This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/8ZoYjlHf3ss1gAXemOpo0LKitFA.roa
File: 8ZoYjlHf3ss1gAXemOpo0LKitFA.roa (raw, json)
Hash identifier: 1g4NP/LT5/a8vEUQHNDBqklzwaIu3uWf+T8nPj+7A5Q=
Subject key identifier: F1:9A:18:8E:51:DF:DE:CB:35:80:05:DE:98:EA:68:D0:B2:A2:B4:50
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 019A29E546BD8764CD63E5ED9EBF174EAD5B
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/8ZoYjlHf3ss1gAXemOpo0LKitFA.roa
Signing time: Tue 28 Oct 2025 08:18:02 +0000
ROA not before: Tue 28 Oct 2025 08:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7118
IP address blocks: 176.102.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Oct 2025 20:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:e5:46:bd:87:64:cd:63:e5:ed:9e:bf:17:4e:ad:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Oct 28 08:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19a188e51dfdecb358005de98ea68d0b2a2b450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:68:db:21:ee:4c:5c:a1:b3:00:ba:24:60:
5c:fd:76:3f:68:ac:9d:ae:90:27:94:58:99:41:f2:
55:03:82:f7:b2:aa:06:39:c7:3f:c2:6a:7c:a4:fe:
ef:85:63:3e:d9:82:ae:3d:ae:a9:e7:c0:16:69:d7:
9c:4d:61:c8:eb:62:fd:34:d8:dc:fb:6a:58:0c:5e:
e3:96:1f:68:f6:6a:f1:f6:23:af:9d:d5:ad:7b:ff:
bb:e5:92:f5:19:73:4e:81:f3:c8:98:55:ae:40:43:
9d:40:e1:3a:9b:c2:e4:a9:80:48:3c:f6:fc:1c:86:
75:6e:46:da:5e:e2:1a:fa:9e:d9:85:51:fc:51:68:
7a:1f:f8:c0:17:1e:2d:bc:5b:25:33:c4:9a:07:1c:
90:62:79:28:df:f7:98:09:1a:53:1d:74:10:de:5b:
41:19:a0:dd:1f:fd:3a:26:29:06:6f:42:68:42:fd:
c9:44:62:7e:9c:c7:23:8e:d9:dc:82:c7:95:60:99:
82:7a:9f:0a:6b:f6:78:3f:e4:0e:e6:ed:5f:2d:02:
29:8b:c1:d5:67:f1:e6:d8:7b:75:9e:18:94:e8:09:
02:d6:c7:60:52:14:8c:83:35:9d:e5:08:69:56:fa:
35:61:70:e0:2e:bd:85:f1:d6:b9:38:c5:9e:29:95:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:18:8E:51:DF:DE:CB:35:80:05:DE:98:EA:68:D0:B2:A2:B4:50
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/8ZoYjlHf3ss1gAXemOpo0LKitFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:fa:83:01:be:ec:21:c3:ee:bf:e6:a5:ad:aa:20:12:29:53:
dc:13:6c:97:a8:ed:a6:02:7e:03:17:57:95:f6:45:5d:1a:f1:
4a:f8:fd:c1:0d:a4:52:6e:13:60:b3:41:ea:69:6e:03:94:44:
e2:3b:14:d8:33:eb:b6:53:62:12:0a:43:a8:51:98:43:24:df:
39:67:3b:bd:04:d1:69:1e:85:74:dc:df:63:dd:e8:46:da:f5:
2e:4e:a4:a3:97:9f:c2:d2:ed:8a:1b:92:e0:b4:c1:ee:1b:a5:
79:36:1f:58:88:43:b3:9b:fe:85:d0:61:d0:d6:a5:87:aa:3c:
8e:bb:3c:83:53:44:a0:83:7d:e2:b6:70:6d:b9:db:79:67:55:
d4:cd:75:3a:75:a2:2a:95:5c:be:5f:72:a1:3f:55:de:92:ad:
ae:77:3e:7a:f0:28:59:e8:bf:be:0e:fc:e2:4c:64:bb:6d:ed:
c2:f0:d7:1a:0e:53:6e:b5:53:b3:2e:a9:39:cc:00:a0:eb:99:
f0:71:45:a0:ab:55:76:c4:3c:c1:ac:f6:15:cf:d6:55:f2:57:
c8:63:7a:c0:fc:cc:e3:0d:42:cc:97:d9:70:c4:15:f8:f0:d9:
fa:78:76:3c:40:fa:50:20:07:1e:5c:67:49:86:55:63:eb:da:
37:d0:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:49:40 2025 by rpki-client