOGM5C+J0tvk87kxDxNB73uTpsZ61vR99sQ0cK2tPJrse0MG7N4gRjb3soNTEhfz z6ccmd7reZVkcsG8+cQnj8UzStTSouDhXseq5DqtlsPgbBDT3+dHloYP2yErVmWf /oP5I5CMEvlrglV7D/T6S6k5EF0JaIh65uQ8kw002mIZylEzjSqOxfl3Z3TWTk+k teDkg4yjYsDia4FiXx/NTnP5S+N7jXOWyxSS11Fbq32hLlOKcK5pX2Mn3vw9trzN BfdAbBAeYI+lOUMa2/wK9bBF9cnv3FxauS8uPEB080PB0/duD4GLRsD34wIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPqkg/gRzUtK63iGM3QpJTI10DmrMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvMS1xU0QtQkhOUzBycmVJWXpkQ2tsTWpYUU9hcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGQvNTg5MTI3LTEwOTYtNGM5MS05NmNjLTdlNGQ2ZjZmNmU2 Ni8xL3phcWc0SUkyQTJDczJqUjJaT3VERk9zUjJoQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAU3ykgME AViXOAMEAFiXPQMEAFjRyQMEAFjR4wMEAljR6DANBgkqhkiG9w0BAQsFAAOCAQEA O+qMCh+Y5NqlxV6/RcueUSnbbLW6zzatJOdF0bVyyJzB032I61xBDgWKHtH2ftVa pVEk2zDog6XLk9hO3lVdh3TAu/3Wq2pHLRXJRKdpCR2HnAnrKILuMpz7a0qxWzzp BZA+lzezdi3QtvfCSw9HBiCBs7FRLVQAq+9i3PMb+8f3vykq2kRZoeoxQrsjVtaz FH6aG6vN66EiaZVAvjLELBgrv7wVqKc+5zOdclOGDviDDXfocAVz/K0IX59OTxpk MUfeHNj7G6bB6wFNBTSIWnVGbqE13JIQAGzxNln0s3SNobM2O2JFkIW0trbkET0q sLzX3fshUt1zI8jH5HJN0A== -----END CERTIFICATE-----Generated at Sun Dec 7 12:38:49 2025 by rpki-client