This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ElaDhlljHMORx9rd1vzLsZpyLYE.roa File: ElaDhlljHMORx9rd1vzLsZpyLYE.roa (raw, json) Hash identifier: nRNn80BsiHRQ4qf4y1uycZfATQIOq54tpl+lq1tgp7o= Subject key identifier: 12:56:83:86:59:63:1C:C3:91:C7:DA:DD:D6:FC:CB:B1:9A:72:2D:81 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 01951DACDDFF93E9F8D3D124C4951A040487 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ElaDhlljHMORx9rd1vzLsZpyLYE.roa Signing time: Wed 19 Feb 2025 10:07:03 +0000 ROA not before: Wed 19 Feb 2025 10:07:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 185.209.38.0/24 maxlen: 24 185.209.73.0/24 maxlen: 24 185.210.235.0/24 maxlen: 24 185.218.20.0/24 maxlen: 24 185.222.29.0/24 maxlen: 24 185.222.30.0/24 maxlen: 24 185.226.107.0/24 maxlen: 24 185.246.112.0/24 maxlen: 24 193.58.146.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 19 Feb 2025 11:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:1d:ac:dd:ff:93:e9:f8:d3:d1:24:c4:95:1a:04:04:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Feb 19 10:07:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1256838659631cc391c7daddd6fccbb19a722d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d7:f4:0c:ac:60:9a:80:10:67:21:bf:7c:d2: 3b:ef:9c:8b:02:03:cc:92:94:1e:44:b5:c2:ce:01: 43:e8:23:bd:31:83:2f:34:be:e1:c4:21:a7:84:36: 23:6a:2c:a6:96:95:48:ad:67:7e:d5:13:03:97:9d: 53:89:53:91:2d:7b:bc:46:9a:75:b0:80:eb:dd:4b: e0:d7:25:93:c6:95:d1:d0:67:b7:f2:4e:2c:fd:fc: 92:03:b1:af:e3:29:cf:6e:74:78:b9:bc:49:83:d5: fb:49:4c:36:8d:79:59:f7:46:41:59:3d:3e:41:07: 61:5a:6e:55:af:f2:e8:f0:06:bc:39:f7:d6:8d:23: a7:d2:dc:63:8a:4d:3e:1d:44:be:30:0a:a9:a9:d5: a5:0c:1a:53:86:e6:f9:be:20:98:09:c5:f1:df:1f: a2:ab:e4:05:ce:70:92:d9:c0:a6:da:27:db:17:a3: 3c:5d:97:8d:27:eb:1b:bf:db:5e:b7:88:04:e3:aa: 8b:a3:04:bd:4e:94:55:47:9c:f5:47:48:0f:7d:b9: f1:b3:56:6e:05:fb:7a:41:55:7a:18:1e:f8:98:b1: 96:ec:bb:45:70:9f:de:5b:d9:ce:78:e0:85:fa:36: 66:0a:e1:90:01:b3:11:f2:61:5e:9f:42:02:93:c7: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:56:83:86:59:63:1C:C3:91:C7:DA:DD:D6:FC:CB:B1:9A:72:2D:81 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ElaDhlljHMORx9rd1vzLsZpyLYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.38.0/24 185.209.73.0/24 185.210.235.0/24 185.218.20.0/24 185.222.29.0-185.222.30.255 185.226.107.0/24 185.246.112.0/24 193.58.146.0/24 Signature Algorithm: sha256WithRSAEncryption 77:25:b7:36:5f:11:f9:f8:13:16:bf:90:a4:a5:d8:dc:30:6c: bb:10:8c:d7:a7:9a:b0:61:94:26:a2:2a:98:d4:5a:0b:7d:f1: ef:46:9c:60:4a:fb:2e:b3:a1:a2:83:13:be:df:de:a0:24:17: 6e:43:21:f0:3b:15:f8:1f:12:76:3e:64:ce:04:c7:92:02:b0: 75:bd:bc:f1:ea:6e:1e:45:d9:e4:f5:e5:f7:c0:14:3b:b7:21: 85:ed:f4:71:14:4b:08:ff:31:a7:93:5d:10:a7:ac:6f:ff:13: ad:51:23:45:27:82:64:d3:cd:a6:55:1b:0e:47:d8:9a:e6:b5: 75:1e:89:d0:1c:bb:1c:82:49:e3:fe:d0:cc:12:a7:fb:f4:cc: 2b:ca:c3:7d:da:e9:b6:ab:78:6d:ac:b5:e5:a8:7e:86:31:ff: 2c:3d:4a:55:44:89:7a:7f:a7:b9:98:5c:c7:19:d0:d0:a5:60: 1e:b4:23:22:eb:d1:37:e0:0a:da:8b:06:a8:15:ed:cd:7e:a8: 39:d9:71:d9:06:51:32:e2:65:4f:7f:3d:b3:ea:05:a5:d6:24: 94:db:d4:7d:47:bf:e2:b2:0a:d0:cf:68:6a:db:38:3f:2c:21: 09:1b:67:77:3c:e2:a4:b5:d7:e4:b4:d0:c1:fa:db:c1:17:1e: a4:a0:c6:b6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZUdrN3/k+n409EkxJUaBASHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUwMjE5MTAwNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjU2ODM4NjU5NjMxY2MzOTFjN2RhZGRkNmZjY2JiMTlhNzIyZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tf0DKxgmoAQZyG/fNI775yLAgPM kpQeRLXCzgFD6CO9MYMvNL7hxCGnhDYjaiymlpVIrWd+1RMDl51TiVORLXu8Rpp1 sIDr3Uvg1yWTxpXR0Ge38k4s/fySA7Gv4ynPbnR4ubxJg9X7SUw2jXlZ90ZBWT0+ QQdhWm5Vr/Lo8Aa8OffWjSOn0txjik0+HUS+MAqpqdWlDBpThub5viCYCcXx3x+i q+QFznCS2cCm2ifbF6M8XZeNJ+sbv9tet4gE46qLowS9TpRVR5z1R0gPfbnxs1Zu Bft6QVV6GB74mLGW7LtFcJ/eW9nOeOCF+jZmCuGQAbMR8mFen0ICk8ctSQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFBJWg4ZZYxzDkcfa3db8y7Gaci2BMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvRWxhRGhsbGpITU9SeDlyZDF2ekxzWnB5TFlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAudEmAwQA udFJAwQAudLrAwQAudoUMAwDBAC53h0DBAC53h4DBAC54msDBAC59nADBADBOpIw DQYJKoZIhvcNAQELBQADggEBAHcltzZfEfn4Exa/kKSl2NwwbLsQjNenmrBhlCai KpjUWgt98e9GnGBK+y6zoaKDE77f3qAkF25DIfA7FfgfEnY+ZM4Ex5ICsHW9vPHq bh5F2eT15ffAFDu3IYXt9HEUSwj/MaeTXRCnrG//E61RI0UngmTTzaZVGw5H2Jrm tXUeidAcuxyCSeP+0MwSp/v0zCvKw33a6bareG2steWofoYx/yw9SlVEiXp/p7mY XMcZ0NClYB60IyLr0TfgCtqLBqgV7c1+qDnZcdkGUTLiZU9/PbPqBaXWJJTb1H1H v+KyCtDPaGrbOD8sIQkbZ3c84qS11+S00MH628EXHqSgxrY= -----END CERTIFICATE-----Generated at Mon Dec 15 20:13:04 2025 by rpki-client