This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k4WtLbtugq3NhO31f2TOVUEi68M.roa
File: k4WtLbtugq3NhO31f2TOVUEi68M.roa (raw, json)
Hash identifier: WavamXdUoM2mPh2OJ/BCWQAl8Yf1B8nUGU3UJvGSeOg=
Subject key identifier: 93:85:AD:2D:BB:6E:82:AD:CD:84:ED:F5:7F:64:CE:55:41:22:EB:C3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019BEC45BE0DD4E1A00E7040199DEE6B2EBB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k4WtLbtugq3NhO31f2TOVUEi68M.roa
Signing time: Fri 23 Jan 2026 19:12:32 +0000
ROA not before: Fri 23 Jan 2026 19:12:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 151.243.189.0/24 maxlen: 24
151.243.191.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Jan 2026 09:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ec:45:be:0d:d4:e1:a0:0e:70:40:19:9d:ee:6b:2e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 23 19:12:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9385ad2dbb6e82adcd84edf57f64ce554122ebc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:34:76:dc:ac:98:d4:b3:bc:7a:cb:73:87:
c6:d7:a0:07:bc:6e:15:3e:37:da:46:a6:6c:05:ea:
4a:91:e3:3e:52:23:27:3d:60:50:6e:4f:b3:16:8d:
48:96:d7:87:db:59:29:a2:c0:85:d2:a2:f0:a5:eb:
04:4d:11:d4:8a:92:d4:88:e9:97:6b:43:5a:23:71:
6e:84:9f:29:f4:1e:fe:bd:08:c7:d7:a7:ec:64:74:
cd:d4:ca:44:81:c6:63:66:11:3a:65:6c:1a:71:c3:
eb:78:af:91:90:c4:e1:e1:d8:3b:71:b2:f8:7a:1d:
d6:ed:ae:6c:cd:08:1c:ee:7e:a3:9a:ad:7f:12:79:
36:6b:c1:51:b8:b2:84:8c:1c:ae:d7:bc:70:20:ec:
4f:81:ee:9f:d9:a8:f4:bf:4d:d7:cb:93:8a:39:e6:
b0:06:8a:1e:5a:9f:09:80:b2:cb:65:4f:b3:d5:cf:
9c:0a:af:fc:ad:d9:28:ab:9e:34:9c:23:29:14:32:
71:3d:19:6d:9b:25:3a:98:a7:d7:46:3d:98:22:81:
5f:c8:4c:91:b9:39:4c:ef:4b:30:2c:a5:5d:44:54:
43:cd:71:cc:32:e6:b9:7e:0a:ae:82:36:a6:e3:cb:
9b:dc:7c:8c:37:11:2b:bd:4f:e1:24:07:23:f5:f5:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:AD:2D:BB:6E:82:AD:CD:84:ED:F5:7F:64:CE:55:41:22:EB:C3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k4WtLbtugq3NhO31f2TOVUEi68M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.189.0/24
151.243.191.0/24
151.244.4.0/24
151.244.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c3:e8:66:4c:13:6b:63:01:80:eb:a8:e1:e7:ed:0e:c8:e4:
27:07:93:8c:5a:4d:00:4e:cd:a6:fb:8b:c5:ac:b5:4e:40:f0:
96:36:6a:1a:2f:a5:50:1b:2e:dd:1d:1b:e8:d8:ef:2b:2d:18:
8f:2e:29:30:8a:f5:57:38:2a:c4:aa:f0:d0:f3:a1:b6:8f:a8:
d8:e1:40:d5:14:1a:d9:b2:22:e6:1e:63:c6:2c:44:1a:3b:b5:
04:60:aa:90:d9:53:5b:73:55:48:73:36:1a:90:d5:03:85:6e:
40:8f:95:bb:10:b1:0e:7a:72:b0:1c:08:2e:84:7f:09:38:5c:
75:1b:25:0a:00:af:fa:ff:0b:d3:d0:bb:86:c7:ea:90:1e:ab:
66:0d:fb:10:8f:b8:f1:ef:74:4d:55:8d:12:8c:8a:26:fe:68:
9f:d6:45:0a:6d:74:3a:86:ba:e3:b6:7c:4b:4e:2d:29:7c:ed:
c9:6b:a4:33:76:49:d4:26:82:54:bc:b9:b9:81:d6:46:06:e3:
cb:9e:1e:a1:8d:80:2d:5b:2f:0f:5d:e7:54:7b:44:91:26:4b:
f5:14:95:09:4e:5d:11:eb:35:c9:ed:1e:29:99:8b:db:dd:ab:
a0:af:a2:2b:aa:6a:fc:c7:3d:8a:c4:9e:55:7a:d6:2e:6f:40:
88:1d:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:37:26 2026 by rpki-client