This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DEtYII-zIR1JzOuHiZgSn8x4Uvs.roa
File: DEtYII-zIR1JzOuHiZgSn8x4Uvs.roa (raw, json)
Hash identifier: dnqlBH1iavWSoDvJFD/4+jk+c8DQqR4/jL24QDv6VI8=
Subject key identifier: 0C:4B:58:20:8F:B3:21:1D:49:CC:EB:87:89:98:12:9F:CC:78:52:FB
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019B0E5F11F6BD081D2931D8A0C9405C9307
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DEtYII-zIR1JzOuHiZgSn8x4Uvs.roa
Signing time: Thu 11 Dec 2025 17:04:30 +0000
ROA not before: Thu 11 Dec 2025 17:04:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213650
IP address blocks: 2a11:d440::/29 maxlen: 64
Validation: Failed, certificate revoked on Thu 18 Dec 2025 16:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0e:5f:11:f6:bd:08:1d:29:31:d8:a0:c9:40:5c:93:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Dec 11 17:04:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4b58208fb3211d49cceb878998129fcc7852fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:d3:57:8f:d3:c8:e7:90:66:0b:e5:2c:ae:
60:22:e7:99:b4:0a:fb:6d:22:ee:1c:a3:04:d3:9b:
0c:2a:b6:94:96:74:88:b4:24:fe:b9:2c:56:69:a6:
8e:ec:88:24:d2:87:29:93:26:70:72:c9:af:f8:9d:
c2:1f:f2:37:fb:f1:0b:f4:b7:6d:ec:1a:a8:43:ea:
d3:be:58:d6:1f:77:9a:12:ff:07:5e:87:64:06:82:
ad:b8:75:be:27:33:21:cc:24:cf:d3:52:54:18:3b:
87:b1:07:84:f2:e9:8b:61:d7:e3:1b:c7:cb:59:8f:
8e:a8:12:6f:0b:10:52:fd:4b:6d:a0:cb:ce:91:2a:
17:cf:26:73:90:53:b2:9e:eb:0f:dd:c0:72:a5:bd:
a8:a1:94:b2:67:0b:87:ee:6c:d4:0a:5c:19:8e:0c:
dd:67:73:95:e7:0e:c9:c9:ef:fb:97:83:61:8b:25:
b3:f8:7b:a6:f5:aa:5b:c1:73:d7:9f:3f:9c:36:2e:
26:82:51:c5:8a:6b:11:4a:01:7d:ee:8b:84:8b:7a:
c3:24:01:71:5a:44:9a:09:2d:f3:d6:e1:bc:27:e0:
14:d6:c5:9c:e2:1d:72:a6:24:40:94:1a:c4:4d:66:
8a:19:7a:0c:c4:0d:83:a9:b2:a3:de:ce:79:a8:ea:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:58:20:8F:B3:21:1D:49:CC:EB:87:89:98:12:9F:CC:78:52:FB
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DEtYII-zIR1JzOuHiZgSn8x4Uvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d440::/29
Signature Algorithm: sha256WithRSAEncryption
6f:7d:13:3e:cc:c8:5b:e8:db:b7:d0:df:49:c2:11:9e:b6:40:
fb:17:26:7f:80:ea:62:47:f9:fb:df:27:4f:20:5b:29:64:c1:
df:1e:3c:bd:d5:18:77:fa:ca:fe:af:9b:f6:0d:74:9f:cd:7f:
ad:10:06:16:00:83:ee:05:59:a0:ab:5b:1a:c2:0f:7b:87:ec:
af:e6:d1:7b:17:79:01:9d:97:69:b0:72:ae:8a:a8:cb:44:27:
da:e9:54:15:26:28:78:bf:54:86:44:92:6a:3a:e2:ab:3f:d4:
fe:e6:9a:8b:6e:8b:b0:1c:f6:53:b6:a8:3a:59:ad:24:79:4e:
3a:5b:18:0e:92:0d:88:69:66:75:1a:59:50:87:7f:e0:e8:63:
0d:4f:d9:63:81:54:59:45:b2:d4:c1:5e:c2:01:bf:1f:38:8d:
f5:c8:ea:18:17:00:bb:0f:ab:9b:bd:8a:e6:fc:48:b4:b8:3b:
18:22:89:cc:a8:d1:e9:81:9b:2a:0e:07:ef:14:f7:86:b7:f7:
7d:c0:2a:bd:d3:fd:f0:a7:8a:46:e8:11:8e:33:1e:a1:4a:34:
eb:d2:69:d1:0d:7f:e9:14:d9:55:65:07:65:68:63:bd:b1:a5:
34:59:38:ae:6f:80:a4:9c:1a:ab:b2:20:bc:02:36:dd:14:40:
01:d8:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 18:14:54 2025 by rpki-client