This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/1-jVD2AzTj_BG0viIGbOBpbHspNQ.roa
File: 1-jVD2AzTj_BG0viIGbOBpbHspNQ.roa (raw, json)
Hash identifier: fDwqicnR2Vbl4sgvZAwgDLpopTlIxztAb1BJ4zAAYZ4=
Subject key identifier: FA:35:43:D8:0C:D3:8F:F0:46:D2:F8:88:19:B3:81:A5:B1:EC:A4:D4
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01975C6C67F792C9AAF96D3CAAF4FA460CC7
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/1-jVD2AzTj_BG0viIGbOBpbHspNQ.roa
Signing time: Wed 11 Jun 2025 00:38:17 +0000
ROA not before: Wed 11 Jun 2025 00:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211665
IP address blocks: 2a0d:d940:50::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 21:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:6c:67:f7:92:c9:aa:f9:6d:3c:aa:f4:fa:46:0c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 11 00:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa3543d80cd38ff046d2f88819b381a5b1eca4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:56:5a:e4:a9:c8:d4:0c:88:dc:03:f4:82:
09:b6:77:07:d0:b8:58:48:a4:78:53:cb:eb:61:77:
d2:d4:a1:28:b2:c5:cb:6b:57:cf:eb:14:de:af:5d:
8b:e0:6d:62:18:c7:67:1d:9b:a5:d6:a6:fc:9f:c0:
81:39:b1:ac:d7:7f:64:66:26:9b:3d:84:b9:93:be:
44:f0:f6:4c:04:4d:0e:a7:51:d7:2b:c6:4c:01:e4:
74:be:55:06:e4:be:42:e9:01:e7:87:db:7a:ea:c2:
29:33:19:8d:a1:9d:50:d8:69:fa:31:7e:e3:a4:3d:
58:cd:2b:77:d7:fe:71:2e:d7:ff:0a:09:aa:1e:ff:
a4:8e:ce:39:34:72:d9:db:2c:c0:e6:86:4b:09:6d:
bd:60:2a:6f:68:99:dc:e2:fb:2a:bc:1b:a3:c5:7e:
54:c8:17:52:2f:09:ca:d5:5c:95:79:58:68:14:29:
46:83:96:06:49:18:5c:c5:c2:67:51:61:d9:a0:b4:
c3:0c:f7:4f:01:1c:b7:f2:bc:16:50:0f:ec:ec:d0:
1c:10:b3:65:a5:52:b0:2e:f7:87:1d:4b:3e:74:d5:
ba:73:1c:54:db:ad:be:fd:8f:0e:89:f5:ae:09:02:
c2:fc:23:e5:9e:f5:0b:59:5a:63:15:bb:fc:97:29:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:35:43:D8:0C:D3:8F:F0:46:D2:F8:88:19:B3:81:A5:B1:EC:A4:D4
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/1-jVD2AzTj_BG0viIGbOBpbHspNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:50::/44
Signature Algorithm: sha256WithRSAEncryption
6b:9a:06:7c:68:e4:57:49:21:20:ae:e7:4e:34:53:48:7e:c8:
c9:6d:d1:05:08:ee:b3:8b:8e:3a:e1:6a:0a:a7:34:92:ae:fe:
52:41:0e:9b:78:24:1f:fd:c0:83:7c:d4:97:82:61:40:02:15:
4c:3b:e4:e5:83:49:f7:7a:0c:9f:a7:87:64:44:4d:6f:87:80:
2a:a6:81:3c:64:e6:9a:5a:e4:68:ec:96:fe:ab:64:9f:53:74:
67:8c:55:73:55:a2:42:c1:c3:dd:81:e1:64:18:f1:fa:cc:7a:
1a:b5:57:96:82:5f:25:98:2e:35:7e:18:38:8a:a8:60:18:8d:
ac:15:bb:1a:ca:67:d3:05:ee:be:c6:03:19:53:e7:e7:98:ce:
8b:89:23:48:31:f1:d2:e3:91:81:12:e9:c7:0e:8e:fa:54:e9:
d8:fb:81:ae:99:0d:85:c2:86:bf:9f:a5:d2:f0:7b:18:01:19:
3b:87:2f:31:1b:3d:39:36:94:c9:2f:3b:44:c7:c1:c2:02:3f:
75:75:b2:2e:99:30:e1:af:73:87:0f:3a:f4:c4:ac:fd:43:e3:
43:81:75:da:88:8d:21:97:d7:4f:93:09:c8:6c:48:73:0b:a2:
21:1e:a8:51:ad:d5:14:ff:cf:09:07:d3:03:fb:c0:ae:9d:d4:
ab:b8:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:22:04 2025 by rpki-client