This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e20383334.roa File: 3231332e3135372e3132312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: KMSbejNXNT+aMZz/chgGi8hJPUYDFHVX+j6EVMaY37Y= Subject key identifier: 04:95:3C:18:E1:20:14:38:EF:C1:65:36:5D:4B:3F:0E:77:EC:0E:10 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 26E01957B52EE0CD3A95ED406ECD9F16C9F426D7 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e20383334.roa Signing time: Sat 08 Nov 2025 00:05:15 +0000 ROA not before: Sat 08 Nov 2025 00:00:15 +0000 ROA not after: Sat 07 Nov 2026 00:05:15 +0000 asID: 834 IP address blocks: 213.157.121.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 17 Nov 2025 09:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e0:19:57:b5:2e:e0:cd:3a:95:ed:40:6e:cd:9f:16:c9:f4:26:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Nov 8 00:00:15 2025 GMT Not After : Nov 7 00:05:15 2026 GMT Subject: CN=04953C18E1201438EFC165365D4B3F0E77EC0E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:58:0d:69:0f:ab:39:52:8d:84:c5:0e:d7: 37:ea:03:64:54:97:dc:fe:09:6a:ad:35:22:f3:1f: a5:6e:d2:8d:4e:93:df:2b:b0:57:d5:8c:e7:1f:54: da:74:a4:3b:e4:a2:2c:d5:80:d0:c1:7e:16:be:ef: e8:bb:44:b0:98:fc:1d:a9:cd:41:02:9b:55:be:62: d0:bc:8a:42:a1:8d:93:3e:92:e0:52:1a:f1:83:b1: 2b:9d:2c:26:02:40:86:a4:eb:9c:05:b9:f9:7f:8c: e3:17:27:ff:2c:f7:7b:09:47:3a:0b:72:4f:c2:d7: 1c:80:08:eb:34:54:d0:ca:cc:28:f7:c8:6b:f6:18: 71:bd:03:5a:ae:ff:35:68:6c:c2:99:f6:a8:91:8e: 28:cb:51:35:e8:17:51:3b:a5:c9:64:b7:8f:cd:ab: 76:02:b9:e2:20:1d:c8:f6:4a:88:44:9d:8c:1e:d3: 6a:60:2b:52:9a:90:26:8c:7e:2c:6b:90:2c:58:5b: 40:0f:84:31:ed:9b:63:98:ce:63:7e:38:4a:62:2f: b6:e9:ff:24:a2:ad:4a:b2:62:52:74:dd:bb:66:66: 0b:0d:98:20:4e:8d:69:c1:0d:09:2e:32:b7:cd:14: 5d:3f:26:8c:16:3b:a1:09:9b:70:e0:5c:f8:21:17: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:95:3C:18:E1:20:14:38:EF:C1:65:36:5D:4B:3F:0E:77:EC:0E:10 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.157.121.0/24 Signature Algorithm: sha256WithRSAEncryption 94:f2:6f:29:74:e0:9f:38:a6:37:8c:13:7c:45:7f:24:f1:a3: a5:e9:08:86:f4:66:e9:e6:fb:37:1a:68:98:e4:d2:b9:ef:c3: 10:79:96:99:9e:ba:e2:84:19:35:0e:53:38:25:a0:3c:5f:c4: d6:45:df:21:ce:85:52:23:0b:18:66:4e:f7:3d:e5:03:94:12: 91:8d:5b:a2:79:fb:ed:bc:55:22:4b:0a:c4:c3:19:1c:f4:cb: b7:69:e7:a0:8b:53:9f:ef:f5:75:f5:9b:8e:ee:16:6f:2e:5f: 9b:64:60:19:a5:10:40:38:00:00:b2:0f:f9:74:a0:b4:90:1e: df:b5:65:3d:1c:08:62:85:5c:67:c5:74:5b:cc:57:e0:34:1e: 38:ef:c9:86:b8:5d:92:a3:0f:e8:49:96:34:c7:68:01:bf:f4: 0c:7e:bf:87:99:2d:c2:fe:8d:3d:6e:10:0a:42:91:f3:d7:18: 7f:05:65:ee:30:f0:05:82:6e:a1:34:bc:a8:9d:05:df:ff:50: 91:9d:86:75:fe:c1:3d:e6:14:11:c6:70:88:cb:ee:f0:57:8b: 53:7c:ec:e6:45:c0:b4:1e:8d:72:df:27:df:92:d8:dd:55:ee: ca:88:10:d2:5d:4f:86:09:35:eb:7c:66:69:37:7e:ee:04:e1: 93:96:2f:8d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJuAZV7Uu4M06le1Abs2fFsn0JtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTExMDgwMDAwMTVaFw0yNjExMDcwMDA1MTVaMDMxMTAvBgNV BAMTKDA0OTUzQzE4RTEyMDE0MzhFRkMxNjUzNjVENEIzRjBFNzdFQzBFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIplgNaQ+rOVKNhMUO1zfqA2RU l9z+CWqtNSLzH6Vu0o1Ok98rsFfVjOcfVNp0pDvkoizVgNDBfha+7+i7RLCY/B2p zUECm1W+YtC8ikKhjZM+kuBSGvGDsSudLCYCQIak65wFufl/jOMXJ/8s93sJRzoL ck/C1xyACOs0VNDKzCj3yGv2GHG9A1qu/zVobMKZ9qiRjijLUTXoF1E7pclkt4/N q3YCueIgHcj2SohEnYwe02pgK1KakCaMfixrkCxYW0APhDHtm2OYzmN+OEpiL7bp /ySirUqyYlJ03btmZgsNmCBOjWnBDQkuMrfNFF0/JowWO6EJm3DgXPghF8inAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUBJU8GOEgFDjvwWU2XUs/DnfsDhAwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUt MGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvMzIzMTMzMmUzMTM1MzcyZTMx MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWd eTANBgkqhkiG9w0BAQsFAAOCAQEAlPJvKXTgnzimN4wTfEV/JPGjpekIhvRm6eb7 NxpomOTSue/DEHmWmZ664oQZNQ5TOCWgPF/E1kXfIc6FUiMLGGZO9z3lA5QSkY1b onn77bxVIksKxMMZHPTLt2nnoItTn+/1dfWbju4Wby5fm2RgGaUQQDgAALIP+XSg tJAe37VlPRwIYoVcZ8V0W8xX4DQeOO/JhrhdkqMP6EmWNMdoAb/0DH6/h5ktwv6N PW4QCkKR89cYfwVl7jDwBYJuoTS8qJ0F3/9QkZ2Gdf7BPeYUEcZwiMvu8FeLU3zs 5kXAtB6Nct8n35LY3VXuyogQ0l1Phgk163xmaTd+7gThk5YvjQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:45:42 2025 by rpki-client