This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJP3ddRRfMvQZzflD2t5J7IonaA.roa
File: dJP3ddRRfMvQZzflD2t5J7IonaA.roa (raw, json)
Hash identifier: i2mT5iHzRXj/M1170fJUg+4lrnvzmyBsZxYXD65Vz6U=
Subject key identifier: 74:93:F7:75:D4:51:7C:CB:D0:67:37:E5:0F:6B:79:27:B2:28:9D:A0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019B7C13659484D0B28EE45E494D2EA7ECAE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJP3ddRRfMvQZzflD2t5J7IonaA.roa
Signing time: Fri 02 Jan 2026 00:20:04 +0000
ROA not before: Fri 02 Jan 2026 00:20:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 185.227.144.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jan 2026 13:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:65:94:84:d0:b2:8e:e4:5e:49:4d:2e:a7:ec:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 00:20:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7493f775d4517ccbd06737e50f6b7927b2289da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:68:2e:00:30:c3:7a:ef:0f:ef:45:75:cd:
59:fe:25:cb:9b:a0:08:c4:d8:4a:93:ca:a9:92:59:
7b:3e:f2:f0:33:b0:e8:36:66:11:9e:fc:95:0e:b9:
85:43:3f:aa:b4:14:43:fc:f4:64:95:77:b3:37:95:
fa:ac:36:0a:f5:ba:75:fd:8c:5b:e1:a4:b1:cf:20:
f8:2d:4c:0c:09:5f:76:41:93:21:04:8d:12:94:c1:
49:c3:f1:cf:07:c5:04:d0:e6:4f:eb:9a:44:82:ab:
6b:7b:fd:9e:13:80:d1:0e:fb:31:87:8b:b4:f3:09:
88:2c:18:22:07:f0:2d:1e:db:b0:db:61:68:0c:6d:
73:7d:0e:6c:6c:68:87:ef:b7:e8:71:e6:09:88:ed:
30:23:af:4a:d7:1d:c8:9c:4a:22:6d:bb:28:26:ae:
b7:8e:da:59:58:5d:3a:9f:80:08:1a:a6:63:2d:a4:
4a:21:1b:c8:a5:08:aa:62:4e:f3:6a:80:d0:a8:2e:
50:28:a0:b7:59:3e:62:21:c9:4a:be:ac:42:fb:6e:
0d:69:d9:75:15:2f:7f:ca:d9:1c:68:c5:45:88:8f:
16:9f:e6:d9:5f:d8:3f:0c:49:67:6f:ac:60:63:8c:
21:8f:f4:85:b7:9e:af:21:f4:77:d1:bb:14:06:38:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:F7:75:D4:51:7C:CB:D0:67:37:E5:0F:6B:79:27:B2:28:9D:A0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJP3ddRRfMvQZzflD2t5J7IonaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.144.0/24
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:91:99:fe:84:14:71:ef:e7:72:01:1d:28:93:47:dd:40:c0:
ec:05:99:ff:5c:b1:d5:0f:c7:2c:d5:4d:9a:3f:a8:96:d5:14:
9c:ab:dc:58:21:34:3b:fb:b5:39:55:aa:f8:66:80:4f:b1:a3:
d5:f2:d8:b8:5c:ef:8d:26:aa:7c:5d:59:8c:b8:2c:fc:27:a1:
94:06:3d:d1:93:4a:89:06:6a:73:25:16:e6:f5:a9:df:0e:3d:
5a:1e:18:33:7c:e7:47:65:fb:03:cf:8a:0f:a4:59:2c:09:99:
89:7b:4a:e7:ad:a3:49:ba:b4:25:60:2f:a3:8f:95:1f:a4:f7:
f5:56:f0:07:ee:b5:bf:78:eb:e2:9b:ff:50:e0:18:07:d7:73:
71:e7:40:9e:e6:ef:cb:0d:78:cb:42:6a:eb:2f:e2:44:ec:5a:
3f:52:ce:b8:4b:d5:e4:5c:d0:fb:e7:a5:11:ba:78:e6:26:50:
45:62:36:74:9c:d0:39:86:60:6a:26:0e:4c:69:5f:72:0b:d1:
45:c2:1b:b1:4a:ea:d0:cc:1c:91:df:78:d1:10:79:c1:d8:ee:
4c:47:10:14:5b:96:54:81:11:bc:49:44:4b:55:6e:af:60:47:
15:98:39:7a:f4:5d:20:d8:00:13:9d:ed:9a:d9:68:c4:41:66:
f0:1f:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:48:19 2026 by rpki-client