This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CauZ7GseHHsp3zgD30SdErOcTp0.roa
File: CauZ7GseHHsp3zgD30SdErOcTp0.roa (raw, json)
Hash identifier: 0oSPLEWZk9PnSANQBQ9rQVtG1/QybbFCN+yA3CG3tXA=
Subject key identifier: 09:AB:99:EC:6B:1E:1C:7B:29:DF:38:03:DF:44:9D:12:B3:9C:4E:9D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019B79104CBC25832B6276E603027AB9B131
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CauZ7GseHHsp3zgD30SdErOcTp0.roa
Signing time: Thu 01 Jan 2026 10:17:49 +0000
ROA not before: Thu 01 Jan 2026 10:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39582
IP address blocks: 78.135.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jan 2026 11:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:4c:bc:25:83:2b:62:76:e6:03:02:7a:b9:b1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 10:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09ab99ec6b1e1c7b29df3803df449d12b39c4e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:b7:f5:17:30:44:9d:bd:0e:8a:de:4d:ba:
ad:86:09:69:a4:19:14:81:b5:a1:a6:04:fb:84:81:
94:82:e3:db:88:36:06:af:a5:e9:8d:6c:25:1f:12:
92:e8:74:c8:31:72:f0:dd:09:e3:e9:f3:9e:1f:bf:
4b:b9:97:46:d8:c6:80:7f:b1:28:64:1d:7f:f4:3b:
96:41:38:dc:a2:93:c1:45:d8:fd:7f:9d:ff:6b:3b:
01:be:83:ef:93:19:07:83:de:b6:15:40:f1:59:fb:
4a:73:85:7e:e5:52:2c:f0:62:cc:15:f3:91:9a:fd:
35:d0:34:f3:05:3e:16:42:9f:c6:a4:74:77:30:be:
bd:4e:28:f8:42:f0:69:c6:0b:6d:62:81:dd:27:1f:
b2:41:e9:07:66:62:5c:d6:6a:5e:41:25:ab:a9:26:
ef:b9:af:bb:55:1a:5d:e9:c5:a4:59:37:cc:fd:b8:
00:e4:cf:d2:d2:1e:40:b8:37:85:b7:14:6b:b7:c6:
9c:1b:49:68:24:47:0c:e2:e9:29:d5:b7:91:b7:bc:
8b:0a:7d:49:ba:cb:89:86:37:89:fb:e8:26:b2:7f:
01:77:ac:94:63:2a:d5:4c:0b:85:f5:2d:3f:cf:7e:
c5:17:24:84:c7:26:b8:91:8c:f5:07:de:de:2a:0e:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:99:EC:6B:1E:1C:7B:29:DF:38:03:DF:44:9D:12:B3:9C:4E:9D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CauZ7GseHHsp3zgD30SdErOcTp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.80.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a5:16:68:e0:19:cf:c0:e8:3a:b2:49:6b:b1:ee:13:12:b4:
e0:0a:1a:16:74:7f:56:ce:56:f2:cd:85:4e:06:56:33:2b:60:
e3:fe:d8:20:06:95:e8:f8:2b:a6:a8:59:4a:75:ef:e2:c6:ba:
76:f5:19:93:1e:72:59:0a:47:eb:b0:69:18:a1:89:7e:5a:ca:
82:7a:43:20:14:cf:2b:31:f4:91:5d:6b:01:8f:5f:ab:2a:cb:
fd:e8:ff:08:eb:c4:45:d7:6a:44:64:f1:15:50:af:d3:01:0a:
ca:be:18:ef:50:cf:8f:b5:46:8e:93:13:b3:63:e3:95:e5:41:
32:80:e6:b5:71:14:7a:3f:6c:8c:17:42:23:52:d9:56:86:e8:
b9:dc:ee:57:47:f9:22:0b:de:69:49:e4:87:f4:e1:c8:1d:17:
a8:6d:98:e8:40:31:d2:a6:e9:57:cf:99:6f:e1:2a:96:e1:9c:
fd:ec:3e:46:49:3e:8b:2c:b2:2e:d5:f5:e4:00:6a:af:30:b5:
55:df:5e:15:be:fa:85:ed:12:fd:5b:98:26:09:78:44:6c:b8:
a9:f7:f0:e1:e1:18:26:dc:cb:9a:06:5e:41:c2:60:08:3c:a2:
fa:26:df:b6:05:dc:8e:7c:d1:cc:46:aa:53:76:6a:ff:a8:ce:
22:cd:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:32:42 2026 by rpki-client