This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/pKaUVWs2OSiOZNX1FfkVs9Z-vqs.roa
File: pKaUVWs2OSiOZNX1FfkVs9Z-vqs.roa (raw, json)
Hash identifier: FWL9JSz8rc89Q2N5frLmfTO0lVOtKQa+sX6xNjIrxMg=
Subject key identifier: A4:A6:94:55:6B:36:39:28:8E:64:D5:F5:15:F9:15:B3:D6:7E:BE:AB
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019763937750E110BE9A02CAD4ECBB418562
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/pKaUVWs2OSiOZNX1FfkVs9Z-vqs.roa
Signing time: Thu 12 Jun 2025 09:58:18 +0000
ROA not before: Thu 12 Jun 2025 09:58:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204868
IP address blocks: 2001:3186::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Jun 2025 12:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:93:77:50:e1:10:be:9a:02:ca:d4:ec:bb:41:85:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 09:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4a694556b3639288e64d5f515f915b3d67ebeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:3f:36:6c:30:2e:c2:aa:af:cd:25:ec:6d:
b3:65:77:0c:68:59:a6:f1:f3:1e:b9:a9:df:70:a8:
38:14:84:c9:2a:b1:ac:3c:2d:ea:9a:fc:34:29:00:
75:3c:20:73:af:6f:84:5b:69:4a:40:40:49:6a:f9:
cb:ab:4d:97:47:26:76:56:76:6b:c7:2b:28:78:b0:
6d:a4:a3:f2:a6:92:47:24:cd:43:bf:b0:72:17:3c:
f7:7b:c8:01:13:0c:e6:52:d0:ee:f6:4e:e5:74:0b:
dc:47:46:30:f1:0c:92:3b:14:db:b2:b9:4f:57:5b:
e7:5f:c8:03:0d:ad:4d:d0:ff:49:d0:ec:ec:57:18:
eb:78:4e:97:90:5e:84:42:d3:8c:63:42:2e:22:5a:
75:3d:f5:0d:7c:19:c2:42:98:3a:9b:c8:62:8a:50:
f5:46:99:38:59:7b:04:dc:c7:74:8e:a9:cb:f4:03:
71:89:eb:a5:56:01:68:04:fc:64:7e:35:db:98:80:
9a:87:cf:15:a5:f2:f7:10:55:58:69:70:1d:e6:c4:
7c:2a:7e:35:c3:d6:5a:8f:22:cb:f4:9b:42:dc:b6:
33:d7:b3:9c:3b:0e:00:0a:54:ea:06:ad:c8:64:7c:
81:12:61:f2:00:f7:e5:fe:3c:00:13:83:70:6a:86:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:94:55:6B:36:39:28:8E:64:D5:F5:15:F9:15:B3:D6:7E:BE:AB
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/pKaUVWs2OSiOZNX1FfkVs9Z-vqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3186::/32
Signature Algorithm: sha256WithRSAEncryption
27:22:b3:e4:d6:04:84:03:b8:55:29:a5:08:20:c3:ab:6e:ff:
0f:f1:6e:a5:bc:7c:11:4d:01:52:e5:ad:81:4f:49:74:4f:97:
7e:b9:34:ac:42:9c:bb:cc:b4:e1:67:c9:ae:13:04:88:6e:53:
95:b5:2f:ba:e9:11:dd:a2:94:ba:72:6b:bf:18:8b:a0:33:d5:
2b:6f:9d:55:0a:81:7c:36:6c:93:be:ce:f2:0c:56:20:4e:31:
6f:b0:5d:d1:9e:20:48:c1:b2:e5:cc:8f:77:66:d4:bb:1a:d4:
40:34:b4:48:85:51:fb:f1:f0:f3:c5:ef:5c:37:61:7c:ed:50:
ed:ed:e1:00:f6:c6:89:ec:c2:5b:62:7a:5f:4b:23:d4:f9:70:
f2:e8:96:e1:2d:1a:a7:9b:d5:17:a6:2f:07:6b:73:19:fa:74:
04:c3:a2:76:02:79:b6:31:8f:ce:c9:e9:21:63:b2:45:57:87:
24:54:e7:95:7d:e1:f8:00:b4:de:40:bc:7e:8a:dc:1f:9e:8c:
9a:03:d6:2d:41:9c:73:a4:ed:78:73:24:e0:b8:25:50:26:d3:
80:ae:ab:3a:6c:cb:cb:ff:8e:bc:d6:ff:36:14:10:40:29:38:
e3:1a:bb:1d:0e:8b:97:b7:29:fe:a0:6a:fb:58:9d:51:79:bc:
76:e0:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:46:48 2025 by rpki-client