This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K0k5HLYhm1pk5sN2Z-YXWoOud2E.roa File: K0k5HLYhm1pk5sN2Z-YXWoOud2E.roa (raw, json) Hash identifier: YcpTzN5NZg8ExfgEqFZhw9XXrXsCI7EDIzXfjdNXmR0= Subject key identifier: 2B:49:39:1C:B6:21:9B:5A:64:E6:C3:76:67:E6:17:5A:83:AE:77:61 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019604297D0AB4792F58060E2F596EDDBBF3 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K0k5HLYhm1pk5sN2Z-YXWoOud2E.roa Signing time: Sat 05 Apr 2025 04:15:49 +0000 ROA not before: Sat 05 Apr 2025 04:15:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12586 IP address blocks: 5.83.128.0/19 maxlen: 32 5.83.128.0/20 maxlen: 32 5.83.136.0/24 maxlen: 24 5.83.139.0/24 maxlen: 24 5.83.151.0/24 maxlen: 32 5.83.156.0/24 maxlen: 24 5.83.157.0/24 maxlen: 24 5.175.128.0/24 maxlen: 32 5.175.129.0/24 maxlen: 32 5.175.130.0/24 maxlen: 32 5.175.131.0/24 maxlen: 32 5.175.133.0/24 maxlen: 32 5.175.143.0/24 maxlen: 24 5.175.218.0/24 maxlen: 32 5.175.219.0/24 maxlen: 32 5.175.220.0/24 maxlen: 24 5.175.225.0/24 maxlen: 32 5.175.226.0/24 maxlen: 32 5.175.227.0/24 maxlen: 32 5.175.228.0/24 maxlen: 32 5.175.229.0/24 maxlen: 32 5.175.230.0/24 maxlen: 32 5.175.231.0/24 maxlen: 32 5.175.232.0/24 maxlen: 32 5.175.235.0/24 maxlen: 32 5.175.237.0/24 maxlen: 24 5.175.239.0/24 maxlen: 24 5.175.240.0/24 maxlen: 32 5.175.241.0/24 maxlen: 32 5.175.242.0/24 maxlen: 32 5.175.243.0/24 maxlen: 32 5.175.244.0/24 maxlen: 32 5.175.251.0/24 maxlen: 32 5.175.252.0/24 maxlen: 32 5.175.253.0/24 maxlen: 32 5.175.254.0/24 maxlen: 32 5.175.255.0/24 maxlen: 32 5.230.0.0/15 maxlen: 32 5.230.6.0/24 maxlen: 32 5.230.11.0/24 maxlen: 32 5.230.102.0/24 maxlen: 32 5.230.224.0/24 maxlen: 32 5.231.24.0/24 maxlen: 24 5.231.104.0/24 maxlen: 24 5.231.232.0/24 maxlen: 24 77.90.0.0/18 maxlen: 32 77.90.7.0/24 maxlen: 24 77.90.18.0/24 maxlen: 24 77.90.21.0/24 maxlen: 24 77.90.38.0/24 maxlen: 24 83.243.80.0/21 maxlen: 32 85.93.0.0/19 maxlen: 32 85.93.12.0/24 maxlen: 24 85.93.15.0/24 maxlen: 24 85.93.20.0/24 maxlen: 32 85.118.160.0/21 maxlen: 32 85.118.162.0/24 maxlen: 24 87.239.128.0/21 maxlen: 32 87.239.130.0/24 maxlen: 24 89.106.64.0/19 maxlen: 32 89.106.92.0/24 maxlen: 24 89.106.93.0/24 maxlen: 24 89.106.94.0/24 maxlen: 24 89.106.95.0/24 maxlen: 24 89.144.0.0/18 maxlen: 32 89.144.21.0/24 maxlen: 24 89.144.22.0/24 maxlen: 24 89.144.38.0/24 maxlen: 24 89.144.41.0/24 maxlen: 24 94.103.160.0/20 maxlen: 32 94.103.163.0/24 maxlen: 24 94.103.164.0/24 maxlen: 24 94.103.166.0/24 maxlen: 24 94.249.128.0/17 maxlen: 32 94.249.153.0/24 maxlen: 24 94.249.158.0/24 maxlen: 24 94.249.212.0/24 maxlen: 24 94.249.214.0/24 maxlen: 24 95.215.32.0/22 maxlen: 32 178.18.144.0/20 maxlen: 32 178.18.151.0/24 maxlen: 32 185.13.156.0/22 maxlen: 32 185.13.159.0/24 maxlen: 24 185.47.140.0/24 maxlen: 32 185.47.141.0/24 maxlen: 32 185.47.143.0/24 maxlen: 24 185.121.69.0/24 maxlen: 24 185.121.71.0/24 maxlen: 32 193.28.251.0/24 maxlen: 32 195.110.14.0/23 maxlen: 32 217.69.160.0/20 maxlen: 32 217.69.167.0/24 maxlen: 24 217.69.170.0/24 maxlen: 24 2a00:12d8::/29 maxlen: 128 2a00:19d0::/29 maxlen: 128 2a00:cdc0::/32 maxlen: 128 2a01:bd40::/29 maxlen: 128 2a02:7a0::/29 maxlen: 128 2a02:2fc0::/29 maxlen: 128 2a02:2fc0::/48 maxlen: 48 2a02:2fc0:1::/48 maxlen: 48 Validation: Failed, certificate revoked on Sat 05 Apr 2025 05:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:04:29:7d:0a:b4:79:2f:58:06:0e:2f:59:6e:dd:bb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Apr 5 04:15:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2b49391cb6219b5a64e6c37667e6175a83ae7761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:fe:ec:dd:ab:4a:ce:87:d9:dc:c8:ba:39: 5d:7e:de:06:fe:22:c1:53:ea:80:09:6c:bc:ec:3e: cc:32:05:da:0b:99:16:83:ce:7c:c7:61:44:19:05: 71:39:71:c7:04:1f:35:4f:ac:b9:19:d2:fc:a1:15: a6:5e:25:19:9f:f8:77:e1:18:a4:5b:f8:02:41:fd: c2:b4:36:e2:86:3b:ab:e2:cd:62:6a:13:5c:12:05: 50:b1:15:5d:92:06:8e:26:e5:3d:a2:a6:04:1d:37: 76:31:4d:26:69:78:fe:66:f1:d5:2d:4f:73:83:01: f1:48:30:b7:be:18:3a:6b:7c:e8:62:68:a0:3f:aa: 35:85:1a:dc:13:50:70:69:6b:a5:b6:0c:45:06:c0: 9d:7e:c6:6e:53:ed:79:68:ce:d6:cb:02:83:81:32: f0:f6:95:49:13:4a:50:06:65:d0:5c:ee:66:8f:6b: 7c:20:65:83:e1:42:bf:af:b1:ca:99:5f:ca:6f:6a: c3:f5:f3:00:45:27:6e:b0:b1:0a:1f:63:81:72:c6: f5:68:cd:c5:54:eb:9d:82:c4:48:be:a2:92:30:5d: 44:e3:fa:e3:b7:5d:3a:e2:4f:e1:58:13:17:d5:90: 8e:83:c2:b3:38:e0:51:ca:df:3c:71:ec:8e:b8:29: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:49:39:1C:B6:21:9B:5A:64:E6:C3:76:67:E6:17:5A:83:AE:77:61 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K0k5HLYhm1pk5sN2Z-YXWoOud2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.128.0/19 5.175.128.0/22 5.175.133.0/24 5.175.143.0/24 5.175.218.0-5.175.220.255 5.175.225.0-5.175.232.255 5.175.235.0/24 5.175.237.0/24 5.175.239.0-5.175.244.255 5.175.251.0-5.175.255.255 5.230.0.0/15 77.90.0.0/18 83.243.80.0/21 85.93.0.0/19 85.118.160.0/21 87.239.128.0/21 89.106.64.0/19 89.144.0.0/18 94.103.160.0/20 94.249.128.0/17 95.215.32.0/22 178.18.144.0/20 185.13.156.0/22 185.47.140.0/23 185.47.143.0/24 185.121.69.0/24 185.121.71.0/24 193.28.251.0/24 195.110.14.0/23 217.69.160.0/20 IPv6: 2a00:12d8::/29 2a00:19d0::/29 2a00:cdc0::/32 2a01:bd40::/29 2a02:7a0::/29 2a02:2fc0::/29 Signature Algorithm: sha256WithRSAEncryption 98:f1:75:a9:b5:81:6c:86:ac:d8:1a:43:3c:65:30:49:6e:d0: ba:68:70:07:b3:94:f2:59:0c:36:c5:e5:d5:0a:27:e4:37:74: 0f:f7:de:6b:54:84:8a:1a:2e:c0:f6:ee:f6:0a:dd:12:fd:e5: df:29:7d:1d:b0:44:00:eb:f2:0d:10:4d:05:9c:d1:a3:c2:5a: 00:6e:6b:39:5e:ef:5b:55:a9:1a:53:b6:c1:5b:19:6b:03:dd: 6c:6c:91:21:ac:7c:65:4b:7f:cd:b8:70:5e:bb:29:b2:ee:3c: f0:c8:4c:f1:45:a0:6a:1a:f6:a9:c8:ac:70:ab:7d:ea:d2:bc: 42:49:fa:85:48:73:5f:27:4a:9b:29:60:79:c0:a5:f7:f8:1f: 25:15:e3:81:f9:c4:bf:27:9e:f6:52:22:52:c3:50:2b:5e:35: a1:c3:0e:5b:83:43:25:36:09:7d:e4:63:f8:05:57:fa:23:11: 85:ed:f1:fb:c6:77:ce:47:42:bc:a7:f7:39:f9:ef:8e:9d:ed: 4d:b6:35:d3:5b:1c:0d:ee:b7:20:86:ba:6d:40:fc:8b:be:2f: 98:e0:f2:7f:10:b5:de:c7:eb:22:95:f2:55:d2:67:96:c0:ba: e6:44:1e:ff:e2:96:e5:6a:27:b4:ca:d1:75:bc:63:bd:32:3f: 8c:12:8a:c2 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZYEKX0KtHkvWAYOL1lu3bvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNDA1MDQxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjQ5MzkxY2I2MjE5YjVhNjRlNmMzNzY2N2U2MTc1YTgzYWU3NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJT+7N2rSs6H2dzIujldft4G/iLB U+qACWy87D7MMgXaC5kWg858x2FEGQVxOXHHBB81T6y5GdL8oRWmXiUZn/h34Rik W/gCQf3CtDbihjur4s1iahNcEgVQsRVdkgaOJuU9oqYEHTd2MU0maXj+ZvHVLU9z gwHxSDC3vhg6a3zoYmigP6o1hRrcE1BwaWultgxFBsCdfsZuU+15aM7WywKDgTLw 9pVJE0pQBmXQXO5mj2t8IGWD4UK/r7HKmV/Kb2rD9fMARSdusLEKH2OBcsb1aM3F VOudgsRIvqKSMF1E4/rjt1064k/hWBMX1ZCOg8KzOOBRyt88ceyOuCk/+wIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFCtJORy2IZtaZObDdmfmF1qDrndhMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvSzBrNUhMWWhtMXBrNXNOMlotWVhXb091ZDJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCB2QQCAAEwgdID BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48wDAMEAQWv2gMEAAWv3DAMAwQABa/hAwQA Ba/oAwQABa/rAwQABa/tMAwDBAAFr+8DBAAFr/QwCwMEAAWv+wMDBAWgAwMBBeYD BAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6AD BAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5L48DBAC5eUUDBAC5eUcD BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAmPF1qbWBbIas 2BpDPGUwSW7QumhwB7OU8lkMNsXl1Qon5Dd0D/fea1SEihouwPbu9grdEv3l3yl9 HbBEAOvyDRBNBZzRo8JaAG5rOV7vW1WpGlO2wVsZawPdbGyRIax8ZUt/zbhwXrsp su488MhM8UWgahr2qciscKt96tK8Qkn6hUhzXydKmylgecCl9/gfJRXjgfnEvyee 9lIiUsNQK141ocMOW4NDJTYJfeRj+AVX+iMRhe3x+8Z3zkdCvKf3Ofnvjp3tTbY1 01scDe63IIa6bUD8i74vmODyfxC13sfrIpXyVdJnlsC65kQe/+KW5WontMrRdbxj vTI/jBKKwg== -----END CERTIFICATE-----Generated at Thu Dec 25 19:53:02 2025 by rpki-client