This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/e0gfcTMcmnBzP6_m7jv2fxOGxUs.roa
File: e0gfcTMcmnBzP6_m7jv2fxOGxUs.roa (raw, json)
Hash identifier: 2uhvl4mj6f2yfGAWWFp5H9PTBCs62l8OAu7fwop8M2o=
Subject key identifier: 7B:48:1F:71:33:1C:9A:70:73:3F:AF:E6:EE:3B:F6:7F:13:86:C5:4B
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019A597BD15BD079209A54D8703E88FEF704
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/e0gfcTMcmnBzP6_m7jv2fxOGxUs.roa
Signing time: Thu 06 Nov 2025 14:04:37 +0000
ROA not before: Thu 06 Nov 2025 14:04:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 95.170.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Nov 2025 08:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:7b:d1:5b:d0:79:20:9a:54:d8:70:3e:88:fe:f7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Nov 6 14:04:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b481f71331c9a70733fafe6ee3bf67f1386c54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:81:b5:eb:82:7d:9b:a1:13:c7:db:44:9c:
88:73:fc:ef:dc:6a:0f:89:e6:7b:a6:13:53:68:a8:
ba:38:61:42:10:81:71:dc:04:89:a5:53:d0:4d:e7:
55:d9:c5:b7:29:65:ba:0b:e4:6d:16:7f:1d:3b:ec:
4e:25:48:23:e9:cd:91:36:2b:6c:15:1c:af:7d:93:
b5:4b:e8:08:e1:d7:54:95:95:0e:fb:dd:e7:d2:f0:
3d:b0:e9:e3:82:c9:cb:1f:67:3b:99:53:02:cf:2d:
0f:5f:54:33:73:df:14:11:0c:e8:7d:2b:85:35:bc:
ce:f9:30:20:19:05:3b:e7:5c:cc:b9:16:99:8d:da:
b5:18:78:b0:25:cc:6f:5b:06:e0:c4:9f:50:39:ea:
f0:8e:d6:2a:16:55:52:e8:f0:a2:18:37:43:c9:72:
d2:c0:21:1d:68:6e:53:24:5d:6d:5c:c9:a9:31:82:
93:da:1e:54:be:ab:54:d7:f1:17:3f:d2:a9:e8:2c:
60:87:27:eb:24:6c:c4:28:4d:ee:e4:9d:24:a4:f3:
2a:7a:98:66:f9:36:cc:50:1f:37:5b:54:83:73:98:
ac:c8:fc:66:eb:af:48:dd:ff:6b:e2:97:07:d1:b3:
a6:04:16:5d:2d:34:90:0e:34:0e:47:94:33:08:eb:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:1F:71:33:1C:9A:70:73:3F:AF:E6:EE:3B:F6:7F:13:86:C5:4B
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/e0gfcTMcmnBzP6_m7jv2fxOGxUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:32:37:a9:2d:ab:94:2b:d3:c9:a4:64:a3:b6:7a:de:0e:b4:
da:bf:25:6f:20:6d:0c:4b:57:d7:6c:0b:c7:8c:37:df:7c:00:
ba:0c:ab:79:cf:d3:50:91:33:c6:3e:8d:8c:c6:9d:0c:e0:64:
d8:64:e3:a0:8c:b7:2f:c7:ae:46:22:f8:da:86:b5:da:cf:46:
ae:16:7b:5f:63:54:88:ed:84:13:0c:11:20:46:a0:c7:ec:96:
f1:5e:a4:51:9d:01:9a:d8:c5:39:fb:5b:ae:dc:17:e4:6c:87:
14:11:dd:17:b4:d6:08:6a:3c:a0:ce:4f:c5:28:2f:3d:ed:34:
ce:8c:e4:d7:5d:2f:7a:24:51:ca:da:07:f5:fa:f4:d2:85:b7:
32:1f:03:f3:6d:75:7c:12:e5:f9:99:eb:b2:75:66:42:95:1f:
58:79:d7:73:6f:72:29:f8:09:42:f5:a9:5c:3b:39:e1:71:94:
da:ee:ee:80:99:a0:9d:f9:cf:0b:84:3a:25:61:86:d8:4e:18:
7a:0f:42:04:ae:7c:ca:6d:3c:b8:7c:cf:b1:84:0d:f9:5e:5b:
12:c3:60:2d:cf:7a:92:f9:48:c7:31:68:f3:d1:c2:04:c7:9d:
ff:be:4e:5b:78:22:fe:8a:c2:07:af:98:fc:1f:08:1c:ec:38:
9b:8d:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:38:52 2025 by rpki-client