This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/QRABrVyaZ6tijD85yK5Pt0oiMco.roa
File: QRABrVyaZ6tijD85yK5Pt0oiMco.roa (raw, json)
Hash identifier: CuWz2h2uUwhmcLTDMhB3tYllWeeauJQr7u9M7b1KZL4=
Subject key identifier: 41:10:01:AD:5C:9A:67:AB:62:8C:3F:39:C8:AE:4F:B7:4A:22:31:CA
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019726FB551ADCE4232A0573F410C18A34EC
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/QRABrVyaZ6tijD85yK5Pt0oiMco.roa
Signing time: Sat 31 May 2025 15:34:54 +0000
ROA not before: Sat 31 May 2025 15:34:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 2a06:8ac0::/45 maxlen: 45
2a06:8ac0::/46 maxlen: 46
2a06:8ac0:4::/46 maxlen: 46
2a06:8ac0:8::/45 maxlen: 45
Validation: Failed, certificate revoked on Sun 01 Jun 2025 22:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:fb:55:1a:dc:e4:23:2a:05:73:f4:10:c1:8a:34:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: May 31 15:34:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=411001ad5c9a67ab628c3f39c8ae4fb74a2231ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:52:2a:fc:6b:7d:dc:c8:cf:bd:06:d0:a7:
15:98:21:6a:8d:e2:e7:7e:c6:96:b5:35:76:44:1d:
80:54:ed:34:da:9f:cb:4a:1d:e2:b2:7c:28:6d:c7:
c1:5c:eb:ef:ff:82:c9:9b:7a:b4:61:79:6e:3e:ce:
2d:9b:25:df:75:c1:bd:fe:99:b8:04:58:7e:bc:7b:
22:47:0c:c2:e4:e6:ed:39:78:f5:77:23:0c:2b:e8:
60:6a:8e:2d:42:8a:af:cf:4b:8d:31:36:2e:67:b5:
ca:17:16:fe:d1:00:18:03:a0:23:f1:6e:2b:14:fa:
24:5e:49:7d:26:77:f5:b1:f2:4c:9b:f1:09:af:bd:
d4:09:4e:96:96:1a:af:79:fe:b2:2a:47:2f:ab:74:
cc:6a:56:a9:af:46:e1:e7:46:09:ca:10:a0:7e:39:
21:94:f1:ba:af:71:a7:bc:f4:55:0c:02:a3:df:fd:
16:b0:79:0e:e9:55:2d:81:dd:40:1b:8a:7e:cd:af:
0f:5e:05:3a:4f:89:bf:45:53:90:83:ee:e4:a0:44:
80:48:08:1f:07:6d:b6:f7:aa:ac:96:41:d7:73:20:
27:2a:5a:92:95:38:34:1d:38:20:fe:21:23:84:47:
a4:c0:7b:3e:68:87:e2:9a:6d:52:99:5a:4d:c2:3d:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:10:01:AD:5C:9A:67:AB:62:8C:3F:39:C8:AE:4F:B7:4A:22:31:CA
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/QRABrVyaZ6tijD85yK5Pt0oiMco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:8ac0::/44
Signature Algorithm: sha256WithRSAEncryption
7d:eb:3d:b0:0b:30:72:72:15:34:3d:27:2e:27:78:16:4e:e9:
7f:11:ab:45:a5:b4:88:91:62:63:70:72:ee:cb:12:ce:de:cb:
c0:f3:1a:db:c0:61:c9:eb:63:87:e0:39:a8:12:65:76:7d:93:
a9:f4:3c:c7:cd:ee:b5:aa:86:1a:32:ee:e5:82:05:ff:00:55:
66:f6:12:a2:b1:a0:f1:e3:ec:e4:cb:c5:03:fb:f3:27:5e:a6:
89:fa:53:c9:d9:41:8f:fd:06:21:95:71:32:64:41:ab:8d:bf:
71:d9:e5:37:64:be:19:92:7a:33:61:d9:67:3c:e0:b6:8e:c8:
c2:1b:3f:1e:1e:4a:d9:43:50:c9:8b:7e:c1:e8:b6:eb:d1:63:
3f:ce:93:00:c3:f4:4e:b9:ad:67:cf:97:51:d1:20:dc:32:45:
bd:25:88:07:cf:41:1d:1e:17:6d:84:a2:a7:20:19:8a:82:f6:
f4:51:6a:08:93:19:1e:43:82:ac:c2:7f:fb:11:da:f7:3f:27:
79:bd:33:4a:e3:c6:b7:06:57:75:a2:fe:1f:33:6d:7e:d8:59:
3f:21:83:6e:16:2a:bd:52:a1:5b:2c:52:6a:c8:5f:ca:b6:23:
2b:7e:2e:a6:98:e9:b8:82:09:32:a8:e8:3e:00:52:2b:68:05:
7a:59:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:31:35 2025 by rpki-client