This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wdeRyHNDfcJZIssbECR7QUY05Pw.roa
File: wdeRyHNDfcJZIssbECR7QUY05Pw.roa (raw, json)
Hash identifier: or4uqpfb3i9ao/8rzihVpXq7sBWVq3s1APxa0/SyHVA=
Subject key identifier: C1:D7:91:C8:73:43:7D:C2:59:22:CB:1B:10:24:7B:41:46:34:E4:FC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019696DF7CDC85DE2831ECFA7C27A615C49A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wdeRyHNDfcJZIssbECR7QUY05Pw.roa
Signing time: Sat 03 May 2025 15:59:10 +0000
ROA not before: Sat 03 May 2025 15:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214971
IP address blocks: 2a06:de02:1a01::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 03 May 2025 18:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:df:7c:dc:85:de:28:31:ec:fa:7c:27:a6:15:c4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 3 15:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1d791c873437dc25922cb1b10247b414634e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:00:ac:9b:fd:a0:25:db:45:b5:55:d2:30:
89:b1:7e:f2:b6:b0:3a:4e:3e:e8:70:43:7d:18:38:
fa:8b:a7:c2:42:b5:5f:5e:39:80:50:7c:b4:2a:98:
05:da:a3:f1:c3:cf:28:c2:10:ec:96:9f:b2:e9:ac:
4e:df:b2:83:d0:38:2f:51:25:d6:e4:5c:8c:43:a5:
79:2a:ca:2a:6d:bd:bb:94:df:7b:c8:9a:94:a8:a1:
6a:5f:03:99:f7:19:b0:a0:4c:7e:82:1c:be:8c:d4:
77:8d:15:dd:dd:24:10:82:22:75:ff:83:0f:55:c6:
e0:42:53:c1:72:e3:1c:a8:da:ec:95:5f:2a:e4:74:
09:23:7b:43:4f:1f:d3:4a:d5:a1:fc:69:88:f6:26:
77:36:36:6f:5c:f6:49:21:10:d9:75:4c:07:d0:0b:
9a:55:00:97:d9:cc:17:ca:ed:0f:b9:d6:e1:83:60:
85:4e:1f:e4:b8:5b:33:43:f7:d9:aa:1d:d0:84:b1:
b3:17:61:03:46:19:47:83:e2:12:db:26:c2:8e:64:
6c:f9:7e:55:f4:49:0a:8a:55:8e:88:4e:44:a2:3b:
3a:fd:ad:2c:78:a0:b3:56:71:55:9c:c5:90:04:02:
23:6e:f5:d3:51:38:1b:49:4b:4e:76:2e:4f:eb:9f:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D7:91:C8:73:43:7D:C2:59:22:CB:1B:10:24:7B:41:46:34:E4:FC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wdeRyHNDfcJZIssbECR7QUY05Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de02:1a01::/48
Signature Algorithm: sha256WithRSAEncryption
73:2a:ac:bb:10:4a:85:51:17:c9:d2:5a:aa:e0:47:26:e1:69:
f8:08:7d:92:81:6a:e7:47:51:4b:d8:6d:74:0f:68:ad:f5:61:
00:ee:4e:d4:be:3b:a4:4b:c9:65:80:da:65:25:59:cd:31:4a:
7c:c3:e0:be:3b:08:3d:8a:88:aa:75:b7:5e:53:4f:cb:d1:ee:
77:64:0a:94:a0:cf:fe:fe:45:4f:21:7e:61:f3:4e:03:e5:48:
f7:e8:03:d4:e4:58:29:77:58:91:7d:04:2b:9a:2c:9c:f1:be:
55:dd:7c:22:01:3a:13:eb:26:e0:7b:3a:3a:10:62:55:37:76:
48:44:4d:e7:cc:73:67:32:e5:bd:81:40:9b:ee:31:c9:2c:f6:
23:08:ed:72:e3:07:a6:1a:0b:6e:72:cd:fe:23:90:ee:40:2a:
83:b3:2d:5c:43:96:af:d3:3f:d1:23:f2:bd:ef:4f:82:26:ac:
74:ed:b6:c8:90:7a:9c:00:02:3d:8c:91:f2:ca:5a:03:50:30:
99:03:55:05:b0:5a:18:4a:40:3b:38:2b:74:0d:25:37:d1:15:
f5:48:68:20:26:65:ba:65:64:b9:51:8a:54:20:09:77:32:0b:
08:91:05:91:b0:ea:6f:a5:3e:5e:28:6b:4d:27:3b:56:62:a9:
ba:73:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:48:25 2025 by rpki-client