This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa
File: WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa (raw, json)
Hash identifier: 3kpv91GQxIMTt9nOuI9ap0dnqC2eP0deuZoMlfreTlc=
Subject key identifier: 59:02:B1:F8:C4:D8:0D:F6:59:4C:77:0C:02:DF:18:70:FC:84:F5:21
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019651AB1C59922C2322AFCC04B6D35D09A7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa
Signing time: Sun 20 Apr 2025 05:28:10 +0000
ROA not before: Sun 20 Apr 2025 05:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11798
IP address blocks: 185.176.94.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ab:1c:59:92:2c:23:22:af:cc:04:b6:d3:5d:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 20 05:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5902b1f8c4d80df6594c770c02df1870fc84f521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:2e:55:e9:54:ee:ec:8a:cb:32:40:12:5c:
45:8e:fd:b2:ee:8b:1a:8b:aa:65:86:f6:46:02:1e:
09:41:5c:c6:7a:67:e9:52:67:b5:7b:71:c8:47:cd:
e5:f3:97:98:64:ad:56:8a:f3:37:28:54:f2:e3:09:
89:7c:42:19:18:07:db:2f:53:c5:dd:2b:96:c6:c7:
0b:62:53:8b:7e:75:a1:cf:e8:11:18:0e:e6:41:47:
46:f7:f1:23:8e:28:c1:ec:b3:84:1c:3d:43:b5:0c:
5e:b8:c4:70:0b:bb:9b:c1:a8:5b:09:4a:c0:b2:64:
d2:2f:41:71:fd:f3:3b:c8:ac:11:53:27:8a:ba:63:
a1:6a:1b:d0:2b:c1:b8:82:d2:b3:eb:e3:60:f7:08:
4c:18:a0:c2:c4:7b:6d:31:1c:a9:e6:b0:11:e5:3a:
db:1e:98:fc:fb:e9:6c:12:51:7e:1c:d6:87:2c:e3:
4a:ef:55:ca:74:3b:1a:11:78:0a:fe:e0:7a:cd:76:
86:de:a3:58:5c:a1:4d:95:65:fc:68:f2:a2:7c:c4:
10:29:03:7e:ad:8b:12:b8:92:92:2c:f6:3a:3b:cd:
ff:3f:d2:45:6e:b7:5e:ee:1a:ad:b4:24:86:6b:25:
73:aa:7b:8d:8f:b3:14:f6:97:a7:f8:a6:72:de:3b:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:02:B1:F8:C4:D8:0D:F6:59:4C:77:0C:02:DF:18:70:FC:84:F5:21
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.94.0/24
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:29:d8:36:d4:95:0d:bc:e7:a5:ee:df:5b:dd:b3:e7:78:29:
e9:e0:7a:65:3e:48:4e:ab:a2:c3:08:3c:d8:74:89:a1:ae:96:
a6:0e:7c:c3:76:49:bd:1f:a4:e4:6a:35:ee:55:5c:c6:df:8c:
3c:d0:31:07:34:d6:fe:9d:c2:78:83:5a:51:ad:49:15:7f:bc:
af:ed:9a:dc:28:a5:44:80:39:4b:84:54:97:09:eb:28:ae:19:
1d:ac:f4:78:c4:73:b3:ef:5a:d7:b4:aa:74:57:7c:45:46:2e:
b0:7a:f7:58:42:22:e8:fb:81:bf:3b:69:c6:7b:aa:f0:a5:ed:
a4:27:cb:47:35:ef:3f:89:14:73:28:6b:f6:22:d0:e7:eb:8f:
5d:8c:65:3c:b4:d5:26:42:43:d4:de:3f:d5:f0:33:16:4b:80:
9c:e2:51:dc:e0:e5:bf:3d:61:0b:b0:07:dc:c6:89:44:fc:fd:
ef:4b:f3:2c:9c:be:31:72:bc:bf:af:61:35:51:1f:22:66:6a:
00:0d:53:f9:9e:ec:50:ad:ef:9f:8b:0a:aa:9a:cb:87:9b:14:
ae:91:19:f7:31:e4:6e:aa:91:90:14:fc:4e:75:d6:a5:51:b8:
40:16:38:68:b6:67:7f:62:d5:b7:fa:28:1b:66:e6:69:84:22:
75:c0:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 09:32:59 2025 by rpki-client