This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IHEWtbWocAWU4XUZAbsp8uZSN6Q.roa
File: IHEWtbWocAWU4XUZAbsp8uZSN6Q.roa (raw, json)
Hash identifier: hqh8QNwTbVgF3ZWuzVlUsLHt6ZeRr0uQPdrd8FTINng=
Subject key identifier: 20:71:16:B5:B5:A8:70:05:94:E1:75:19:01:BB:29:F2:E6:52:37:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019C096FDBB6DD5BCFD0A3EDEF0CCA14C3A3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IHEWtbWocAWU4XUZAbsp8uZSN6Q.roa
Signing time: Thu 29 Jan 2026 11:07:31 +0000
ROA not before: Thu 29 Jan 2026 11:07:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 5.253.64.0/24 maxlen: 24
87.120.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Jan 2026 12:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:09:6f:db:b6:dd:5b:cf:d0:a3:ed:ef:0c:ca:14:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 29 11:07:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=207116b5b5a8700594e1751901bb29f2e65237a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:1c:b9:24:ea:f7:12:07:30:ca:ec:2d:56:
a0:e0:32:98:80:4c:66:16:17:01:21:3f:4a:77:c0:
31:c3:ec:82:4e:09:38:8b:fa:73:3d:6e:f2:08:a6:
ee:03:86:a5:11:70:78:40:a8:f0:87:4f:65:19:79:
83:b2:d5:82:e4:49:47:ac:45:7d:2b:6d:35:dc:74:
36:a6:41:08:aa:5e:b5:ac:92:02:de:2d:3c:4c:ae:
0a:d4:98:b2:06:a3:48:8d:28:8e:6d:2d:b4:48:4c:
75:7b:1a:75:10:b3:ec:e4:db:62:41:0d:48:c0:7b:
52:79:3b:30:ef:17:22:78:7e:3e:97:ef:52:16:1a:
0c:24:b7:92:de:19:b6:bc:3f:fb:bf:c0:78:64:59:
d5:23:c9:b5:83:3b:c4:7e:1b:12:f4:fc:fd:2f:a2:
6a:c2:cf:a7:7c:36:84:f1:5a:5d:fc:a0:af:9a:53:
1d:b0:51:22:38:ba:0f:a4:1b:16:f1:77:7f:e4:d9:
bf:48:ec:1f:75:1c:3a:25:0f:40:22:ea:9b:42:7c:
2a:0e:de:60:ed:6a:cc:ae:a0:7c:c9:1a:98:97:a9:
05:f5:46:06:9d:f0:f8:cc:b2:eb:dc:a3:31:12:4b:
2f:80:41:cc:bd:05:a0:26:93:ca:b5:91:b5:e1:d5:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:16:B5:B5:A8:70:05:94:E1:75:19:01:BB:29:F2:E6:52:37:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IHEWtbWocAWU4XUZAbsp8uZSN6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
87.120.158.0/23
Signature Algorithm: sha256WithRSAEncryption
00:bb:62:1a:d1:81:c2:82:31:4f:20:32:22:3a:bf:ea:7d:01:
32:58:a7:68:73:bf:a4:bf:77:ca:2c:7b:6b:c7:2f:c4:bb:1c:
01:c6:79:c7:89:8f:e5:30:6f:5e:aa:37:d2:5d:ef:40:20:d4:
c0:ca:63:80:79:45:9a:fe:ed:b0:ef:42:a1:24:fd:41:bf:fd:
f3:3f:ef:0c:e2:8b:25:3a:22:79:0d:1b:ba:c3:29:63:c7:32:
c9:f3:54:a6:99:cd:4c:d5:09:54:c0:ca:10:81:b6:c9:cc:2e:
8c:de:eb:6d:eb:5c:21:ac:9d:86:8a:72:25:5f:a6:3c:a9:30:
eb:ec:ef:51:43:65:fa:b0:7d:bc:1b:33:81:9e:3e:fe:e2:ea:
d8:91:cd:c4:b4:34:90:48:a2:c6:85:f0:9d:c2:a2:c4:12:c0:
29:33:14:92:15:3b:c3:20:df:c1:41:1f:e3:ed:e5:07:98:69:
e2:5d:5b:ec:9e:15:75:b9:68:bc:36:54:11:ca:67:66:73:9c:
d7:a5:7b:e0:bc:e0:94:bf:21:db:70:3d:93:70:d7:f0:86:93:
32:b1:d6:57:2e:22:e6:6f:3f:e6:13:64:1e:9c:d4:af:de:70:
b8:72:6e:aa:75:4f:13:71:c5:d1:36:94:56:c4:69:f9:bd:06:
0f:e7:9c:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwJb9u23VvP0KPt7wzKFMOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMTI5MTEwNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDcxMTZiNWI1YTg3MDA1OTRlMTc1MTkwMWJiMjlmMmU2NTIzN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq8cuSTq9xIHMMrsLVag4DKYgExm
FhcBIT9Kd8Axw+yCTgk4i/pzPW7yCKbuA4alEXB4QKjwh09lGXmDstWC5ElHrEV9
K2013HQ2pkEIql61rJIC3i08TK4K1JiyBqNIjSiObS20SEx1exp1ELPs5NtiQQ1I
wHtSeTsw7xcieH4+l+9SFhoMJLeS3hm2vD/7v8B4ZFnVI8m1gzvEfhsS9Pz9L6Jq
ws+nfDaE8Vpd/KCvmlMdsFEiOLoPpBsW8Xd/5Nm/SOwfdRw6JQ9AIuqbQnwqDt5g
7WrMrqB8yRqYl6kF9UYGnfD4zLLr3KMxEksvgEHMvQWgJpPKtZG14dUwMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCBxFrW1qHAFlOF1GQG7KfLmUjekMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSUhFV3RiV29jQVdVNFhVWkFic3A4dVpTTjZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABf1AAwQB
V3ieMA0GCSqGSIb3DQEBCwUAA4IBAQAAu2Ia0YHCgjFPIDIiOr/qfQEyWKdoc7+k
v3fKLHtrxy/EuxwBxnnHiY/lMG9eqjfSXe9AINTAymOAeUWa/u2w70KhJP1Bv/3z
P+8M4oslOiJ5DRu6wyljxzLJ81Smmc1M1QlUwMoQgbbJzC6M3utt61whrJ2GinIl
X6Y8qTDr7O9RQ2X6sH28GzOBnj7+4urYkc3EtDSQSKLGhfCdwqLEEsApMxSSFTvD
IN/BQR/j7eUHmGniXVvsnhV1uWi8NlQRymdmc5zXpXvgvOCUvyHbcD2TcNfwhpMy
sdZXLiLmbz/mE2QenNSv3nC4cm6qdU8TccXRNpRWxGn5vQYP55zX
-----END CERTIFICATE-----
Generated at Thu Jan 29 14:48:35 2026 by rpki-client