This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FqKSSEeqXZzcDXqfL3dQF_0-ijY.roa
File: FqKSSEeqXZzcDXqfL3dQF_0-ijY.roa (raw, json)
Hash identifier: ZPR1ahqFuSLj5WcXUo51Aae6DvHklnjWblb7NeXVe+U=
Subject key identifier: 16:A2:92:48:47:AA:5D:9C:DC:0D:7A:9F:2F:77:50:17:FD:3E:8A:36
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0199F8915A53576B64BBB5A3DACAF07974AD
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FqKSSEeqXZzcDXqfL3dQF_0-ijY.roa
Signing time: Sat 18 Oct 2025 18:24:59 +0000
ROA not before: Sat 18 Oct 2025 18:24:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215460
IP address blocks: 2a14:42c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 19 Oct 2025 05:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:91:5a:53:57:6b:64:bb:b5:a3:da:ca:f0:79:74:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 18 18:24:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16a2924847aa5d9cdc0d7a9f2f775017fd3e8a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:31:8c:9c:36:83:d8:75:12:ef:80:62:e2:
23:1f:2a:c3:cb:65:fb:52:66:84:bd:5d:ee:b0:b0:
dc:53:f0:46:93:b5:c0:22:5e:3d:81:b7:e3:da:be:
3d:c5:94:21:fd:69:fb:c7:92:ac:b1:ce:e7:fc:7b:
44:b9:c2:8f:5d:96:fc:8f:15:62:ad:e1:95:c0:79:
e1:99:1f:15:0d:55:8b:71:a5:c9:42:c0:ca:a4:3a:
65:82:b3:e1:fc:7f:7d:5f:29:ac:47:e7:7e:2e:cd:
53:23:08:58:7a:cd:03:90:93:f2:ab:70:2e:6a:36:
bc:1c:3e:af:56:c5:a5:ec:21:fc:40:36:a9:e2:6d:
9a:ad:94:d9:70:4d:26:30:b4:56:41:1d:6a:71:f3:
53:a6:01:b4:e0:bb:44:2e:fe:7e:49:f9:07:bc:50:
b1:dc:34:7f:f4:0f:dd:8d:2e:a8:ab:80:72:95:3f:
b8:0a:44:0e:ac:76:b4:aa:9f:9b:47:83:4f:21:74:
8b:a0:b6:65:21:d6:cb:f4:62:29:51:9b:2e:b0:99:
f0:66:46:3e:b8:9f:29:19:80:e3:73:11:19:46:8f:
78:70:b4:4c:12:86:5d:41:28:13:50:6b:32:62:0b:
6b:9d:ba:9a:90:e1:76:c5:5c:06:11:44:65:cd:41:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A2:92:48:47:AA:5D:9C:DC:0D:7A:9F:2F:77:50:17:FD:3E:8A:36
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FqKSSEeqXZzcDXqfL3dQF_0-ijY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
d3:1f:da:ca:2a:2c:7e:33:02:dd:0e:d6:06:b4:11:e1:85:90:
e0:4f:59:86:37:0d:d0:7e:f7:bc:e1:e1:77:dd:ee:f1:53:ea:
77:e2:7d:db:ed:bf:62:3e:d9:d3:13:ee:1d:35:6b:99:bd:15:
c2:e5:b8:8f:33:f7:c0:dd:be:73:9b:a0:5b:49:27:ad:a1:fc:
2c:95:fd:70:6e:aa:1d:9a:7e:f4:85:e9:4e:5d:83:aa:68:88:
63:b4:25:ab:ee:62:b5:b7:58:ea:b9:f7:58:bf:88:4b:d3:9f:
2e:ba:6a:e6:fa:9d:d9:a8:93:73:b2:09:d6:93:fe:95:23:0d:
4c:cb:03:b1:37:ff:03:ec:66:0e:81:c4:de:5a:1c:94:2b:61:
62:e4:31:1a:c0:52:2b:ee:e6:be:f2:c7:de:a2:8b:87:c4:13:
f7:86:a0:ce:a6:a9:27:8f:e2:fd:dd:54:a3:9e:53:b2:ae:92:
fe:8c:e7:4f:c4:d3:ba:a2:51:5d:93:87:74:09:6f:7d:31:fa:
06:db:de:02:fe:27:b7:0c:0e:e8:8d:78:11:cb:f8:54:b1:2d:
66:a6:83:66:b8:65:fa:a8:62:6a:77:72:db:d2:05:a9:20:34:
29:d7:00:88:08:4e:a9:bc:92:b0:3f:db:50:c3:da:08:c8:60:
40:47:ff:b1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZn4kVpTV2tku7Wj2srweXStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUxMDE4MTgyNDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmEyOTI0ODQ3YWE1ZDljZGMwZDdhOWYyZjc3NTAxN2ZkM2U4YTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB8xjJw2g9h1Eu+AYuIjHyrDy2X7
UmaEvV3usLDcU/BGk7XAIl49gbfj2r49xZQh/Wn7x5Kssc7n/HtEucKPXZb8jxVi
reGVwHnhmR8VDVWLcaXJQsDKpDplgrPh/H99XymsR+d+Ls1TIwhYes0DkJPyq3Au
aja8HD6vVsWl7CH8QDap4m2arZTZcE0mMLRWQR1qcfNTpgG04LtELv5+SfkHvFCx
3DR/9A/djS6oq4BylT+4CkQOrHa0qp+bR4NPIXSLoLZlIdbL9GIpUZsusJnwZkY+
uJ8pGYDjcxEZRo94cLRMEoZdQSgTUGsyYgtrnbqakOF2xVwGEURlzUGD6QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBaikkhHql2c3A16ny93UBf9Poo2MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvRnFLU1NFZXFYWnpjRFhxZkwzZFFGXzAtaWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRCwDAN
BgkqhkiG9w0BAQsFAAOCAQEA0x/ayiosfjMC3Q7WBrQR4YWQ4E9ZhjcN0H73vOHh
d93u8VPqd+J92+2/Yj7Z0xPuHTVrmb0VwuW4jzP3wN2+c5ugW0knraH8LJX9cG6q
HZp+9IXpTl2DqmiIY7Qlq+5itbdY6rn3WL+IS9OfLrpq5vqd2aiTc7IJ1pP+lSMN
TMsDsTf/A+xmDoHE3loclCthYuQxGsBSK+7mvvLH3qKLh8QT94agzqapJ4/i/d1U
o55Tsq6S/oznT8TTuqJRXZOHdAlvfTH6BtveAv4ntwwO6I14Ecv4VLEtZqaDZrhl
+qhiandy29IFqSA0KdcAiAhOqbySsD/bUMPaCMhgQEf/sQ==
-----END CERTIFICATE-----
Generated at Mon Dec 15 23:08:18 2025 by rpki-client