This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kbwvUzp8i0qpE9DdIFI8MqxlwN0.roa File: kbwvUzp8i0qpE9DdIFI8MqxlwN0.roa (raw, json) Hash identifier: vlYoNqZAo+94dU7vGL1ROrKpDdZqoS9HxhsrnTpFQT4= Subject key identifier: 91:BC:2F:53:3A:7C:8B:4A:A9:13:D0:DD:20:52:3C:32:AC:65:C0:DD Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019A6BB46CBF8BC997792112BB10AF33CAD9 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kbwvUzp8i0qpE9DdIFI8MqxlwN0.roa Signing time: Mon 10 Nov 2025 02:59:37 +0000 ROA not before: Mon 10 Nov 2025 02:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 14.102.227.0/24 maxlen: 24 14.102.234.0/24 maxlen: 24 43.242.136.0/24 maxlen: 24 89.106.16.0/24 maxlen: 24 89.106.18.0/24 maxlen: 24 89.106.21.0/24 maxlen: 24 89.106.22.0/24 maxlen: 24 89.106.23.0/24 maxlen: 24 94.229.218.0/24 maxlen: 24 103.102.132.0/24 maxlen: 24 124.158.112.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 18 Nov 2025 23:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6b:b4:6c:bf:8b:c9:97:79:21:12:bb:10:af:33:ca:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Nov 10 02:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91bc2f533a7c8b4aa913d0dd20523c32ac65c0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:3c:89:5f:37:63:75:15:13:14:7e:ec:9c: d3:5e:2e:6f:2c:e2:bd:1c:58:2b:59:13:9d:2c:3a: 4d:d6:ea:1c:43:6b:30:8d:44:76:7b:4f:72:c5:c9: 38:be:b8:ee:5f:9f:26:ff:72:16:3c:b6:57:7f:96: a9:ff:8a:7d:a4:46:9f:22:ec:37:83:34:40:66:8e: f7:42:7e:09:ae:fb:08:bc:e9:f6:7e:40:b1:1c:fe: 34:46:36:c9:46:62:86:ab:7c:93:ae:1a:5c:6f:60: 29:df:56:34:0a:1a:de:29:5b:fd:8f:e8:19:03:2e: 15:c6:1c:80:a3:ef:4a:d7:f3:31:10:8c:0c:a7:e5: fd:b4:18:df:83:7a:07:53:a3:30:5e:47:3b:99:f9: e3:85:80:26:77:50:28:4b:ff:22:23:2f:93:62:e5: 58:5f:2e:e8:d1:24:e7:7a:81:1f:be:6b:16:9e:84: a2:b9:6f:02:50:85:41:41:09:e0:27:8c:72:ee:73: 48:6f:3e:81:09:a3:a5:2c:7f:06:b4:a1:de:4d:f8: 4d:1b:0a:aa:35:29:a5:6e:66:30:8b:72:9e:6f:27: 5a:56:46:83:87:68:ee:1d:ca:e0:e7:5f:77:3e:88: bf:a3:96:e8:ef:7a:a1:24:85:88:6e:a8:a3:2f:73: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BC:2F:53:3A:7C:8B:4A:A9:13:D0:DD:20:52:3C:32:AC:65:C0:DD X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kbwvUzp8i0qpE9DdIFI8MqxlwN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.227.0/24 14.102.234.0/24 43.242.136.0/24 89.106.16.0/24 89.106.18.0/24 89.106.21.0-89.106.23.255 94.229.218.0/24 103.102.132.0/24 124.158.112.0/24 Signature Algorithm: sha256WithRSAEncryption 07:76:ff:7f:2d:cd:59:d8:5e:08:71:23:4c:2d:67:39:a2:a1: 57:54:68:29:45:34:29:2c:4e:f4:fc:22:55:aa:aa:a1:91:07: e0:aa:7a:85:98:3b:7d:26:45:9f:34:8f:29:8f:52:33:0c:9d: 90:92:a6:75:c0:92:94:1b:47:26:fa:eb:f0:0e:c8:a5:d4:32: cb:04:2e:57:72:1f:0b:b6:30:c1:4d:c9:6e:6d:7b:86:27:b7: c0:11:0f:3b:d0:34:23:e8:c7:04:5a:b7:e9:03:1a:db:fb:e9: f3:04:54:9c:68:41:8a:fc:12:95:88:f0:62:86:28:26:1d:d9: c3:a8:8f:9d:04:1f:a5:17:dc:15:cb:12:22:db:a3:10:c5:8c: d6:16:84:2f:c3:1d:66:7d:9f:a3:de:6f:3b:7a:9e:32:c8:18: 24:98:4c:71:fa:9b:3a:db:ab:5c:57:34:2b:e1:6d:19:c2:4c: d8:b5:50:a6:1b:2e:52:1d:e3:1c:da:7a:4e:0f:eb:8a:b1:20: 03:a3:46:31:e4:83:9a:08:97:f1:85:5b:a6:36:09:c8:6a:9f: 66:63:db:84:23:0b:4b:ec:9e:b7:10:54:85:60:e8:27:ba:c3: 69:d1:36:c8:2b:49:0c:ba:2c:16:87:21:9d:31:02:39:ad:b3: 28:d9:15:2a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZprtGy/i8mXeSESuxCvM8rZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMTEwMDI1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWJjMmY1MzNhN2M4YjRhYTkxM2QwZGQyMDUyM2MzMmFjNjVjMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhE8iV83Y3UVExR+7JzTXi5vLOK9 HFgrWROdLDpN1uocQ2swjUR2e09yxck4vrjuX58m/3IWPLZXf5ap/4p9pEafIuw3 gzRAZo73Qn4JrvsIvOn2fkCxHP40RjbJRmKGq3yTrhpcb2Ap31Y0ChreKVv9j+gZ Ay4VxhyAo+9K1/MxEIwMp+X9tBjfg3oHU6MwXkc7mfnjhYAmd1AoS/8iIy+TYuVY Xy7o0STneoEfvmsWnoSiuW8CUIVBQQngJ4xy7nNIbz6BCaOlLH8GtKHeTfhNGwqq NSmlbmYwi3KebydaVkaDh2juHcrg5193Poi/o5bo73qhJIWIbqijL3NUoQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJG8L1M6fItKqRPQ3SBSPDKsZcDdMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEva2J3dlV6cDhpMHFwRTlEZElGSThNcXhsd04wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQADmbjAwQA DmbqAwQAK/KIAwQAWWoQAwQAWWoSMAwDBABZahUDBANZahADBABe5doDBABnZoQD BAB8nnAwDQYJKoZIhvcNAQELBQADggEBAAd2/38tzVnYXghxI0wtZzmioVdUaClF NCksTvT8IlWqqqGRB+CqeoWYO30mRZ80jymPUjMMnZCSpnXAkpQbRyb66/AOyKXU MssELldyHwu2MMFNyW5te4Ynt8ARDzvQNCPoxwRat+kDGtv76fMEVJxoQYr8EpWI 8GKGKCYd2cOoj50EH6UX3BXLEiLboxDFjNYWhC/DHWZ9n6Pebzt6njLIGCSYTHH6 mzrbq1xXNCvhbRnCTNi1UKYbLlId4xzaek4P64qxIAOjRjHkg5oIl/GFW6Y2Cchq n2Zj24QjC0vsnrcQVIVg6Ce6w2nRNsgrSQy6LBaHIZ0xAjmtsyjZFSo= -----END CERTIFICATE-----Generated at Sun Dec 7 09:24:57 2025 by rpki-client