This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/DSvDQlSccEopEFnz-hiezGWPtHI.roa
File: DSvDQlSccEopEFnz-hiezGWPtHI.roa (raw, json)
Hash identifier: wwYvF9a76xjXR2ukcpwEU1S5s2Amt45a8L9VuXsmeg8=
Subject key identifier: 0D:2B:C3:42:54:9C:70:4A:29:10:59:F3:FA:18:9E:CC:65:8F:B4:72
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 0196191D49A492BF1317FD3C3DE72D8B1960
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/DSvDQlSccEopEFnz-hiezGWPtHI.roa
Signing time: Wed 09 Apr 2025 05:54:31 +0000
ROA not before: Wed 09 Apr 2025 05:54:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.211.135.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Apr 2025 05:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:1d:49:a4:92:bf:13:17:fd:3c:3d:e7:2d:8b:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Apr 9 05:54:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2bc342549c704a291059f3fa189ecc658fb472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:56:f8:6d:e1:b6:15:6d:b1:4c:a6:79:f5:
c3:a9:98:37:1a:05:ef:fa:ed:9e:24:ea:55:1f:b4:
de:25:fb:e0:01:f2:e7:e3:ad:c0:f2:68:5a:a2:48:
9f:34:5b:60:a6:93:26:6f:68:65:d4:f0:4b:7f:53:
a5:6e:2a:cd:6d:97:49:c7:47:e2:7f:56:ac:38:fb:
cc:42:6d:71:aa:72:bd:49:5a:48:9f:22:c2:bd:32:
5b:f1:90:b5:81:db:60:fe:5e:ae:a2:6b:50:85:62:
79:d3:f7:1a:4e:16:84:95:f3:cf:f5:a1:c4:67:54:
78:bf:2e:60:64:90:00:39:3c:37:85:ce:0c:c3:ef:
0f:18:e3:09:73:ae:e1:b2:f3:22:96:e9:91:b3:f2:
70:05:96:11:44:2f:dc:c3:c9:d4:43:df:2b:03:49:
60:b8:76:b9:3d:d2:3e:31:d3:c1:ed:33:35:fe:ee:
01:26:0f:6e:1e:52:df:a8:2f:54:2b:19:cd:86:c9:
5e:01:7c:ef:96:9e:d7:c8:98:fa:06:a5:ac:a6:1e:
dc:59:7f:f9:08:c0:f1:bb:2a:9c:88:bf:e4:aa:8a:
07:fc:7c:55:4e:af:62:f0:0f:05:c9:3f:91:fb:09:
c8:bd:31:cb:6d:2f:af:4b:13:36:76:7b:0d:b2:67:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:C3:42:54:9C:70:4A:29:10:59:F3:FA:18:9E:CC:65:8F:B4:72
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/DSvDQlSccEopEFnz-hiezGWPtHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f2:5a:cc:36:95:f1:22:99:6f:af:ab:66:77:07:de:e5:a8:
08:12:ae:9a:76:b3:34:c8:18:0f:37:7f:8e:53:63:ba:2c:5e:
45:d9:48:3c:e8:2e:70:89:a5:5c:f3:15:93:ce:3a:4d:63:9e:
75:02:d2:a9:20:e1:cb:5a:9e:97:13:03:a2:7f:c8:13:82:0b:
68:47:32:d3:5e:95:86:eb:3b:11:fe:2a:36:f7:cb:de:48:c7:
ce:ae:47:d3:fd:a0:5a:c0:c8:08:eb:a7:92:b0:b0:85:b3:51:
5f:eb:95:24:7c:ad:1b:ff:15:c9:4e:59:65:33:10:f2:d6:ae:
9e:83:03:b4:ba:d5:08:31:be:4a:4f:f6:e6:0b:9c:f0:a6:f4:
75:0d:7b:ef:ed:d9:9b:d1:56:b8:af:b1:25:88:f8:0d:e2:2a:
97:85:bb:6a:b3:75:18:e1:14:1d:e1:18:ab:26:8d:4c:bf:ab:
38:96:03:86:0e:01:5a:63:b2:29:78:fb:00:0a:0d:82:c7:f8:
33:02:d0:e9:71:ce:67:f4:82:fb:1c:ae:32:33:f4:68:1e:9b:
f8:9a:32:af:62:fb:8e:bb:44:65:e3:5b:fc:f0:29:ff:c3:82:
9a:ce:77:12:7c:b1:ce:69:fb:e4:2d:6c:14:c0:70:af:9b:aa:
4a:c9:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:32:14 2026 by rpki-client