This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/T115P6gXrsGTz8zafkFrvx2Ajfo.roa
File: T115P6gXrsGTz8zafkFrvx2Ajfo.roa (raw, json)
Hash identifier: IktiThCCyhMHxOuBx9rMCPAT5tSnh0tyrYIHqHvdAZs=
Subject key identifier: 4F:5D:79:3F:A8:17:AE:C1:93:CF:CC:DA:7E:41:6B:BF:1D:80:8D:FA
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0196BC33C053DCA0D3140BB4E7929A4B2935
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/T115P6gXrsGTz8zafkFrvx2Ajfo.roa
Signing time: Sat 10 May 2025 21:57:10 +0000
ROA not before: Sat 10 May 2025 21:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202678
IP address blocks: 46.31.76.0/24 maxlen: 24
46.31.78.0/24 maxlen: 24
46.31.79.0/24 maxlen: 24
85.117.238.0/24 maxlen: 24
185.17.113.0/24 maxlen: 24
185.17.114.0/24 maxlen: 24
185.17.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 22:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:33:c0:53:dc:a0:d3:14:0b:b4:e7:92:9a:4b:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: May 10 21:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5d793fa817aec193cfccda7e416bbf1d808dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:35:5d:25:d8:3e:a9:7f:bd:3e:6c:ea:6f:
e5:44:4d:04:dc:f8:83:a5:04:63:76:0b:19:e8:fa:
e6:e8:e2:c6:9f:61:b9:12:54:b0:cd:5a:db:43:50:
b4:0a:9d:0d:35:22:02:96:13:13:93:05:d7:26:5d:
aa:c4:a1:63:26:84:34:b6:15:e4:42:90:5f:de:2e:
6c:5b:ad:b8:6c:c7:91:51:69:18:c3:9a:92:23:c7:
57:07:34:ee:a0:03:07:e8:b9:a2:07:0c:4c:d7:3f:
a8:15:e1:08:1e:26:cd:64:0c:65:89:49:c2:3e:f6:
96:19:0c:32:02:6a:80:a6:6f:a8:67:d9:44:03:3d:
0b:4e:9c:1f:55:5d:0a:37:4f:e1:e8:7a:b9:4b:b0:
66:0e:84:08:c4:29:0c:29:bc:93:d3:4d:0c:a2:8c:
1e:46:5e:51:5c:3b:d7:d9:1f:6b:50:56:dd:d3:9c:
16:be:5e:1c:09:04:d4:16:35:e2:85:38:af:29:fd:
ba:40:09:95:3f:5c:2b:17:40:c4:37:6f:33:f0:61:
af:98:3b:3a:38:e8:40:72:6e:99:c8:c4:32:64:cb:
78:84:41:d8:07:d6:99:aa:32:c5:28:eb:c3:42:d1:
42:8f:cf:ae:ba:7b:44:46:de:5b:c6:6c:de:e7:bd:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:79:3F:A8:17:AE:C1:93:CF:CC:DA:7E:41:6B:BF:1D:80:8D:FA
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/T115P6gXrsGTz8zafkFrvx2Ajfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.76.0/24
46.31.78.0/23
85.117.238.0/24
185.17.113.0-185.17.115.255
Signature Algorithm: sha256WithRSAEncryption
75:b8:99:d0:f9:b9:81:04:6c:6c:1c:57:9d:b5:26:c6:15:3c:
e8:ea:42:59:6f:b7:96:14:d3:c9:98:7a:8f:d6:0a:df:03:10:
a4:f5:ea:19:ae:29:98:ab:5f:23:8d:79:f0:9e:d3:ed:0f:75:
87:f1:e9:e9:cd:b7:4f:14:70:f7:a7:89:8d:88:12:af:bd:4f:
12:77:86:19:00:3c:ac:11:9b:8a:33:4f:2f:78:71:8d:0a:ff:
da:f9:5e:40:fb:3e:9b:65:b2:63:41:69:65:3d:a1:4b:8a:b5:
b6:18:42:b0:0c:75:67:45:cd:71:1c:2b:c8:c0:c2:a9:bb:3d:
92:26:53:2e:37:d3:e7:b9:dd:17:b0:f2:aa:52:dd:ac:86:04:
61:e9:e0:a8:41:8e:22:b8:65:00:b1:71:62:49:ed:14:fb:ec:
15:7d:fd:fb:0e:5b:9a:ac:14:59:f1:a7:10:62:48:a1:70:65:
b5:a2:14:4f:62:17:63:0d:86:fb:d8:4f:e4:c7:de:7a:19:c7:
c8:5d:d1:93:9f:36:5f:c4:34:7f:62:99:a8:7c:4f:8a:97:2d:
76:f6:b8:49:e5:9d:9d:f8:96:f3:73:dc:b8:89:20:d4:1e:28:
78:1d:cc:32:8b:06:ea:2e:d9:d8:9f:81:85:90:fd:fc:e7:92:
fb:0c:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:05:25 2025 by rpki-client