This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHJnqtEnTxub2b1ThPhfMQYmCcU.roa
File: GHJnqtEnTxub2b1ThPhfMQYmCcU.roa (raw, json)
Hash identifier: e/FC9dvVcUK9CMnUHfKen63jq/hfF5CRNtnBpZgMeVg=
Subject key identifier: 18:72:67:AA:D1:27:4F:1B:9B:D9:BD:53:84:F8:5F:31:06:26:09:C5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01961ECA3BFC705C762AD512454DC02979E9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHJnqtEnTxub2b1ThPhfMQYmCcU.roa
Signing time: Thu 10 Apr 2025 08:21:32 +0000
ROA not before: Thu 10 Apr 2025 08:21:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.234.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.83.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.221.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 15:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:ca:3b:fc:70:5c:76:2a:d5:12:45:4d:c0:29:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 10 08:21:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=187267aad1274f1b9bd9bd5384f85f31062609c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:65:74:19:cd:6e:2e:af:94:ce:f6:ac:6a:
8c:6a:04:c9:5c:a9:b6:d1:ad:d0:7a:ae:e4:b8:cb:
b7:63:8b:79:77:d7:97:1e:cd:82:8b:0a:84:a6:41:
cb:c3:29:45:7b:4e:42:9d:f6:68:7b:23:a5:3a:58:
e5:7b:d7:d4:cd:de:40:3b:1b:62:72:43:19:1e:0d:
b8:24:a3:76:03:65:d5:09:38:fa:37:dc:1e:2f:8d:
85:b9:cf:65:b1:ff:23:79:36:f4:3e:3b:26:91:55:
be:21:95:94:70:94:54:de:8b:6e:47:2d:7f:78:f0:
c5:ef:82:16:40:89:55:b3:44:e9:87:cd:a7:3e:fe:
c6:80:92:e1:47:14:a6:b3:cb:fe:9c:85:db:a3:a6:
ca:dc:d5:1b:43:d7:97:93:0f:51:4d:b8:2c:08:84:
02:95:41:82:e8:0a:8a:2f:80:6e:6d:6f:e8:4c:25:
bf:db:b3:4a:b7:da:d4:f1:91:6b:78:93:ac:98:1f:
71:42:f6:4d:5a:3c:1b:e2:ef:d7:bd:67:98:3e:52:
1d:85:ef:7d:bb:6c:8b:5d:21:11:69:1c:28:3c:17:
c7:33:95:a3:0e:ce:f1:34:74:32:bd:31:c2:d0:65:
ab:27:65:08:e4:60:d2:38:89:90:df:cd:bb:0a:78:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:67:AA:D1:27:4F:1B:9B:D9:BD:53:84:F8:5F:31:06:26:09:C5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHJnqtEnTxub2b1ThPhfMQYmCcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
62.76.239.0/24
192.124.176.0/24
192.124.209.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
194.58.38.0-194.58.40.255
194.58.59.0/24
194.58.66.0/24
194.58.68.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.47.0-194.87.48.255
194.87.58.0/24
194.87.73.0/24
194.87.82.0/24
194.87.105.0/24
194.87.108.0/24
194.87.123.0/24
194.87.128.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.240.0/24
194.87.245.0/24
195.133.55.0/24
195.133.67.0/24
195.133.83.0/24
195.133.92.0/24
212.192.221.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d7:a7:5c:3e:57:22:22:a5:46:94:04:bf:c6:d3:3d:c7:d1:
7e:44:80:a9:06:af:99:11:c1:dd:94:89:2c:32:73:48:3f:ff:
75:f6:8a:b8:06:65:0e:3a:e2:78:d8:6d:d8:32:a4:51:54:da:
e0:82:2a:79:e6:2f:8b:40:0f:5d:ef:d3:4f:7b:ad:ea:46:fb:
9c:45:7f:c1:3c:40:51:ea:e7:81:48:1b:08:1f:8a:e1:de:0d:
00:32:63:f6:2a:5e:7f:5f:ac:b8:9b:50:6e:e6:b6:a0:e1:96:
ca:66:6d:c6:68:94:01:59:70:91:d3:f3:13:90:1d:cb:2c:2f:
5a:c3:7f:d2:ba:b0:89:39:7b:37:e0:2f:11:78:82:86:20:90:
2e:7b:7e:e8:56:fa:ea:23:c8:d4:ba:0d:29:a0:a8:92:93:50:
ce:de:a8:66:33:fb:d4:5c:f3:cd:17:6c:69:1f:49:30:8e:db:
4d:4a:1f:da:19:fc:d1:99:68:83:5f:ff:b7:b9:fc:a8:bb:66:
41:ee:f0:35:1b:b2:1d:f2:a7:27:0c:ff:2d:ed:8c:c2:af:29:
51:84:6c:92:57:db:41:f9:17:8d:5a:fd:9f:c8:d1:07:78:86:
60:67:14:6f:f0:79:55:7a:a5:6b:27:b8:3b:c9:4a:15:a8:73:
44:26:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:53:56 2025 by rpki-client