This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QO894Vno0qQXsBx2Kk2T6tK-O5I.roa File: QO894Vno0qQXsBx2Kk2T6tK-O5I.roa (raw, json) Hash identifier: g2q4adT/DqSQ+lkR7vXsD8+/jWcUXFJvJC2rp/nnkxA= Subject key identifier: 40:EF:3D:E1:59:E8:D2:A4:17:B0:1C:76:2A:4D:93:EA:D2:BE:3B:92 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B0D1DB6A44001DEC5113B26E496205F22 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QO894Vno0qQXsBx2Kk2T6tK-O5I.roa Signing time: Thu 11 Dec 2025 11:13:29 +0000 ROA not before: Thu 11 Dec 2025 11:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 85.115.208.0/23 maxlen: 24 85.115.210.0/23 maxlen: 24 85.115.210.0/24 maxlen: 24 213.145.68.0/23 maxlen: 23 213.145.70.0/23 maxlen: 24 213.145.70.0/24 maxlen: 24 213.145.72.0/21 maxlen: 24 213.145.82.0/24 maxlen: 24 213.145.84.0/23 maxlen: 23 213.145.84.0/24 maxlen: 24 213.145.86.0/23 maxlen: 23 213.145.88.0/23 maxlen: 24 Validation: Failed, certificate revoked on Mon 15 Dec 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:1d:b6:a4:40:01:de:c5:11:3b:26:e4:96:20:5f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Dec 11 11:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=40ef3de159e8d2a417b01c762a4d93ead2be3b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:1a:e8:70:8e:1a:58:35:4c:31:cc:ec:eb: d2:50:67:b2:cb:8f:63:fb:f0:1e:c2:e0:62:7b:07: ed:50:79:6d:03:49:67:c8:18:f3:1f:d9:c6:a1:64: e9:88:a9:7c:14:ca:85:22:5f:a5:8a:25:17:1c:1c: c5:1c:72:6e:86:5d:6d:6e:41:eb:36:88:7f:4f:76: 21:c2:fd:40:fb:e5:c6:17:83:28:8d:9b:bb:9d:98: bb:e6:5c:f1:5c:4e:d9:6d:ba:c8:09:c8:f3:5b:ab: 96:5d:4a:19:86:9d:86:9a:bf:00:54:f9:24:44:ad: 81:81:7b:66:30:a3:a3:1e:60:90:a1:22:38:d9:11: 52:6b:81:81:61:e4:bb:cb:99:00:c8:eb:14:24:3f: b3:f8:da:b9:e7:70:f5:8a:72:27:63:7b:18:e4:dc: 2b:f8:65:ef:c2:02:a0:a7:d5:5b:9a:6d:0b:78:7a: 81:f6:7b:04:f0:46:dd:69:8b:d9:c9:76:89:4e:4f: 6c:d3:53:a0:ae:28:56:cb:19:58:e3:d5:35:d6:52: 1f:f8:60:c4:0a:c1:9e:03:9f:f4:4c:91:1f:5e:bb: a0:8a:78:ec:e8:be:8e:a1:f1:e7:40:93:ff:a8:b9: ed:06:8c:31:2b:d5:b3:b3:47:0e:f5:13:57:c2:25: 45:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:3D:E1:59:E8:D2:A4:17:B0:1C:76:2A:4D:93:EA:D2:BE:3B:92 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QO894Vno0qQXsBx2Kk2T6tK-O5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.208.0/22 213.145.68.0-213.145.79.255 213.145.82.0/24 213.145.84.0-213.145.89.255 Signature Algorithm: sha256WithRSAEncryption 36:ca:35:47:ac:c5:d4:7e:b8:e0:92:f3:68:8d:76:96:00:c6: 6e:fc:79:75:5b:06:5a:6d:43:e6:88:04:a0:fa:30:00:cf:a1: 5b:dd:19:1d:13:83:c9:b3:2b:3a:ce:0a:c5:db:bb:ac:48:78: 82:74:a7:e4:74:74:ee:2f:b7:ef:6c:cb:27:82:ac:3b:25:89: 84:af:08:b3:62:5c:d8:38:17:76:22:8c:94:75:fd:ff:01:ea: a1:8b:66:66:b2:47:0e:bb:28:a3:5f:54:8d:8d:17:4a:74:df: a1:d0:7e:f3:ba:95:2c:5b:68:34:ee:26:94:ce:d1:4f:41:b4: 43:f1:8d:79:e2:ab:76:2e:9b:43:76:e5:28:19:6e:1d:1a:fd: 82:42:c7:71:69:75:cd:17:bf:6b:6e:55:7e:1b:b6:94:71:7f: 86:4a:79:cf:2e:73:b2:20:64:38:40:00:35:9c:dd:78:48:fe: 22:f0:01:81:c9:41:e3:64:8a:3f:ca:b1:42:07:fe:37:ae:e3: 83:89:cb:09:a2:dc:95:fe:4e:7d:5c:ec:0d:a2:db:4d:00:43: 57:ad:3e:a2:b5:fe:89:83:2a:31:f9:86:db:0a:70:eb:d5:f4: f3:da:95:7c:f5:5a:16:2e:f4:02:0d:ff:a2:8b:01:bd:ac:99: ae:11:ee:0f -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZsNHbakQAHexRE7JuSWIF8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjUxMjExMTExMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGVmM2RlMTU5ZThkMmE0MTdiMDFjNzYyYTRkOTNlYWQyYmUzYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppwa6HCOGlg1TDHM7OvSUGeyy49j +/AewuBiewftUHltA0lnyBjzH9nGoWTpiKl8FMqFIl+liiUXHBzFHHJuhl1tbkHr Noh/T3Yhwv1A++XGF4MojZu7nZi75lzxXE7ZbbrICcjzW6uWXUoZhp2Gmr8AVPkk RK2BgXtmMKOjHmCQoSI42RFSa4GBYeS7y5kAyOsUJD+z+Nq553D1inInY3sY5Nwr +GXvwgKgp9Vbmm0LeHqB9nsE8EbdaYvZyXaJTk9s01OgrihWyxlY49U11lIf+GDE CsGeA5/0TJEfXruginjs6L6OofHnQJP/qLntBowxK9Wzs0cO9RNXwiVFLQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFEDvPeFZ6NKkF7AcdipNk+rSvjuSMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvUU84OTRWbm8wcVFYc0J4MktrMlQ2dEstTzVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCVXPQMAwD BALVkUQDBATVkUADBADVkVIwDAMEAtWRVAMEAdWRWDANBgkqhkiG9w0BAQsFAAOC AQEANso1R6zF1H644JLzaI12lgDGbvx5dVsGWm1D5ogEoPowAM+hW90ZHRODybMr Os4Kxdu7rEh4gnSn5HR07i+372zLJ4KsOyWJhK8Is2Jc2DgXdiKMlHX9/wHqoYtm ZrJHDrsoo19UjY0XSnTfodB+87qVLFtoNO4mlM7RT0G0Q/GNeeKrdi6bQ3blKBlu HRr9gkLHcWl1zRe/a25Vfhu2lHF/hkp5zy5zsiBkOEAANZzdeEj+IvABgclB42SK P8qxQgf+N67jg4nLCaLclf5OfVzsDaLbTQBDV60+orX+iYMqMfmG2wpw69X089qV fPVaFi70Ag3/oosBvayZrhHuDw== -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:01 2025 by rpki-client