This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/He-gY2BeKNcmJUtDhl4Uggch9_o.roa
File: He-gY2BeKNcmJUtDhl4Uggch9_o.roa (raw, json)
Hash identifier: aPa3hmJi/xnWlOeU9OyFvDeMoGCzrO8sbbJ1YkQNZuI=
Subject key identifier: 1D:EF:A0:63:60:5E:28:D7:26:25:4B:43:86:5E:14:82:07:21:F7:FA
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019763928C366F04A65F3425C7AF2F99746E
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/He-gY2BeKNcmJUtDhl4Uggch9_o.roa
Signing time: Thu 12 Jun 2025 09:57:17 +0000
ROA not before: Thu 12 Jun 2025 09:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206305
IP address blocks: 2001:3182::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Jun 2025 12:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:92:8c:36:6f:04:a6:5f:34:25:c7:af:2f:99:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 09:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1defa063605e28d726254b43865e14820721f7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:b6:2f:59:a7:0d:50:fe:47:7e:9b:8c:3f:
ad:db:b0:09:7d:04:d7:a4:39:e3:97:91:e3:82:f4:
30:33:ba:98:5d:7d:e0:de:cc:1f:29:6f:98:8a:50:
55:19:2b:7d:64:23:72:90:16:34:9b:bc:0a:09:00:
c4:c6:45:24:7e:36:55:a2:11:4c:1c:5d:0b:b6:c6:
28:81:df:fb:83:af:10:9b:e6:67:98:46:97:c9:f6:
99:a6:6d:14:00:f9:1c:f1:c1:b8:b9:6e:6f:1f:b1:
82:75:26:78:da:00:17:6d:4d:90:70:68:9c:88:92:
84:b3:95:a0:a0:ea:59:3a:fc:69:e0:f6:ca:1e:42:
a5:6e:7c:c8:3e:cd:75:a2:de:b8:a7:86:de:e8:b4:
16:d2:45:36:ed:a6:fc:f1:dd:18:8c:08:1e:58:18:
c5:0c:e1:e8:8b:e7:d7:4f:11:f8:8b:68:b9:7c:bf:
9e:db:55:5e:aa:aa:4a:c7:a3:85:78:74:3e:29:22:
0b:26:3d:2d:64:40:04:50:e8:97:d3:7e:b8:f5:e0:
59:ad:64:6c:7e:94:82:6a:27:1d:82:65:91:fe:c7:
ef:74:06:2d:22:fa:9a:70:c9:b0:41:cf:b2:e4:8d:
1d:b5:82:b6:4f:84:6a:b3:d6:89:88:31:27:af:7c:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:A0:63:60:5E:28:D7:26:25:4B:43:86:5E:14:82:07:21:F7:FA
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/He-gY2BeKNcmJUtDhl4Uggch9_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3182::/32
Signature Algorithm: sha256WithRSAEncryption
77:eb:d4:03:cb:16:f7:6b:00:93:c9:47:cf:38:09:59:b7:30:
65:4b:ee:c4:57:a8:68:11:03:5e:54:aa:a3:22:59:d8:48:58:
71:96:8b:82:d7:8f:2c:e8:fa:7e:22:de:2f:6d:17:53:56:34:
b1:1e:60:00:48:72:d1:fc:fc:ce:fa:95:a0:a6:66:20:95:73:
59:e3:45:ab:07:3f:ad:d9:43:f0:d7:e3:ee:a5:27:20:09:87:
6a:24:9c:f7:48:86:b7:17:10:b5:38:9c:cd:9b:30:19:e5:4d:
67:f3:8e:18:1f:0b:96:a3:6a:fc:f6:3c:40:53:13:5c:a7:20:
5c:bd:06:aa:55:2c:32:20:90:2f:ea:b0:f7:c9:c3:bd:55:ab:
dd:fe:df:07:5d:f2:5f:15:b3:ca:c8:53:7a:c9:f8:2e:5f:33:
60:22:4d:13:d0:ac:dc:28:22:7f:3a:0a:cd:53:8f:84:49:0a:
14:35:db:ad:2c:cd:d4:be:27:72:48:cb:0f:13:77:e4:f2:b2:
23:bc:21:5e:eb:18:3b:60:45:04:b6:bf:6f:80:50:f4:32:b4:
76:cf:4f:cf:8c:64:53:67:c3:d8:b4:ad:fc:f8:55:9a:78:49:
5e:11:b3:a6:02:92:da:76:8e:4e:73:20:6e:ef:bf:83:86:61:
b2:78:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:38:01 2025 by rpki-client