This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WxtH6l0friokPzBYaDHoESdo8X0.roa
File: WxtH6l0friokPzBYaDHoESdo8X0.roa (raw, json)
Hash identifier: 3KgG1E0x97mZIeeHrce4aRMsWqyfvgyF/YaMSQuMU50=
Subject key identifier: 5B:1B:47:EA:5D:1F:AE:2A:24:3F:30:58:68:31:E8:11:27:68:F1:7D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A264DDC6E122854877CBE000C7F69016
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WxtH6l0friokPzBYaDHoESdo8X0.roa
Signing time: Sun 26 Jan 2025 11:35:06 +0000
ROA not before: Sun 26 Jan 2025 11:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31549
IP address blocks: 217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 12:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:64:dd:c6:e1:22:85:48:77:cb:e0:00:c7:f6:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 26 11:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b1b47ea5d1fae2a243f30586831e8112768f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:f6:ad:87:4f:a2:c1:e8:f4:a3:71:35:81:
ec:5b:6f:df:db:8c:a3:a2:c5:2e:9b:d8:1c:5d:c7:
ec:69:e9:50:47:32:28:87:0f:79:31:8a:aa:7c:8e:
ab:f4:30:01:d5:21:ef:ce:5c:77:11:58:36:d4:cb:
3d:2e:da:ab:20:7a:a5:f9:71:5b:6e:23:33:ad:cd:
1e:48:ca:45:81:59:b1:9d:20:ef:6f:cf:d3:ad:bd:
5c:6e:d2:fc:41:08:90:07:7d:c8:b9:be:be:0c:d4:
a2:c7:e1:5d:58:25:12:f0:0f:df:27:8e:f4:95:6f:
52:03:f3:c7:0e:58:63:73:9f:bb:8c:f4:1c:9e:de:
6b:11:6c:3d:25:e0:f5:f5:1c:59:2b:cd:44:57:22:
8e:16:e4:6a:f7:fb:e8:bc:26:b6:9a:2f:8f:11:1f:
45:05:31:ef:ff:de:a3:18:69:07:55:01:d9:9d:d5:
20:ff:b5:3e:0e:bd:58:16:27:6b:09:14:b0:e2:f0:
f5:68:92:d0:89:68:a8:a4:4a:4e:b0:49:ed:3d:d9:
52:69:da:81:5b:ba:70:71:cc:07:dd:a2:49:23:7e:
39:cf:f2:44:c1:10:4d:8e:8f:b1:0c:4e:22:36:74:
53:52:af:05:c3:fe:ba:aa:ab:78:ec:74:35:ec:df:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:47:EA:5D:1F:AE:2A:24:3F:30:58:68:31:E8:11:27:68:F1:7D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WxtH6l0friokPzBYaDHoESdo8X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.245.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f6:28:af:ec:07:99:b0:f4:23:dd:56:43:ac:96:74:80:0a:
fd:c4:c8:51:d9:6a:2e:2d:ae:01:e8:d2:8b:19:ea:fc:c7:3c:
95:8a:69:c7:ba:52:d5:3c:c5:98:ce:48:6c:d4:40:2b:c7:45:
aa:b3:68:e4:d3:d2:5b:3f:be:9e:43:30:f7:62:a8:39:57:0e:
c7:eb:6a:51:2e:b6:d6:79:f7:16:97:d5:fb:f1:77:0e:09:ab:
0a:6d:99:af:87:cd:84:89:0c:7f:4f:00:a7:ee:34:57:18:05:
8b:33:e3:40:cc:1d:72:38:97:69:e8:4e:5b:f3:ec:c1:e1:65:
37:68:ee:9b:6c:df:81:22:19:d3:e9:2d:5e:17:59:6b:38:40:
fa:f3:95:4b:e4:dc:7a:4c:a2:7e:a5:2f:5b:93:e4:8b:fa:60:
1f:fb:0b:5d:c3:e3:e5:ea:7f:c4:1b:ac:a6:a7:8a:70:8c:45:
24:ba:63:06:8b:f4:d9:13:63:a7:2f:e1:42:a6:df:84:3e:01:
9e:b2:50:43:1d:be:51:f0:49:b6:ec:5d:8b:6b:b6:13:a3:8c:
ca:d4:06:67:07:bb:69:67:45:36:93:6d:58:43:5e:54:e0:70:
9f:96:4f:89:ea:12:0c:a8:a1:4c:dc:3b:b7:13:f4:54:ad:8a:
b2:39:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:32:49 2025 by rpki-client