This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/OjXJK805RlESND_xHMWM0hjcZ8Q.roa
File: OjXJK805RlESND_xHMWM0hjcZ8Q.roa (raw, json)
Hash identifier: GrX5M7B0VeRj8hatddQAYwuqIxe1JVfFA40lk92wdlw=
Subject key identifier: 3A:35:C9:2B:CD:39:46:51:12:34:3F:F1:1C:C5:8C:D2:18:DC:67:C4
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C41C98AA1DB6B2567D2C2E0B103EF634C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/OjXJK805RlESND_xHMWM0hjcZ8Q.roa
Signing time: Mon 09 Feb 2026 09:44:13 +0000
ROA not before: Mon 09 Feb 2026 09:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 195.254.165.0/24 maxlen: 24
2a05:9080:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Feb 2026 13:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:c9:8a:a1:db:6b:25:67:d2:c2:e0:b1:03:ef:63:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 9 09:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a35c92bcd39465112343ff11cc58cd218dc67c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:52:77:08:76:45:1f:8f:7a:ab:27:5b:e4:
ea:8d:87:e8:d3:61:a5:cb:02:31:08:57:0d:44:78:
c7:5f:ec:2c:15:44:c2:e5:7f:07:a4:55:b1:18:e1:
3b:b7:c8:6f:e9:3a:d3:b5:c1:ba:65:2e:dc:3e:22:
3d:45:ea:9a:51:41:65:40:32:60:a5:e3:25:29:0e:
71:79:b9:ef:95:ab:13:e4:5f:c2:22:ef:29:df:bf:
8a:77:59:9a:7b:b0:d6:6a:c9:ad:57:fc:f7:64:5b:
5b:99:15:19:30:b9:24:43:1e:d0:46:66:b8:1f:48:
07:24:8a:37:1e:70:08:1f:61:1c:c9:ce:e0:d6:ad:
5b:0f:21:51:29:fc:87:ea:2e:56:13:cd:5a:61:7b:
7b:7a:22:61:b9:0f:5e:66:49:20:18:eb:4c:d7:16:
4c:39:f0:6c:7b:aa:de:83:8e:22:62:18:11:51:ad:
d1:da:91:ab:55:1c:7e:e2:13:4d:98:6c:a1:7d:3f:
ff:78:6a:36:cb:a3:9a:d7:4d:0b:d4:4f:4f:79:c9:
f9:d1:98:93:86:33:88:2c:d8:93:a4:e0:22:8f:92:
f5:be:59:b8:9e:48:12:5e:85:73:e1:7a:9f:b9:14:
17:b6:9a:00:09:98:88:a8:ba:8c:ea:ab:cd:ba:81:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:35:C9:2B:CD:39:46:51:12:34:3F:F1:1C:C5:8C:D2:18:DC:67:C4
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/OjXJK805RlESND_xHMWM0hjcZ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
IPv6:
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
a4:2f:6f:4f:ab:11:92:eb:56:22:b9:20:af:25:8b:f1:c6:34:
9c:b2:e3:ec:87:b6:6e:d9:c9:3c:25:57:41:b4:a1:56:85:c1:
0f:99:7c:33:64:c6:a3:4b:b9:fc:0d:db:bc:f2:43:62:0e:29:
7e:36:f0:80:4b:43:87:7a:36:e1:8e:5f:b4:61:86:ea:49:77:
c4:24:72:9d:41:de:65:b3:d4:2c:c2:fc:0d:d5:06:4d:c9:42:
18:f5:40:e4:0a:8a:47:84:fd:bf:ed:d1:0e:45:38:65:e1:93:
65:a3:e7:48:b8:28:0f:d3:76:b3:3a:ea:29:ad:d7:57:a3:db:
4a:ff:a2:c8:79:a5:4f:d1:c8:7e:2f:84:3a:7e:de:a0:ba:0f:
33:13:4a:83:04:b4:a7:47:fc:34:cf:cb:6d:e0:ac:cf:07:4d:
30:46:a8:91:e0:80:cb:91:e1:65:66:f0:8f:8c:dc:fe:26:82:
4b:8c:07:54:0e:4e:38:fb:45:1a:26:44:22:a6:5b:1f:d7:69:
46:d9:9b:47:12:89:3e:29:0d:9e:ca:bb:c2:c7:16:83:90:67:
b9:dd:81:56:f0:cf:92:cb:1d:50:f9:b1:d4:c5:e2:f9:9a:e7:
18:d3:b3:11:29:bc:dc:9c:25:d7:e0:9b:92:38:86:f4:99:2e:
2f:5c:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:31:53 2026 by rpki-client