This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/qHurGPZ8hAYPxBOQHQJ3HdRlYDw.roa
File: qHurGPZ8hAYPxBOQHQJ3HdRlYDw.roa (raw, json)
Hash identifier: y6Nwum0HmebqOXqkNnFfw4sljd6YPpkwRxVc1zd2OrM=
Subject key identifier: A8:7B:AB:18:F6:7C:84:06:0F:C4:13:90:1D:02:77:1D:D4:65:60:3C
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 019B37E45536A5043753F4873F27021A50C6
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/qHurGPZ8hAYPxBOQHQJ3HdRlYDw.roa
Signing time: Fri 19 Dec 2025 18:34:29 +0000
ROA not before: Fri 19 Dec 2025 18:34:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4228
IP address blocks: 88.218.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Dec 2025 12:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:e4:55:36:a5:04:37:53:f4:87:3f:27:02:1a:50:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Dec 19 18:34:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a87bab18f67c84060fc413901d02771dd465603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:93:30:fb:0b:7d:01:a7:4f:2a:2b:b1:6e:
25:2c:72:bf:99:e3:65:06:41:26:e1:04:c2:0b:11:
01:38:3e:51:ad:f6:6d:fb:da:90:40:8a:46:e8:8b:
a7:d8:e3:dd:a3:19:b5:e4:e4:8d:71:4a:b1:de:4f:
f7:d9:8f:d1:f7:fb:75:45:16:d9:bd:51:1c:7e:9e:
68:6d:90:30:40:bc:ec:34:e9:b1:91:ed:c1:8f:b7:
eb:e9:16:bf:d5:9a:b1:42:57:19:03:2c:8c:ac:43:
20:5f:b5:2b:91:0f:b5:a8:96:dc:35:1d:86:2b:2e:
78:82:0b:5d:95:60:68:ad:07:a0:1e:02:77:ff:5e:
9d:ef:dc:c7:e3:35:17:17:0a:bc:83:eb:93:5e:d9:
ed:bf:c7:76:d2:50:97:ee:53:ea:2f:66:29:fe:9f:
ff:70:f9:71:91:51:e7:68:6e:00:a3:13:01:eb:7c:
7d:dd:47:b6:18:cd:1f:cf:3c:23:b8:ae:fb:9c:bb:
dc:47:01:db:14:b4:be:b0:ab:7d:1e:8f:e6:ec:d3:
a3:ca:d7:5c:67:f7:58:0b:56:45:7b:39:07:46:c3:
78:f0:ce:62:a6:1a:c3:cf:a6:b5:7a:d3:8f:50:f5:
6e:f9:d4:05:01:21:17:69:52:79:c5:26:09:44:f0:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7B:AB:18:F6:7C:84:06:0F:C4:13:90:1D:02:77:1D:D4:65:60:3C
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/qHurGPZ8hAYPxBOQHQJ3HdRlYDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b9:e6:be:6e:51:a2:c1:aa:50:82:0b:fe:3e:e2:72:94:b8:
2a:ef:f8:53:5c:66:e4:ba:2c:1c:63:82:fc:e9:1e:63:cc:a2:
4d:6a:66:6f:cb:4d:70:ba:87:ad:dc:7e:8f:bf:5e:ea:85:ef:
5c:e5:a1:ca:fe:e6:6a:47:be:13:ad:dc:ce:d2:08:38:e4:d5:
fa:cb:55:43:95:65:a4:71:8c:7b:41:43:90:de:1f:7f:f2:5e:
21:42:46:15:42:66:d0:65:e2:20:f1:22:9d:cb:a1:5b:11:7a:
76:0d:39:65:f1:16:63:2a:6b:d9:7b:4b:ba:0d:63:ba:3b:a7:
93:f1:e2:39:dd:ba:b7:47:01:f0:0c:e9:d3:06:7a:79:41:e1:
59:0c:5d:7c:58:cb:d2:8b:92:3e:e2:a7:c8:ea:22:c6:fc:34:
ae:9f:20:84:04:1e:02:74:71:dc:35:69:a8:34:0b:cc:2d:d7:
08:8d:e5:99:c0:f7:f5:53:d1:4c:91:fa:08:83:10:23:1f:09:
03:30:49:0c:da:fb:8a:ba:42:16:f5:1d:db:f4:9e:a3:b2:57:
b3:85:d4:cd:2d:14:1c:b6:ae:c8:54:7f:af:ad:19:f0:ed:ba:
de:38:c2:07:df:75:7b:78:b1:86:0d:29:bb:a4:1f:56:20:b0:
95:a2:ab:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZs35FU2pQQ3U/SHPycCGlDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1
MjIwMzMwHhcNMjUxMjE5MTgzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODdiYWIxOGY2N2M4NDA2MGZjNDEzOTAxZDAyNzcxZGQ0NjU2MDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpiTMPsLfQGnTyorsW4lLHK/meNl
BkEm4QTCCxEBOD5RrfZt+9qQQIpG6Iun2OPdoxm15OSNcUqx3k/32Y/R9/t1RRbZ
vVEcfp5obZAwQLzsNOmxke3Bj7fr6Ra/1ZqxQlcZAyyMrEMgX7UrkQ+1qJbcNR2G
Ky54ggtdlWBorQegHgJ3/16d79zH4zUXFwq8g+uTXtntv8d20lCX7lPqL2Yp/p//
cPlxkVHnaG4AoxMB63x93Ue2GM0fzzwjuK77nLvcRwHbFLS+sKt9Ho/m7NOjytdc
Z/dYC1ZFezkHRsN48M5iphrDz6a1etOPUPVu+dQFASEXaVJ5xSYJRPCckwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKh7qxj2fIQGD8QTkB0Cdx3UZWA8MB8GA1UdIwQY
MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt
MThlODZmMGIxZDgxLzEvcUh1ckdQWjhoQVlQeEJPUUhRSjNIZFJsWUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx
LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNoSMA0G
CSqGSIb3DQEBCwUAA4IBAQBbuea+blGiwapQggv+PuJylLgq7/hTXGbkuiwcY4L8
6R5jzKJNamZvy01wuoet3H6Pv17qhe9c5aHK/uZqR74TrdzO0gg45NX6y1VDlWWk
cYx7QUOQ3h9/8l4hQkYVQmbQZeIg8SKdy6FbEXp2DTll8RZjKmvZe0u6DWO6O6eT
8eI53bq3RwHwDOnTBnp5QeFZDF18WMvSi5I+4qfI6iLG/DSunyCEBB4CdHHcNWmo
NAvMLdcIjeWZwPf1U9FMkfoIgxAjHwkDMEkM2vuKukIW9R3b9J6jslezhdTNLRQc
tq7IVH+vrRnw7breOMIH33V7eLGGDSm7pB9WILCVoquI
-----END CERTIFICATE-----
Generated at Sat Dec 20 15:38:29 2025 by rpki-client