This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ha4smyNMca6eKeNWC0SBTolBTeo.roa
File: Ha4smyNMca6eKeNWC0SBTolBTeo.roa (raw, json)
Hash identifier: 9bkWtR6a87KTb+3bLLiANkRbqCm46qonD9ctTKBKums=
Subject key identifier: 1D:AE:2C:9B:23:4C:71:AE:9E:29:E3:56:0B:44:81:4E:89:41:4D:EA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01975B066F9391A61421B23EEA80B804B4FD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ha4smyNMca6eKeNWC0SBTolBTeo.roa
Signing time: Tue 10 Jun 2025 18:07:17 +0000
ROA not before: Tue 10 Jun 2025 18:07:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 13:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:06:6f:93:91:a6:14:21:b2:3e:ea:80:b8:04:b4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 10 18:07:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dae2c9b234c71ae9e29e3560b44814e89414dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:90:e5:55:0c:90:c1:d0:2a:db:16:96:a2:
d2:a6:df:b7:30:cb:d5:85:ae:dc:52:df:1d:4e:f8:
8b:54:32:bd:ca:07:43:0c:4e:14:a3:e7:82:1f:a2:
27:b4:0d:fb:ea:00:2d:74:8f:80:6e:28:98:27:8e:
bb:ff:c0:3b:e9:d9:2b:43:ea:0b:b6:30:01:7e:67:
af:96:a1:68:78:85:c1:d0:38:fc:3b:3e:5b:6f:a6:
31:c4:8f:1d:2c:67:ab:31:b7:44:62:9b:3d:87:a8:
58:00:c4:54:c3:b9:60:7f:a4:e5:9e:84:48:3c:15:
60:97:1f:dc:30:03:fa:8e:71:e1:92:89:25:d3:5e:
9d:4b:55:49:5a:43:c0:6f:ff:3b:54:7c:a0:be:5b:
0d:d6:03:39:66:3c:9b:5b:1f:33:82:e2:a2:2f:4a:
c0:e6:33:e8:9f:23:70:1d:11:c3:c5:27:2c:36:f0:
65:d0:a5:9e:48:5e:37:ee:41:f0:e1:27:9e:57:95:
70:07:ca:48:e6:1a:65:d4:62:72:e1:63:d9:20:aa:
a6:bb:63:b7:c4:56:f0:47:bf:0f:6c:25:04:84:09:
02:11:24:76:58:1b:dc:28:df:50:b8:be:98:a7:15:
f1:a8:7f:f4:1a:20:d2:af:22:60:bb:71:73:1d:37:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:2C:9B:23:4C:71:AE:9E:29:E3:56:0B:44:81:4E:89:41:4D:EA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ha4smyNMca6eKeNWC0SBTolBTeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.30.0/23
163.5.59.0/24
163.5.89.0/24
163.5.109.0/24
163.5.112.0/24
163.5.121.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.201.0/24
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.221.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
20:db:2e:04:f6:58:d8:c7:c8:59:9f:c7:31:18:10:84:e2:23:
9d:eb:96:c3:98:6c:14:8f:43:cf:a4:03:5c:99:02:6b:ee:62:
46:95:83:58:11:5d:38:95:80:7c:b3:bd:40:48:fc:8e:42:36:
ee:5a:79:ab:8e:dd:39:08:2e:1e:f9:69:76:f0:07:ba:6d:f5:
66:8f:56:30:e2:19:ff:aa:68:4b:98:5b:4f:06:7f:e4:d2:ae:
ce:64:8f:bd:10:00:54:1a:2a:06:54:ef:e3:ed:a1:d6:3d:32:
b9:d9:d3:34:24:dc:18:f5:d2:03:e6:87:e9:f5:5e:09:45:3b:
2c:de:03:38:a8:56:f1:64:4f:09:47:ba:b2:ee:fc:68:a7:ca:
dd:83:e7:5e:2f:95:de:b8:ed:b6:b2:c6:a1:b3:18:3b:c4:29:
a4:a0:d3:9d:2c:36:8b:40:1e:82:09:54:a6:fc:3f:f0:5d:74:
19:d7:2d:c1:f9:be:fa:d2:15:c2:3d:0c:52:f4:27:61:9b:ce:
34:07:20:b8:2a:0d:b6:a3:b6:02:37:67:04:90:db:b7:1b:7b:
6c:98:a1:b6:52:c9:30:04:f3:85:26:08:bc:a8:a0:43:2c:49:
fc:27:2d:e8:5d:e6:5e:77:f8:d2:f5:0f:56:92:8f:27:8d:4f:
b6:90:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:05:57 2025 by rpki-client