This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qGw7bGW816kqw4Z00QWgRIaTH4Q.roa
File: qGw7bGW816kqw4Z00QWgRIaTH4Q.roa (raw, json)
Hash identifier: KS76ZFci0yJtFQ1vlCaItK5h1zkw0FTjXOez0OOC1rk=
Subject key identifier: A8:6C:3B:6C:65:BC:D7:A9:2A:C3:86:74:D1:05:A0:44:86:93:1F:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01963A2206342B6D7990CAC5C8F252D8FB94
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qGw7bGW816kqw4Z00QWgRIaTH4Q.roa
Signing time: Tue 15 Apr 2025 15:47:10 +0000
ROA not before: Tue 15 Apr 2025 15:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216024
IP address blocks: 194.87.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 15:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:22:06:34:2b:6d:79:90:ca:c5:c8:f2:52:d8:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 15 15:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a86c3b6c65bcd7a92ac38674d105a04486931f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:58:58:a6:9e:5e:eb:65:61:29:48:90:09:
e5:60:ed:55:18:91:6f:3a:cc:d2:24:4c:b9:6f:c2:
1d:25:66:58:4d:ca:dd:d7:e9:98:41:87:5b:9c:77:
35:73:a6:a1:24:c2:33:c2:29:ee:b0:54:25:10:06:
90:86:d4:07:5d:ce:ee:9d:8a:a5:07:48:0d:fa:5d:
00:49:e1:a7:87:94:c4:c1:e6:fd:9c:66:0d:06:58:
af:ba:b4:dc:d9:3a:4e:64:b9:4c:07:c9:82:22:30:
16:1a:66:26:fc:c8:92:77:79:b5:8b:2e:8c:e3:67:
74:f2:7c:97:87:81:e3:8c:89:7b:69:9e:ca:94:f4:
98:27:ad:8c:6c:a6:4f:a3:2f:c9:80:9d:a9:34:c4:
2e:6e:1d:12:e7:7f:bd:86:c9:f3:65:77:b3:d6:59:
b8:c1:b2:93:4a:31:b3:9a:30:7a:ce:1b:60:fc:78:
13:47:47:52:80:0a:88:d1:65:91:03:be:7c:bc:37:
72:a4:f8:da:6f:fc:c5:c8:e6:57:b9:cf:ba:58:10:
0b:00:91:a4:73:82:d4:4c:05:13:24:14:73:0f:d9:
58:cf:95:a8:d1:1a:5e:75:b3:a5:ec:9b:a2:94:6e:
9e:ec:37:8b:32:ce:e5:de:aa:e5:2f:db:34:ba:e9:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:3B:6C:65:BC:D7:A9:2A:C3:86:74:D1:05:A0:44:86:93:1F:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qGw7bGW816kqw4Z00QWgRIaTH4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.189.0/24
Signature Algorithm: sha256WithRSAEncryption
82:bf:ef:b3:b0:e8:ee:4f:87:7a:d7:4f:ba:36:2b:18:d7:86:
58:e1:81:2f:17:e9:de:19:45:c8:04:0c:1f:f3:3a:52:2f:87:
cb:f8:83:8f:79:5c:da:c6:89:fa:6c:24:58:4f:cd:3b:fe:9c:
c2:d7:a1:cc:4c:b0:aa:74:e1:36:5b:8d:3e:ee:5b:c3:2d:8a:
1c:c2:44:2a:79:1c:8b:67:7d:56:17:84:29:f5:3a:df:9e:a1:
60:b8:8b:a0:be:9e:8c:6b:e7:a9:48:4a:f8:6b:c2:49:5f:f4:
7c:ed:42:8c:ae:55:fb:de:2d:85:87:f3:b5:e8:81:1b:f2:22:
ca:33:43:16:94:27:be:8d:39:e7:83:22:8b:fb:bd:0d:0b:4b:
63:13:49:4d:b7:09:23:4c:ca:45:00:f3:a0:7c:e1:92:9d:e1:
f2:73:81:79:eb:47:b6:39:8b:89:6f:0c:28:a4:dd:30:73:94:
61:ca:c1:e2:79:d4:aa:e7:01:90:ab:e3:86:ae:5c:1e:19:3d:
d7:c8:a0:2f:37:eb:7a:3b:e8:84:6f:58:32:0e:db:b3:d0:13:
79:27:6c:e4:f7:87:36:d1:9c:19:9d:46:87:f6:7e:42:a5:3d:
1f:a4:da:de:f9:3b:e2:d7:d3:ec:75:df:d3:3f:83:98:4c:ee:
02:14:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:55:10 2025 by rpki-client