This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/le2xs9zb3dTnH6p8b0i_K3j0Ojc.roa
File: le2xs9zb3dTnH6p8b0i_K3j0Ojc.roa (raw, json)
Hash identifier: /DkgUxAZA7gcgFpjBdLD1Y4L1fLaa8tL4t/SfZWoNDQ=
Subject key identifier: 95:ED:B1:B3:DC:DB:DD:D4:E7:1F:AA:7C:6F:48:BF:2B:78:F4:3A:37
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 019730079E4E07BF95F85E28F9EE438575F8
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/le2xs9zb3dTnH6p8b0i_K3j0Ojc.roa
Signing time: Mon 02 Jun 2025 09:44:54 +0000
ROA not before: Mon 02 Jun 2025 09:44:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198386
IP address blocks: 185.204.76.0/22 maxlen: 22
192.40.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:07:9e:4e:07:bf:95:f8:5e:28:f9:ee:43:85:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Jun 2 09:44:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95edb1b3dcdbddd4e71faa7c6f48bf2b78f43a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:9c:4f:df:5b:db:13:02:87:d1:9a:5d:8f:
30:d3:99:6b:12:a5:1c:90:7c:25:ba:80:08:7d:93:
89:7f:dc:9c:ac:bf:58:b5:fe:0f:6d:b5:05:b9:96:
61:38:71:fb:d0:aa:93:84:ae:e0:8a:ca:b6:05:b1:
92:01:ec:68:e8:10:d5:81:72:d1:76:2c:b9:83:e9:
63:79:87:d0:e4:6d:20:c5:8b:b8:f7:da:ab:3a:02:
61:e8:31:cc:e7:b5:c6:1f:10:71:b7:96:86:98:8b:
59:31:b3:92:97:34:2b:a3:61:9e:ee:7a:2c:b8:04:
b8:9b:fe:b2:ee:82:a2:6a:49:4a:e1:80:20:f0:22:
09:a6:3d:6e:56:74:38:fc:0b:27:64:d7:62:d0:32:
4e:74:e2:af:f9:7d:0d:04:35:2c:86:fb:22:14:aa:
59:7a:d4:d1:fc:55:14:0e:a1:94:ed:e0:f7:2d:56:
91:0a:a0:e4:b7:c3:76:83:fc:54:e5:b8:e1:14:db:
de:83:ad:1e:78:4a:78:a9:60:fc:7c:cf:11:7a:7f:
01:77:18:ec:cd:77:e1:e4:34:66:19:73:72:18:da:
71:d3:01:6f:9e:7b:35:16:1f:8f:bb:14:21:87:96:
60:4f:23:7e:69:09:8d:ea:04:65:fb:a6:13:49:24:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:ED:B1:B3:DC:DB:DD:D4:E7:1F:AA:7C:6F:48:BF:2B:78:F4:3A:37
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/le2xs9zb3dTnH6p8b0i_K3j0Ojc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.76.0/22
192.40.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:90:f8:2b:6d:ba:78:60:75:74:96:5a:2f:82:cf:5d:fb:05:
11:47:ea:1a:22:d8:49:bb:6d:14:8b:fa:3d:bd:19:2a:bb:df:
be:08:24:60:f5:a5:f3:c3:9c:2b:6c:9b:38:5b:ef:31:3f:32:
d8:46:4e:97:cc:f7:62:67:c0:9a:49:d7:1c:25:86:d9:6c:c8:
6c:fd:6d:2d:a9:65:75:37:3c:68:82:53:a3:36:42:ba:3d:10:
ab:7a:5e:ed:e5:9e:35:9e:25:a0:58:39:39:0f:d5:7f:5d:ae:
27:9f:47:98:c2:90:81:78:30:77:ad:1e:9a:aa:e5:c1:fa:73:
ab:ea:28:f6:c6:0d:0a:9b:60:9d:bb:83:f1:53:25:23:4b:8c:
80:5d:31:16:f7:a2:9e:54:bf:20:8d:5f:34:04:5a:7d:f9:99:
0f:3a:b2:31:06:b8:24:e3:22:1a:36:14:82:4a:ad:d7:bb:ca:
0b:3b:91:18:b1:59:3c:c3:4d:81:8a:70:8a:b6:f1:a7:d7:3e:
47:4f:fd:19:b5:68:36:a4:57:0d:bb:31:99:88:e6:fe:e9:15:
a4:2e:fc:2c:c5:28:a9:ad:53:46:41:ba:e1:8b:03:53:58:bb:
cd:43:68:ae:7b:ab:c2:a9:99:17:3e:70:99:dd:37:60:c5:de:
76:76:d9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:43:32 2025 by rpki-client