This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/H9af1iN-_5yiEz3UL-3VDuavQnQ.roa File: H9af1iN-_5yiEz3UL-3VDuavQnQ.roa (raw, json) Hash identifier: 2tQpHkDAZCsFsgPd0Qzb7LVhTo9XohR3C1ASvQR0vd4= Subject key identifier: 1F:D6:9F:D6:23:7E:FF:9C:A2:13:3D:D4:2F:ED:D5:0E:E6:AF:42:74 Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Certificate serial: 019B79EBD191A92AF8A5B33B931B802F0168 Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/H9af1iN-_5yiEz3UL-3VDuavQnQ.roa Signing time: Thu 01 Jan 2026 14:17:36 +0000 ROA not before: Thu 01 Jan 2026 14:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 194.88.232.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 07 Jan 2026 15:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d1:91:a9:2a:f8:a5:b3:3b:93:1b:80:2f:01:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Validity Not Before: Jan 1 14:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fd69fd6237eff9ca2133dd42fedd50ee6af4274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:7d:e2:7f:60:dd:3b:57:0c:08:b6:fe:18: bb:c5:f3:0e:4a:ef:74:9a:5b:45:67:b4:06:63:db: 10:e7:71:c9:fd:69:f5:50:33:cc:c5:02:90:c8:97: cc:6f:61:10:b9:1b:21:9e:54:d6:30:bd:fe:48:a3: 7e:a6:65:88:4c:a9:39:28:53:81:fc:b1:86:40:9d: 85:52:e3:e7:de:15:51:a0:f9:bd:4e:02:63:5a:fc: 1f:b7:f3:74:80:46:47:f8:4b:5c:e1:c4:d7:50:a3: 73:2e:85:1b:98:7f:d2:c0:25:40:5f:2b:ac:13:e0: 8d:4e:ea:1a:f2:88:5b:0c:2e:d6:3b:ff:5d:d5:a2: 16:3a:9c:b2:c1:34:17:06:60:33:f5:27:aa:8c:db: 24:47:d2:61:00:0d:fc:4c:31:9d:3a:e3:24:6a:ab: 61:c6:a0:ec:b0:e3:c8:56:7c:b3:3b:cf:43:74:c5: d0:3a:c8:d2:8d:b8:1c:84:d1:06:f0:b2:ea:e1:ef: 4d:e2:41:0f:23:80:5d:6a:1c:24:db:60:50:15:23: eb:d5:df:58:ad:58:e4:dd:49:2d:05:83:d6:fb:a4: 86:3a:8a:b7:fb:39:7c:f4:71:f8:d5:61:77:6b:59: 19:ff:22:fa:27:fb:26:9c:ac:17:b5:1a:17:26:10: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:9F:D6:23:7E:FF:9C:A2:13:3D:D4:2F:ED:D5:0E:E6:AF:42:74 X509v3 Authority Key Identifier: keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/H9af1iN-_5yiEz3UL-3VDuavQnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.232.0/24 Signature Algorithm: sha256WithRSAEncryption 54:1c:90:bc:0d:38:63:34:df:3d:22:7a:90:d1:fb:38:38:e1: 7d:49:f8:92:a1:d3:b4:3b:89:5b:8a:77:42:89:b5:7d:d3:f3: 9f:bf:2f:e6:a4:ce:28:3e:0d:4e:c6:e2:0b:8c:25:d0:85:96: 3d:d9:28:bc:86:32:75:2a:04:5f:6a:43:c5:8a:40:b2:e8:04: 5d:f9:87:51:f5:76:44:f7:91:5b:23:39:1c:65:c7:10:3f:ea: 8e:9d:2f:3f:f5:b1:f3:1a:c3:47:9d:48:b6:f5:8e:d2:39:90: c5:16:a8:56:d2:5b:a5:74:68:34:58:b5:d1:39:8d:95:06:2c: 40:a3:7b:59:27:53:e2:36:0e:ef:67:43:f3:f5:45:46:e6:fa: 28:b8:62:36:f3:24:6b:ce:bd:87:31:10:e8:9e:40:f4:1e:b6: 72:63:f1:5d:bf:20:e2:32:a8:1f:bd:3a:70:f5:6e:1a:7b:41: bd:00:1c:0e:0e:fb:f9:fa:d8:ac:19:b2:22:89:c8:8a:1f:63: a4:91:c0:21:42:90:f3:5b:e2:a0:18:80:8c:4f:6c:c1:e8:e4: c8:1d:69:6e:b5:61:ea:c1:ad:e5:98:20:22:f2:ee:d6:d1:48: a6:f3:12:95:e9:ce:e8:12:25:10:ed:43:14:54:bd:aa:a1:6e: ff:3e:bb:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569GRqSr4pbM7kxuALwFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5 ZDI5MTYwHhcNMjYwMTAxMTQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmQ2OWZkNjIzN2VmZjljYTIxMzNkZDQyZmVkZDUwZWU2YWY0Mjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9x94n9g3TtXDAi2/hi7xfMOSu90 mltFZ7QGY9sQ53HJ/Wn1UDPMxQKQyJfMb2EQuRshnlTWML3+SKN+pmWITKk5KFOB /LGGQJ2FUuPn3hVRoPm9TgJjWvwft/N0gEZH+Etc4cTXUKNzLoUbmH/SwCVAXyus E+CNTuoa8ohbDC7WO/9d1aIWOpyywTQXBmAz9SeqjNskR9JhAA38TDGdOuMkaqth xqDssOPIVnyzO89DdMXQOsjSjbgchNEG8LLq4e9N4kEPI4Bdahwk22BQFSPr1d9Y rVjk3UktBYPW+6SGOoq3+zl89HH41WF3a1kZ/yL6J/smnKwXtRoXJhAuWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/Wn9Yjfv+cohM91C/t1Q7mr0J0MB8GA1UdIwQY MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt MWE0MmY2MzJjMzA3LzEvSDlhZjFpTi1fNXlpRXozVUwtM1ZEdWF2UW5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3 LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwljoMA0G CSqGSIb3DQEBCwUAA4IBAQBUHJC8DThjNN89InqQ0fs4OOF9SfiSodO0O4lbindC ibV90/Ofvy/mpM4oPg1OxuILjCXQhZY92Si8hjJ1KgRfakPFikCy6ARd+YdR9XZE 95FbIzkcZccQP+qOnS8/9bHzGsNHnUi29Y7SOZDFFqhW0luldGg0WLXROY2VBixA o3tZJ1PiNg7vZ0Pz9UVG5voouGI28yRrzr2HMRDonkD0HrZyY/FdvyDiMqgfvTpw 9W4ae0G9ABwODvv5+tisGbIiiciKH2OkkcAhQpDzW+KgGICMT2zB6OTIHWlutWHq wa3lmCAi8u7W0Uim8xKV6c7oEiUQ7UMUVL2qoW7/Prt1 -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:43 2026 by rpki-client