This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Kx6AcZlrhanOY3lB7VgroERPNz8.roa
File: Kx6AcZlrhanOY3lB7VgroERPNz8.roa (raw, json)
Hash identifier: F87U+8U9LUwIAjWsP9bNrcNp2cYRMd1b/Kr90l42qcM=
Subject key identifier: 2B:1E:80:71:99:6B:85:A9:CE:63:79:41:ED:58:2B:A0:44:4F:37:3F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A0589FFD4ACDA110200C5FC817FE
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Kx6AcZlrhanOY3lB7VgroERPNz8.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136050
IP address blocks: 45.135.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 07:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a0:58:9f:fd:4a:cd:a1:10:20:0c:5f:c8:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b1e8071996b85a9ce637941ed582ba0444f373f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:aa:9f:50:5d:44:29:ab:19:e9:ef:c5:5e:
e4:fa:75:b1:8c:53:fb:b9:8f:18:40:4c:a3:c3:80:
a2:de:3a:4a:25:81:c0:1d:a6:63:9c:6c:77:ca:cc:
c2:8e:4b:ac:d0:b5:70:61:25:ef:c2:f1:0a:75:7a:
07:2b:2d:40:36:f8:b2:9d:c8:18:8e:93:ac:fd:74:
e1:c8:ac:db:52:23:5f:d8:2d:fd:b1:3b:de:ce:56:
3f:c3:68:2a:00:14:9c:f0:f4:06:6b:34:b9:98:15:
de:c0:93:f1:06:99:41:81:58:8c:2d:43:09:14:e5:
85:ee:f4:84:b1:22:60:61:b6:c1:62:7b:d6:89:85:
14:92:2b:d2:d9:e5:41:22:48:33:b0:84:34:b8:39:
0c:10:65:25:dd:e2:e6:eb:8c:c3:ef:50:60:15:fd:
44:d8:f1:1d:20:3f:b0:77:ec:ca:a1:7b:6f:fa:7f:
23:15:d7:be:9f:65:8b:95:b9:f5:71:c5:bd:6a:e9:
87:63:57:c6:7e:2b:94:7b:0e:60:43:4f:75:4f:a8:
3b:36:3e:f5:43:dd:1c:9e:41:b2:25:12:3b:66:ab:
d1:0b:d8:19:d2:67:ab:f4:1b:c0:d4:d7:c4:7a:25:
2a:f1:e0:01:28:93:16:47:95:3e:ee:92:3c:04:d6:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:80:71:99:6B:85:A9:CE:63:79:41:ED:58:2B:A0:44:4F:37:3F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Kx6AcZlrhanOY3lB7VgroERPNz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.236.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e9:5d:80:f4:8b:ed:cf:00:23:6d:5e:00:5a:ce:68:2e:67:
ed:03:b4:7e:fb:55:c6:f3:06:c9:4f:1f:5f:c9:8f:38:b1:05:
62:f3:3c:63:bc:f8:1d:a2:73:c3:da:a4:50:59:85:93:d7:f1:
7c:ff:92:dc:94:d3:72:c6:e8:03:ca:02:44:f3:c7:e2:a9:08:
e4:14:8f:0d:6d:c4:e9:b2:1d:05:34:e0:cd:be:2d:9f:2f:95:
2a:cd:9d:d2:bc:c1:65:fd:64:42:19:32:f4:f8:f5:c2:b8:7c:
11:01:ad:35:a1:73:14:50:d5:81:dc:bc:00:0e:9d:dc:61:f2:
b2:84:ae:d2:f2:da:29:5f:e8:05:54:a0:64:37:2b:bf:ef:77:
0a:78:f8:bf:9e:b1:15:2e:f4:ac:22:b6:04:df:5e:15:2a:53:
05:a1:c0:c1:43:30:aa:9c:29:fc:3e:d4:3d:1d:b0:b4:2d:d9:
bd:2c:77:92:d7:b7:f4:f9:af:08:f9:c8:59:5e:0f:97:1e:c9:
4d:a5:84:5c:fe:92:65:a8:50:84:61:80:48:43:76:28:7b:2d:
3c:30:9e:8c:18:60:90:e5:40:f9:9b:d1:5b:2d:7a:73:d0:45:
21:19:25:ff:32:fb:c2:66:05:d6:9d:34:23:7f:4f:b8:b2:94:
e1:6a:8a:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks6BYn/1KzaEQIAxfyBf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMTAyMDE0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjFlODA3MTk5NmI4NWE5Y2U2Mzc5NDFlZDU4MmJhMDQ0NGYzNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/yqn1BdRCmrGenvxV7k+nWxjFP7
uY8YQEyjw4Ci3jpKJYHAHaZjnGx3yszCjkus0LVwYSXvwvEKdXoHKy1ANviyncgY
jpOs/XThyKzbUiNf2C39sTvezlY/w2gqABSc8PQGazS5mBXewJPxBplBgViMLUMJ
FOWF7vSEsSJgYbbBYnvWiYUUkivS2eVBIkgzsIQ0uDkMEGUl3eLm64zD71BgFf1E
2PEdID+wd+zKoXtv+n8jFde+n2WLlbn1ccW9aumHY1fGfiuUew5gQ091T6g7Nj71
Q90cnkGyJRI7ZqvRC9gZ0mer9BvA1NfEeiUq8eABKJMWR5U+7pI8BNa0QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCsegHGZa4WpzmN5Qe1YK6BETzc/MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvS3g2QWNabHJoYW5PWTNsQjdWZ3JvRVJQTno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfsMA0G
CSqGSIb3DQEBCwUAA4IBAQCF6V2A9IvtzwAjbV4AWs5oLmftA7R++1XG8wbJTx9f
yY84sQVi8zxjvPgdonPD2qRQWYWT1/F8/5LclNNyxugDygJE88fiqQjkFI8NbcTp
sh0FNODNvi2fL5UqzZ3SvMFl/WRCGTL0+PXCuHwRAa01oXMUUNWB3LwADp3cYfKy
hK7S8topX+gFVKBkNyu/73cKePi/nrEVLvSsIrYE314VKlMFocDBQzCqnCn8PtQ9
HbC0Ldm9LHeS17f0+a8I+chZXg+XHslNpYRc/pJlqFCEYYBIQ3Yoey08MJ6MGGCQ
5UD5m9FbLXpz0EUhGSX/MvvCZgXWnTQjf0+4spThaopp
-----END CERTIFICATE-----
Generated at Wed Dec 24 03:59:25 2025 by rpki-client