This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20313531333338.roa
File: 3139342e33312e3134382e302f32342d3234203d3e20313531333338.roa (raw, json)
Hash identifier: ied0WUrwIFWML7tVQ9uRUz/61Mxo2U1aAzlaccP1fpk=
Subject key identifier: 70:0D:84:D3:EC:7F:EA:42:FB:43:10:2A:B1:A3:F4:99:96:1D:0A:7E
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 17687E7FFD13EAE01C3DC5C5C48C132422127A2A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20313531333338.roa
Signing time: Mon 22 Sep 2025 13:48:50 +0000
ROA not before: Mon 22 Sep 2025 13:43:50 +0000
ROA not after: Mon 21 Sep 2026 13:48:50 +0000
asID: 151338
IP address blocks: 194.31.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Oct 2025 12:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:68:7e:7f:fd:13:ea:e0:1c:3d:c5:c5:c4:8c:13:24:22:12:7a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 22 13:43:50 2025 GMT
Not After : Sep 21 13:48:50 2026 GMT
Subject: CN=700D84D3EC7FEA42FB43102AB1A3F499961D0A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:41:cc:f4:65:3e:84:95:cd:d5:d1:eb:95:
b3:4b:1d:7d:21:4b:f1:bd:c3:6c:23:92:62:a9:91:
2e:36:16:ca:ca:07:d1:95:0f:69:b8:fc:e7:64:06:
67:74:22:84:76:bd:29:c4:09:28:d2:af:4f:d7:4e:
cb:41:52:33:e3:71:d1:7e:d3:ee:80:d1:58:b4:ed:
6e:b0:15:e1:f8:e6:58:76:40:0e:f0:8b:99:ab:93:
84:fe:3c:38:84:3d:55:a3:80:f6:83:3d:58:dd:b3:
d7:7b:35:b3:0a:ac:1d:db:1a:36:32:b2:6b:4b:b8:
7a:ed:1f:5e:eb:29:94:db:79:8a:c5:dd:18:a1:a5:
dc:ac:6c:f7:47:94:ee:5e:a6:7b:73:e6:c8:70:ae:
c2:da:f8:4b:51:8d:4c:65:ff:6f:ac:8b:29:c3:cd:
22:68:8a:11:80:84:fc:42:66:de:dc:4e:6e:1c:aa:
59:80:39:06:e5:f5:bb:c9:13:aa:30:03:19:63:1d:
f0:1a:30:c1:36:f6:d8:ed:4a:e7:18:99:70:11:4e:
82:36:36:4c:e8:96:d6:d7:60:7a:50:12:06:aa:9f:
0f:31:91:94:69:cf:87:18:f4:c2:51:4b:cc:2d:ac:
cb:3a:dd:74:ee:4c:79:6b:3b:89:2e:15:da:75:33:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:84:D3:EC:7F:EA:42:FB:43:10:2A:B1:A3:F4:99:96:1D:0A:7E
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20313531333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.148.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2b:3b:db:81:10:84:0a:72:0e:b7:78:5a:f1:ed:6c:55:b2:
33:a9:6f:e1:dd:eb:82:dc:c3:94:1d:8d:a8:cc:5e:f8:8c:44:
48:34:cc:ff:24:18:fd:52:2e:78:6f:18:14:ea:e0:44:27:8e:
0b:64:8d:4b:9f:00:0a:29:6b:7d:cf:e5:4b:b9:55:42:e2:05:
38:23:69:d1:b8:31:02:60:ea:26:62:57:aa:78:b3:c8:8e:78:
23:a0:d7:b2:ad:be:a7:cc:bd:5a:b1:46:61:58:8b:53:44:a1:
bd:d5:b4:7b:10:33:d3:39:ab:f6:ac:d7:f4:24:d1:5d:a9:8a:
47:92:30:27:9b:30:0c:d8:45:0e:ec:b9:57:ba:28:61:42:4d:
b3:0f:c5:d9:ac:39:81:c6:d6:03:88:d5:b0:5e:6c:f1:45:ab:
5e:75:b9:8f:14:bc:f9:12:14:3e:13:58:5e:7d:5b:57:f5:2e:
c2:78:35:64:04:94:1d:41:f3:7d:21:79:15:a7:a3:cb:fd:d9:
1e:74:11:90:7a:b8:aa:60:4e:3e:0a:eb:a6:be:3c:42:c6:ea:
66:7c:03:f8:cd:84:9c:07:cc:fc:66:af:6a:c3:ab:58:21:8f:
fe:4a:b6:33:02:22:fe:6c:b4:fd:3c:a1:f0:3c:68:39:ea:18:
4d:d3:08:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:45:19 2025 by rpki-client