This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2zValhZA9JE2pjPwlMaJ3HiHdzM.roa
File: 2zValhZA9JE2pjPwlMaJ3HiHdzM.roa (raw, json)
Hash identifier: hkrnhpXYw5VS4sXT5qdhetTWPWtxCNy+6sTtd/Uc1tI=
Subject key identifier: DB:35:5A:96:16:40:F4:91:36:A6:33:F0:94:C6:89:DC:78:87:77:33
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195EC14544EDC98362853C665A4716A277B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2zValhZA9JE2pjPwlMaJ3HiHdzM.roa
Signing time: Mon 31 Mar 2025 12:01:50 +0000
ROA not before: Mon 31 Mar 2025 12:01:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213641
IP address blocks: 5.231.252.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 04:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:14:54:4e:dc:98:36:28:53:c6:65:a4:71:6a:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 31 12:01:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db355a961640f49136a633f094c689dc78877733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:bd:4c:e5:0e:f2:c6:a6:0f:cb:41:09:e1:
b8:65:ec:10:6f:93:f3:92:97:e9:b3:4a:c2:eb:c3:
72:b4:2e:f0:13:c5:c8:08:d2:3f:14:3a:91:a1:34:
32:a3:21:29:31:fb:10:53:84:69:15:37:8d:c5:ad:
8a:b0:ac:fe:56:88:dd:a0:be:78:e5:2d:2f:91:59:
bb:91:4d:2d:c7:71:10:51:3e:21:a2:53:53:7e:8d:
6b:db:e1:14:1d:cc:e4:bb:3b:61:43:99:5d:1c:0e:
6b:6a:32:fc:15:14:6e:ef:b0:9e:1c:a4:d7:97:94:
cc:bd:85:2f:50:aa:85:9d:53:c4:49:52:03:cb:37:
1a:c4:f6:58:f2:b1:e5:45:aa:bc:6a:ed:4d:99:9b:
ad:a9:c7:81:22:89:7a:fd:3f:0f:35:9a:5d:6d:04:
c9:77:a7:84:fd:b8:18:4f:4b:13:55:54:f3:0f:a0:
e6:5c:a5:5f:bf:13:05:2f:e5:a5:52:9d:79:fe:9f:
e7:3c:4b:7f:a7:a6:27:d2:53:5a:7f:b3:a7:72:dd:
fb:5f:70:6e:81:36:c1:12:b5:83:3b:c9:8f:16:80:
42:c9:c1:c3:86:fc:2d:62:0e:32:88:11:a9:93:59:
b0:53:10:7f:84:5e:78:ed:36:53:e1:08:00:88:89:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:35:5A:96:16:40:F4:91:36:A6:33:F0:94:C6:89:DC:78:87:77:33
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2zValhZA9JE2pjPwlMaJ3HiHdzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.252.0/24
77.90.18.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a3:bf:3e:df:69:0e:69:b3:53:44:ec:1f:7a:5a:46:e1:0c:
d8:92:52:da:b5:fc:79:60:0b:2b:dc:0e:fd:e3:a1:b9:40:bc:
10:36:77:56:17:d2:3b:a8:cf:cd:d6:46:9b:0d:92:ac:ad:ec:
46:07:88:b5:8f:9b:c4:16:41:3f:99:4d:4d:63:55:c1:05:9a:
91:91:fd:b2:ad:02:20:9e:9f:56:a8:97:9f:ff:61:81:ec:52:
1b:10:ea:7e:6c:9d:3b:09:fe:00:71:2f:cf:c1:30:c9:8d:7f:
17:69:60:d9:64:2e:7e:a5:f1:a0:5f:29:94:51:e4:27:0b:f0:
bc:8f:ca:cd:c1:29:19:f9:69:22:d9:e4:f7:70:4b:bc:7c:df:
d4:fb:1a:55:44:d6:04:ba:16:95:65:95:4d:5f:11:c6:12:f4:
5a:a9:ea:ad:ab:71:e7:4e:1c:31:64:53:a6:6a:3e:b9:75:26:
a4:1d:0a:e1:23:49:6b:f1:3e:5a:d7:3b:2f:a5:c8:35:0a:18:
1f:eb:3f:e2:89:ec:2f:91:66:93:51:fe:22:27:30:d0:7d:b3:
c2:e0:00:53:af:4b:16:13:3d:11:87:9f:3b:ee:76:90:f8:2e:
e1:4d:4a:40:5f:82:44:bc:19:ae:3d:2e:9f:6c:0a:af:75:7a:
1f:8d:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:21:30 2025 by rpki-client