This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zyi23ZzTTw4ver7Vm8cm2aHMz80.roa
File: Zyi23ZzTTw4ver7Vm8cm2aHMz80.roa (raw, json)
Hash identifier: nIaDXJ1+KIFZzRY0qjGXg+nHB0jxD5aXxqg1Ds+DqXg=
Subject key identifier: 67:28:B6:DD:9C:D3:4F:0E:2F:7A:BE:D5:9B:C7:26:D9:A1:CC:CF:CD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019758F2C1530FD91FE5B83DB6D8C042E484
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zyi23ZzTTw4ver7Vm8cm2aHMz80.roa
Signing time: Tue 10 Jun 2025 08:26:33 +0000
ROA not before: Tue 10 Jun 2025 08:26:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
195.133.195.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 10 Jun 2025 12:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:f2:c1:53:0f:d9:1f:e5:b8:3d:b6:d8:c0:42:e4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 10 08:26:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6728b6dd9cd34f0e2f7abed59bc726d9a1cccfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:87:bd:2a:12:26:2f:18:28:13:2d:1e:f6:
03:ad:14:72:cf:78:32:d8:1f:45:f4:5f:46:1e:5c:
fe:e0:7a:d3:ea:b8:0d:44:16:22:05:6b:bd:db:14:
a9:ac:16:32:a1:b1:38:3e:c0:a6:6a:e4:a8:f4:c1:
63:5b:76:45:1d:92:4f:21:66:03:c1:86:ae:42:c7:
f0:20:98:b2:f5:f2:70:69:b4:5c:e5:c0:ee:3c:39:
e7:b4:2e:35:d4:f0:cc:4a:1e:60:01:9d:e3:4d:ea:
1d:f3:60:b5:e6:8b:20:54:37:5c:00:66:56:aa:71:
fb:3a:86:a5:c1:2d:90:66:dc:b1:a8:e5:61:5b:e1:
ee:9e:16:a2:6b:8d:27:74:d0:98:db:2e:a9:46:9a:
a3:02:94:42:f2:38:21:71:38:b9:dc:c5:5d:c1:75:
c3:15:a1:02:88:47:32:a7:d4:34:4b:ec:e5:bb:03:
50:43:38:26:6e:f7:29:f3:f2:dd:37:21:7b:07:94:
2c:35:2c:39:f0:bd:6f:79:5d:d8:76:a8:78:ce:bc:
ae:f1:7a:00:31:60:41:60:35:6e:90:5f:76:c7:7d:
05:81:83:d0:f4:b7:81:1b:cb:d3:dc:76:33:25:23:
d4:8a:f0:7d:2c:6e:c2:9b:9f:68:ea:b6:3d:33:a5:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:28:B6:DD:9C:D3:4F:0E:2F:7A:BE:D5:9B:C7:26:D9:A1:CC:CF:CD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zyi23ZzTTw4ver7Vm8cm2aHMz80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.206.0/24
194.58.155.0/24
194.87.53.0/24
194.87.119.0/24
194.87.169.0/24
194.87.179.0/24
194.87.228.0/24
194.135.24.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
195.133.195.0/24
212.192.241.0/24
212.193.0.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
69:b3:7c:8e:48:9d:b0:54:af:4b:6d:81:b8:71:1d:88:83:06:
1b:56:20:ee:db:30:a6:dd:a1:3a:27:40:28:6e:20:15:8d:8d:
a9:b5:02:a9:0a:d6:7d:47:69:96:be:e1:ca:1d:64:f7:cf:e1:
e5:7a:fd:99:4c:b4:4c:f5:a2:fb:79:a7:ff:09:6f:f5:4d:8f:
0d:b0:3a:ca:18:2c:43:e3:1c:c0:1b:a6:cc:e2:64:a2:60:65:
1c:b4:0b:ad:07:29:3c:3b:ce:0e:f1:70:f3:d1:8f:2c:be:74:
7e:89:b8:11:43:f2:76:b6:43:6d:cc:e4:0d:e1:dd:23:9e:76:
f4:43:89:50:2f:cb:5f:76:68:f1:cc:bb:79:10:a1:1d:68:75:
62:01:f3:ef:e8:36:9d:8b:1d:55:ce:e1:d0:86:db:7d:8f:33:
c6:b0:c9:e0:38:4c:d9:44:6f:6e:d2:87:30:57:f7:1e:d9:24:
5f:36:96:aa:65:eb:09:de:47:ad:34:96:e5:d3:8c:b0:94:f3:
55:de:aa:df:b0:d6:9e:43:95:ba:f0:00:33:5e:56:0e:8e:09:
1c:ba:35:d0:be:f8:d0:a2:26:5b:2c:1f:76:0f:df:6e:09:d6:
9b:1f:45:11:84:5d:26:81:ae:15:c8:3a:cf:82:9e:ec:ae:4c:
b2:c9:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 10:30:02 2025 by rpki-client