This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GjUIAIZ2Twpek10a7HCaWIFdna0.roa
File: GjUIAIZ2Twpek10a7HCaWIFdna0.roa (raw, json)
Hash identifier: yCJiFYRmw0CSN7s60WXDEWRrzfn9le1YZIRmAVCTwNg=
Subject key identifier: 1A:35:08:00:86:76:4F:0A:5E:93:5D:1A:EC:70:9A:58:81:5D:9D:AD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019522AAF1762D457982E21CAFB1D22582B7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GjUIAIZ2Twpek10a7HCaWIFdna0.roa
Signing time: Thu 20 Feb 2025 09:23:02 +0000
ROA not before: Thu 20 Feb 2025 09:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215704
IP address blocks: 185.194.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 11:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:aa:f1:76:2d:45:79:82:e2:1c:af:b1:d2:25:82:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 20 09:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a35080086764f0a5e935d1aec709a58815d9dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:ce:28:74:1a:76:8a:ee:a7:34:f6:c1:c5:
2a:3e:bc:35:e2:40:9e:d6:f0:0f:91:95:76:75:83:
3d:45:ea:e8:d7:17:e2:34:89:b8:da:d9:b7:ae:0e:
65:2f:5d:fe:54:9c:7f:cf:44:32:02:fd:d1:f7:75:
d2:e0:54:32:ce:52:b6:0d:c5:62:5b:e6:f7:e7:bf:
6e:68:51:7f:14:19:ed:0a:35:9d:4b:57:96:f2:32:
17:9a:32:cc:e9:f4:ee:6c:87:ac:38:b4:93:96:cc:
a9:66:33:33:82:10:a4:e1:ac:5c:59:0a:a9:a5:8f:
e7:15:bd:e9:bd:7c:e6:9a:e3:7a:7f:28:2f:fb:4c:
45:8a:01:7b:73:a5:c0:80:52:32:27:19:66:e5:c1:
1d:1d:ce:b3:f4:bb:2c:dc:4a:03:30:34:66:05:c9:
5d:1a:12:2f:f7:51:81:87:bc:78:dc:11:f7:06:c2:
0f:6c:72:2c:cd:74:23:d7:86:9d:c2:c5:a1:3e:8a:
57:26:67:17:4f:52:69:5d:26:79:93:4d:10:31:02:
46:fb:00:cf:11:ce:ab:48:e3:a3:99:c4:95:bc:a3:
c9:ff:98:fa:74:80:60:27:be:1c:fd:b9:bf:54:8e:
3f:0d:b9:c6:b6:3a:1c:05:9c:c6:58:0c:8d:3a:4e:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:08:00:86:76:4F:0A:5E:93:5D:1A:EC:70:9A:58:81:5D:9D:AD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GjUIAIZ2Twpek10a7HCaWIFdna0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f4:45:f8:74:1f:71:95:7a:c5:c7:39:52:59:07:c7:59:4c:
f3:68:fb:f8:46:66:f1:52:d8:22:05:ca:39:7d:dd:06:5c:38:
3f:ce:04:ce:25:87:40:cb:ef:d4:8e:0b:ba:b5:48:32:f8:a1:
04:6f:dc:ba:3b:b5:17:ab:8d:64:f3:60:44:cb:e8:25:be:a8:
0a:f4:08:1f:75:2f:66:b3:a9:13:a3:4c:d0:fd:dc:76:24:b6:
ea:8a:cb:86:2c:56:35:72:74:60:82:73:d7:d0:2c:f3:1b:93:
41:41:d5:4d:c6:38:42:26:2d:08:6a:c3:06:01:25:2c:9f:6c:
53:eb:80:f3:a4:f0:cc:38:7a:d4:c8:22:4b:82:21:0e:80:82:
57:4a:03:af:71:fd:0f:6d:2a:58:f4:54:52:0d:71:1a:2c:d6:
c1:3e:c0:10:bf:7e:ac:8c:06:99:51:ec:9f:89:21:75:40:fd:
77:71:53:61:dd:ec:62:00:92:69:b3:55:67:ab:62:fa:2a:f4:
7e:0c:3a:fb:df:2d:d4:ed:b4:bf:d1:49:48:6a:cb:41:c1:58:
f5:ef:3c:5d:cf:11:ea:9e:01:2c:3a:66:c3:58:2b:2a:c2:af:
fe:62:3b:dc:c5:a1:b9:7e:36:4b:38:ab:da:30:e5:3d:28:03:
85:ea:64:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUiqvF2LUV5guIcr7HSJYK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMjIwMDkyMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTM1MDgwMDg2NzY0ZjBhNWU5MzVkMWFlYzcwOWE1ODgxNWQ5ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0POKHQadorupzT2wcUqPrw14kCe
1vAPkZV2dYM9Rero1xfiNIm42tm3rg5lL13+VJx/z0QyAv3R93XS4FQyzlK2DcVi
W+b3579uaFF/FBntCjWdS1eW8jIXmjLM6fTubIesOLSTlsypZjMzghCk4axcWQqp
pY/nFb3pvXzmmuN6fygv+0xFigF7c6XAgFIyJxlm5cEdHc6z9Lss3EoDMDRmBcld
GhIv91GBh7x43BH3BsIPbHIszXQj14adwsWhPopXJmcXT1JpXSZ5k00QMQJG+wDP
Ec6rSOOjmcSVvKPJ/5j6dIBgJ74c/bm/VI4/DbnGtjocBZzGWAyNOk6oWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBo1CACGdk8KXpNdGuxwmliBXZ2tMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvR2pVSUFJWjJUd3BlazEwYTdIQ2FXSUZkbmEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucKxMA0G
CSqGSIb3DQEBCwUAA4IBAQC99EX4dB9xlXrFxzlSWQfHWUzzaPv4RmbxUtgiBco5
fd0GXDg/zgTOJYdAy+/Ujgu6tUgy+KEEb9y6O7UXq41k82BEy+glvqgK9AgfdS9m
s6kTo0zQ/dx2JLbqisuGLFY1cnRggnPX0CzzG5NBQdVNxjhCJi0IasMGASUsn2xT
64DzpPDMOHrUyCJLgiEOgIJXSgOvcf0PbSpY9FRSDXEaLNbBPsAQv36sjAaZUeyf
iSF1QP13cVNh3exiAJJps1Vnq2L6KvR+DDr73y3U7bS/0UlIastBwVj17zxdzxHq
ngEsOmbDWCsqwq/+YjvcxaG5fjZLOKvaMOU9KAOF6mRs
-----END CERTIFICATE-----
Generated at Tue Dec 16 18:01:08 2025 by rpki-client