This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ijhFYpbiSI42e6JSBuul0WL1Utg.roa
File: ijhFYpbiSI42e6JSBuul0WL1Utg.roa (raw, json)
Hash identifier: u9SPV4zv4IKUuK90PMcnlpZGJUNeLTaDtr88jw5M1Ts=
Subject key identifier: 8A:38:45:62:96:E2:48:8E:36:7B:A2:52:06:EB:A5:D1:62:F5:52:D8
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01997A850BEA1EAC0F8790DDC7527FE87BA3
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ijhFYpbiSI42e6JSBuul0WL1Utg.roa
Signing time: Wed 24 Sep 2025 06:59:23 +0000
ROA not before: Wed 24 Sep 2025 06:59:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41909
IP address blocks: 5.8.88.0/22 maxlen: 24
91.243.62.0/23 maxlen: 24
146.185.244.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Oct 2025 08:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:85:0b:ea:1e:ac:0f:87:90:dd:c7:52:7f:e8:7b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Sep 24 06:59:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a38456296e2488e367ba25206eba5d162f552d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:ee:b1:2e:28:26:5f:48:f7:de:aa:e0:ae:
0a:dc:77:c7:97:85:83:b3:c5:c1:4c:33:3f:c0:51:
ec:01:39:8e:f7:9d:09:0a:2b:5d:26:5e:8a:a2:8f:
5b:d1:f8:78:57:24:87:6d:76:81:cc:f9:6c:b1:7e:
94:86:13:5b:d9:f5:56:b4:ab:33:f6:88:05:e5:09:
d4:24:ce:11:3b:3a:6e:5f:93:91:65:ec:f6:2f:5d:
dc:cd:70:5e:37:41:b8:92:ed:b8:8a:38:c6:01:3d:
e2:e2:56:77:66:52:3c:95:6d:ef:8a:34:fc:7c:3c:
95:b8:a8:27:fa:e3:5a:97:96:e0:b4:ae:cb:b8:7a:
ed:59:14:10:b5:e7:4d:98:ce:83:b3:36:d8:92:1e:
b6:9b:0e:fd:e2:ba:09:d5:a7:b2:26:3f:63:0d:e2:
4c:c5:17:41:e8:25:5c:eb:8c:c7:c1:dd:65:1e:f9:
4c:77:8e:f1:2e:50:51:50:9f:29:27:bf:a3:bb:1a:
d9:c6:6e:96:b7:9e:32:48:e5:60:90:0c:72:25:e4:
bd:47:a2:45:81:f6:4b:77:38:81:8a:54:97:29:9e:
3c:1b:09:c5:92:2a:81:c8:42:51:c3:17:82:c0:5e:
80:8c:08:46:b1:bd:c4:bd:7f:20:d6:f6:67:18:89:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:45:62:96:E2:48:8E:36:7B:A2:52:06:EB:A5:D1:62:F5:52:D8
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ijhFYpbiSI42e6JSBuul0WL1Utg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.88.0/22
91.243.62.0/23
146.185.244.0/23
Signature Algorithm: sha256WithRSAEncryption
16:e5:bb:a7:cf:3a:2c:53:5c:1a:e7:8f:5d:61:19:61:27:86:
9d:ad:82:82:cc:c6:34:24:8e:b3:94:2e:cb:80:4b:66:1c:a5:
a2:5f:67:b9:a9:85:37:4d:55:92:cb:a6:17:2c:97:c2:cc:70:
33:d5:90:88:f9:1c:ac:4c:3f:fd:7c:83:a4:ca:1e:af:fa:3c:
cb:e2:f0:f6:10:7e:e9:fb:ec:1d:a5:68:09:c0:fc:d0:43:46:
bd:65:86:df:9c:df:30:59:9d:06:16:50:60:fe:de:c9:5f:74:
b9:af:55:89:cf:27:ce:50:f2:14:49:6a:41:e5:5e:c6:61:99:
b7:b4:2a:d8:a4:b2:83:5b:e0:21:00:93:fe:ff:50:eb:90:de:
4a:95:ce:4b:73:be:78:7f:cb:f4:98:56:9b:ec:8b:3d:9c:88:
bb:d2:9a:e1:bd:a5:66:a7:a2:9d:f7:e3:85:ae:56:c3:b9:14:
8d:ec:ff:4f:d2:6d:20:8b:96:f9:71:29:44:26:c3:70:6f:13:
9f:54:10:b5:a7:c0:97:05:c1:45:66:de:8b:2f:9f:0c:e7:30:
9d:a7:72:0a:88:62:37:65:d8:df:3b:7c:78:0f:5b:d8:68:f1:
15:bb:1e:94:8e:a3:e0:4b:d7:83:fe:d6:aa:90:ea:e1:f8:43:
e2:72:5e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:05:06 2025 by rpki-client