This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35382e302f32342d3234203d3e20383334.roa File: 322e35392e35382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: UkYAKjIK235ovHish6nE25a4RmjUjjy161JSSabphIQ= Subject key identifier: 4F:70:4C:C5:26:41:84:3E:D0:6D:40:2D:72:39:4E:2C:90:57:E4:F7 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 075B4CDD3979751777EEBC5E5CFE02C7E13C2081 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35382e302f32342d3234203d3e20383334.roa Signing time: Fri 11 Jul 2025 00:04:14 +0000 ROA not before: Thu 10 Jul 2025 23:59:14 +0000 ROA not after: Fri 10 Jul 2026 00:04:14 +0000 asID: 834 IP address blocks: 2.59.58.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 15 Jul 2025 07:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5b:4c:dd:39:79:75:17:77:ee:bc:5e:5c:fe:02:c7:e1:3c:20:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Jul 10 23:59:14 2025 GMT Not After : Jul 10 00:04:14 2026 GMT Subject: CN=4F704CC52641843ED06D402D72394E2C9057E4F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:55:e9:a6:a9:fa:9c:1f:ea:cc:fb:3c:b0: 3d:a7:71:fa:89:d5:d3:41:d4:07:e9:e6:96:e4:33: 3b:fa:09:cb:96:73:9a:68:ac:75:03:e7:52:32:4c: 42:19:08:62:d4:84:29:e1:78:4b:39:70:b9:e7:6e: d4:47:5d:5c:6c:d7:15:79:d8:14:bc:94:55:08:66: 98:8f:84:7f:98:3f:7d:9f:9f:4e:6e:ad:68:07:87: 43:d0:57:f8:1b:6e:c3:84:32:bc:fd:de:8f:4f:c9: fe:04:4e:47:77:ce:8e:17:e6:96:46:60:8f:b3:62: fb:f5:8b:20:65:3a:b2:dd:4d:75:e6:d2:12:e4:d8: 2f:ac:10:a0:b4:06:f2:f2:94:fd:8e:58:87:86:77: 99:0c:44:4f:96:d0:68:48:05:d6:51:7c:d0:b6:3c: e2:cb:99:c5:42:96:2c:ac:2f:44:40:08:de:22:50: bf:25:8a:01:6f:ce:57:25:9f:d8:b0:13:15:10:7c: c6:fe:9d:87:d1:e2:ea:e8:2e:5e:25:29:0f:75:b0: 5f:b6:aa:dd:d6:56:97:08:fe:bb:28:1c:25:25:c0: 03:6f:61:b6:0b:0e:9c:74:00:42:97:5b:cc:31:5b: 58:52:02:d6:3e:a6:52:bb:e8:e3:ec:78:5e:eb:e4: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:70:4C:C5:26:41:84:3E:D0:6D:40:2D:72:39:4E:2C:90:57:E4:F7 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.58.0/24 Signature Algorithm: sha256WithRSAEncryption b5:99:5b:67:a9:77:d9:b4:15:84:19:df:74:55:82:81:27:64: d0:d5:ba:1a:e5:27:31:79:dc:26:11:66:bd:d8:07:59:3a:ce: 12:17:0b:7f:c2:72:63:27:a9:19:a9:ff:2f:3f:cb:3e:cf:5b: 53:00:cd:74:05:49:bc:8d:c2:31:5a:ed:f5:1b:c8:9c:26:f2: 46:5e:b2:e2:ad:6f:1c:e6:0b:38:95:34:f8:3c:e4:9c:3a:3b: 2c:51:12:90:48:a0:fe:93:17:4a:fa:0a:51:c8:4f:4f:62:bd: 16:9c:a9:ec:88:47:84:82:1f:91:12:af:42:60:7b:f2:34:7e: 2b:d2:a5:d3:1d:f6:86:fd:e6:6b:13:03:c9:af:ba:89:d1:c0: 3d:5d:0d:74:e9:f5:86:97:ad:eb:0a:8c:2f:4a:c3:bb:36:b5: d1:fa:4e:5d:03:f0:90:42:f4:4b:3f:05:65:51:fe:e0:46:af: fb:4a:0b:42:1d:2f:ce:05:ca:78:a9:b6:68:8e:29:d8:74:f7: a7:13:bf:1d:52:36:0c:90:5a:3c:d0:1a:91:17:2c:c4:42:18: af:aa:f0:62:6a:f7:19:ca:84:d6:f9:1b:3b:f5:97:a2:12:12: 93:58:d3:e2:aa:86:12:8f:71:2a:aa:cd:b9:82:84:5a:b2:83: 77:99:08:bc -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUB1tM3Tl5dRd37rxeXP4Cx+E8IIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTA3MTAyMzU5MTRaFw0yNjA3MTAwMDA0MTRaMDMxMTAvBgNV BAMTKDRGNzA0Q0M1MjY0MTg0M0VEMDZENDAyRDcyMzk0RTJDOTA1N0U0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYoVXppqn6nB/qzPs8sD2ncfqJ 1dNB1Afp5pbkMzv6CcuWc5porHUD51IyTEIZCGLUhCnheEs5cLnnbtRHXVxs1xV5 2BS8lFUIZpiPhH+YP32fn05urWgHh0PQV/gbbsOEMrz93o9Pyf4ETkd3zo4X5pZG YI+zYvv1iyBlOrLdTXXm0hLk2C+sEKC0BvLylP2OWIeGd5kMRE+W0GhIBdZRfNC2 POLLmcVCliysL0RACN4iUL8ligFvzlcln9iwExUQfMb+nYfR4uroLl4lKQ91sF+2 qt3WVpcI/rsoHCUlwANvYbYLDpx0AEKXW8wxW1hSAtY+plK76OPseF7r5N8TAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUT3BMxSZBhD7QbUAtcjlOLJBX5PcwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzIyZTM1MzkyZTM1MzgyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAACOzowDQYJKoZI hvcNAQELBQADggEBALWZW2epd9m0FYQZ33RVgoEnZNDVuhrlJzF53CYRZr3YB1k6 zhIXC3/CcmMnqRmp/y8/yz7PW1MAzXQFSbyNwjFa7fUbyJwm8kZesuKtbxzmCziV NPg85Jw6OyxREpBIoP6TF0r6ClHIT09ivRacqeyIR4SCH5ESr0Jge/I0fivSpdMd 9ob95msTA8mvuonRwD1dDXTp9YaXresKjC9Kw7s2tdH6Tl0D8JBC9Es/BWVR/uBG r/tKC0IdL84FyniptmiOKdh096cTvx1SNgyQWjzQGpEXLMRCGK+q8GJq9xnKhNb5 Gzv1l6ISEpNY0+KqhhKPcSqqzbmChFqyg3eZCLw= -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:33 2025 by rpki-client