This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/AnchuhLoB52fec4H60q69PnL8GE.roa
File: AnchuhLoB52fec4H60q69PnL8GE.roa (raw, json)
Hash identifier: 9vxJSIlnsF1BYGdSVbS12IIqxCVperdFK3t7ldUO82Y=
Subject key identifier: 02:77:21:BA:12:E8:07:9D:9F:79:CE:07:EB:4A:BA:F4:F9:CB:F0:61
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019B850E7C4B7B14BF4D2AF38158A223027E
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/AnchuhLoB52fec4H60q69PnL8GE.roa
Signing time: Sat 03 Jan 2026 18:11:17 +0000
ROA not before: Sat 03 Jan 2026 18:11:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.234.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jan 2026 11:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:85:0e:7c:4b:7b:14:bf:4d:2a:f3:81:58:a2:23:02:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Jan 3 18:11:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=027721ba12e8079d9f79ce07eb4abaf4f9cbf061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:e4:76:33:9a:03:d5:e7:11:4d:9f:80:35:
e4:29:35:9d:12:b2:0c:7b:64:37:61:62:6f:fe:ce:
c4:04:d8:c4:65:91:13:63:88:03:29:da:ae:64:4f:
b1:09:04:33:9c:21:be:b4:63:13:96:c9:c6:f7:5e:
51:08:74:3a:f1:7f:5b:5a:ab:7b:fd:bd:19:99:1b:
b6:3d:4c:3a:33:44:a9:1a:2b:d8:55:f0:bb:e4:fb:
4e:19:3d:64:b9:b3:a4:8a:b3:ae:75:59:54:74:7b:
f0:41:b2:8b:7b:9c:ef:2f:7e:62:44:2f:34:ec:5a:
7b:84:cf:ef:60:d5:84:f4:01:14:15:b1:c5:2c:b8:
ab:dc:37:c6:47:c7:cf:3a:68:45:c1:60:95:34:c2:
11:02:20:fe:eb:77:ab:65:bd:e2:2a:aa:4a:69:1e:
f4:ff:fc:e8:11:71:59:2f:b7:c9:a7:32:c5:fa:91:
15:e6:e2:26:6f:ec:90:88:36:3c:14:79:ef:e1:aa:
1e:fb:3d:65:db:9a:92:62:9b:c2:d0:80:f6:f5:98:
a3:5b:88:bc:93:c3:ea:5c:24:32:42:5f:07:03:05:
16:8d:44:db:30:b6:44:76:34:13:c7:75:f9:b5:b6:
9e:7e:43:99:91:9a:ab:25:fd:06:e6:f7:b5:92:de:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:77:21:BA:12:E8:07:9D:9F:79:CE:07:EB:4A:BA:F4:F9:CB:F0:61
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/AnchuhLoB52fec4H60q69PnL8GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.147.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fb:b2:26:b4:50:65:6f:7d:6f:49:94:ce:34:c8:78:c0:73:
82:31:f7:be:45:fd:c0:29:e3:16:35:bc:f3:d8:98:81:28:9e:
7b:f2:36:df:85:a2:36:66:88:65:54:82:dc:39:c6:f6:a4:37:
8b:9e:c0:c6:06:12:51:62:c1:1a:43:61:70:28:2e:c9:2b:1d:
45:fd:46:78:9c:14:41:73:1b:4b:93:98:e3:b9:1a:b8:64:77:
02:f0:e6:61:11:29:14:e8:05:d0:c4:de:8d:4d:e7:64:ab:59:
b3:34:dc:41:f4:e7:3d:2d:19:f7:4d:6c:2a:d7:c4:a1:9d:60:
0c:ec:b6:70:21:cf:75:be:50:d9:cd:0f:4b:92:b9:62:1c:fd:
94:22:0c:90:c0:b0:3d:f0:9c:4e:69:22:86:c5:5e:ef:99:31:
a2:c9:1a:30:9c:d6:4e:cc:2e:91:21:45:77:78:6d:80:e5:d3:
80:2f:25:ad:37:55:aa:5b:1b:26:b0:e0:6a:36:49:30:1c:be:
ca:10:63:e5:b9:65:81:eb:b7:6d:88:58:c6:16:61:fd:1c:96:
62:a7:a4:2b:02:0b:d8:b6:67:27:50:db:63:e7:8e:23:36:50:
08:3b:fc:4a:dc:95:bb:56:86:e1:5e:96:ee:cb:45:69:73:7d:
01:86:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 17:05:13 2026 by rpki-client