This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h4juO96BTcNJd1cYi-QKV1SzvJk.roa File: h4juO96BTcNJd1cYi-QKV1SzvJk.roa (raw, json) Hash identifier: CCxvar1pOSxnrI0pHw4JBnZYKjNzXE2sDZigsx9juLY= Subject key identifier: 87:88:EE:3B:DE:81:4D:C3:49:77:57:18:8B:E4:0A:57:54:B3:BC:99 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 01968A0E3AEA9EBCE2CADCCD362DC4EBC3D3 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h4juO96BTcNJd1cYi-QKV1SzvJk.roa Signing time: Thu 01 May 2025 04:15:10 +0000 ROA not before: Thu 01 May 2025 04:15:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12586 IP address blocks: 5.83.128.0/19 maxlen: 32 5.83.128.0/20 maxlen: 32 5.83.136.0/24 maxlen: 24 5.83.151.0/24 maxlen: 32 5.83.156.0/24 maxlen: 24 5.83.157.0/24 maxlen: 24 5.83.158.0/24 maxlen: 24 5.175.128.0/24 maxlen: 32 5.175.129.0/24 maxlen: 32 5.175.130.0/24 maxlen: 32 5.175.131.0/24 maxlen: 32 5.175.133.0/24 maxlen: 32 5.175.143.0/24 maxlen: 24 5.175.218.0/24 maxlen: 32 5.175.219.0/24 maxlen: 32 5.175.220.0/24 maxlen: 24 5.175.225.0/24 maxlen: 32 5.175.226.0/24 maxlen: 32 5.175.227.0/24 maxlen: 32 5.175.228.0/24 maxlen: 32 5.175.229.0/24 maxlen: 32 5.175.230.0/24 maxlen: 32 5.175.231.0/24 maxlen: 32 5.175.232.0/24 maxlen: 32 5.175.235.0/24 maxlen: 32 5.175.240.0/24 maxlen: 32 5.175.241.0/24 maxlen: 32 5.175.242.0/24 maxlen: 32 5.175.243.0/24 maxlen: 32 5.175.244.0/24 maxlen: 32 5.175.251.0/24 maxlen: 32 5.175.252.0/24 maxlen: 32 5.175.253.0/24 maxlen: 32 5.175.254.0/24 maxlen: 32 5.175.255.0/24 maxlen: 32 5.230.0.0/15 maxlen: 32 5.230.6.0/24 maxlen: 32 5.230.11.0/24 maxlen: 32 5.230.102.0/24 maxlen: 32 5.230.224.0/24 maxlen: 32 5.231.24.0/24 maxlen: 24 5.231.43.0/24 maxlen: 24 5.231.48.0/24 maxlen: 24 5.231.49.0/24 maxlen: 24 5.231.50.0/24 maxlen: 24 5.231.51.0/24 maxlen: 24 5.231.52.0/24 maxlen: 24 5.231.53.0/24 maxlen: 24 5.231.104.0/24 maxlen: 24 5.231.111.0/24 maxlen: 24 5.231.114.0/24 maxlen: 24 5.231.125.0/24 maxlen: 24 5.231.232.0/24 maxlen: 24 5.231.233.0/24 maxlen: 24 5.231.234.0/24 maxlen: 24 5.231.254.0/24 maxlen: 24 77.90.0.0/18 maxlen: 32 77.90.21.0/24 maxlen: 24 83.243.80.0/21 maxlen: 32 85.93.0.0/19 maxlen: 32 85.93.1.0/24 maxlen: 24 85.93.12.0/24 maxlen: 24 85.93.15.0/24 maxlen: 24 85.118.160.0/21 maxlen: 32 87.239.128.0/21 maxlen: 32 89.106.64.0/19 maxlen: 32 89.106.94.0/24 maxlen: 24 89.144.0.0/18 maxlen: 32 89.144.6.0/24 maxlen: 24 89.144.7.0/24 maxlen: 24 89.144.17.0/24 maxlen: 24 89.144.18.0/24 maxlen: 24 89.144.21.0/24 maxlen: 24 89.144.38.0/24 maxlen: 24 89.144.46.0/24 maxlen: 24 89.144.47.0/24 maxlen: 24 89.144.48.0/24 maxlen: 24 89.144.49.0/24 maxlen: 24 89.144.50.0/24 maxlen: 24 89.144.51.0/24 maxlen: 24 89.144.52.0/24 maxlen: 24 89.144.53.0/24 maxlen: 24 89.144.54.0/24 maxlen: 24 89.144.55.0/24 maxlen: 24 89.144.58.0/24 maxlen: 24 89.144.59.0/24 maxlen: 24 94.103.160.0/20 maxlen: 32 94.249.128.0/17 maxlen: 32 94.249.212.0/24 maxlen: 24 94.249.214.0/24 maxlen: 24 94.249.215.0/24 maxlen: 24 95.215.32.0/22 maxlen: 32 178.18.144.0/20 maxlen: 32 185.13.156.0/22 maxlen: 32 185.13.159.0/24 maxlen: 24 185.47.140.0/24 maxlen: 32 185.47.141.0/24 maxlen: 32 185.47.142.0/24 maxlen: 24 185.121.71.0/24 maxlen: 32 193.28.251.0/24 maxlen: 32 195.110.14.0/23 maxlen: 32 217.69.160.0/20 maxlen: 32 217.69.167.0/24 maxlen: 24 217.69.170.0/24 maxlen: 24 2a00:12d8::/29 maxlen: 128 2a00:19d0::/29 maxlen: 128 2a00:cdc0::/32 maxlen: 128 2a01:bd40::/29 maxlen: 128 2a02:7a0::/29 maxlen: 128 2a02:2fc0::/29 maxlen: 128 2a02:2fc0::/48 maxlen: 48 2a02:2fc0:1::/48 maxlen: 48 Validation: Failed, certificate revoked on Thu 01 May 2025 12:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:8a:0e:3a:ea:9e:bc:e2:ca:dc:cd:36:2d:c4:eb:c3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: May 1 04:15:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8788ee3bde814dc3497757188be40a5754b3bc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:d6:c5:c3:c7:4d:d6:bc:6d:fa:d3:73:5f: 87:63:8b:d2:08:f2:cb:8b:92:ed:6f:fa:3a:a9:d8: 01:b1:df:9b:3c:2e:53:9a:1d:87:48:cb:db:b9:6e: 59:d7:9e:b2:ee:f5:98:74:a1:2a:3c:b9:53:b5:c3: 96:ae:25:9a:9c:5a:bd:7a:bf:28:a5:ec:6b:a1:37: 3a:70:87:93:ee:45:6b:b9:aa:5b:58:98:4a:eb:c7: 96:e8:7c:52:bc:ca:e0:93:0c:ad:e3:78:41:47:ba: f6:b3:ae:0b:08:7d:af:46:97:51:da:d4:db:3f:39: 31:b4:b9:7c:7e:8e:95:b2:7c:66:76:ef:97:a7:17: dd:4a:9f:2e:b9:fc:0c:64:03:16:28:d0:c2:6c:89: 70:41:89:4c:79:07:51:7a:a2:50:f9:85:6d:2d:24: 25:a0:0d:46:bd:f5:8c:67:aa:da:e7:0b:4f:c0:1d: 51:f9:34:f6:1c:61:96:4d:d4:a2:f8:c5:6d:64:a6: bc:d0:a9:1c:d5:c9:11:27:52:85:fb:41:36:ec:8e: 3f:fc:22:3e:08:df:b5:70:18:e0:cd:4c:cf:26:84: b3:7d:5e:e7:04:06:7b:61:12:f2:6f:ac:32:2b:ec: 49:20:b5:cb:97:2d:35:40:46:23:8c:37:c6:cf:33: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:88:EE:3B:DE:81:4D:C3:49:77:57:18:8B:E4:0A:57:54:B3:BC:99 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h4juO96BTcNJd1cYi-QKV1SzvJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.128.0/19 5.175.128.0/22 5.175.133.0/24 5.175.143.0/24 5.175.218.0-5.175.220.255 5.175.225.0-5.175.232.255 5.175.235.0/24 5.175.240.0-5.175.244.255 5.175.251.0-5.175.255.255 5.230.0.0/15 77.90.0.0/18 83.243.80.0/21 85.93.0.0/19 85.118.160.0/21 87.239.128.0/21 89.106.64.0/19 89.144.0.0/18 94.103.160.0/20 94.249.128.0/17 95.215.32.0/22 178.18.144.0/20 185.13.156.0/22 185.47.140.0-185.47.142.255 185.121.71.0/24 193.28.251.0/24 195.110.14.0/23 217.69.160.0/20 IPv6: 2a00:12d8::/29 2a00:19d0::/29 2a00:cdc0::/32 2a01:bd40::/29 2a02:7a0::/29 2a02:2fc0::/29 Signature Algorithm: sha256WithRSAEncryption 22:e9:93:d9:ae:5d:da:f2:08:54:6c:bf:15:2e:6c:ac:14:bb: 38:ad:3d:9b:a4:5b:c4:31:6e:f5:99:00:52:8a:56:9c:7d:11: 65:3e:bc:88:7e:35:a2:09:13:56:91:c2:0d:eb:40:c2:65:a6: de:bb:71:30:27:27:bc:84:26:6f:0d:48:68:9c:73:ff:33:d1: 6e:db:72:6d:0c:68:87:7d:e1:7b:0c:b5:4d:81:a1:e9:fa:be: 6c:93:d1:d8:1f:05:1f:b6:5c:df:8d:63:8e:87:37:d7:35:e1: 83:ca:3c:4a:d8:63:ff:da:71:fe:84:ae:3a:85:b8:f3:ea:8c: 2e:54:a1:3c:8a:b5:5e:c4:e0:0f:64:aa:76:4c:48:63:3f:e7: a9:52:f6:b0:99:d1:dd:13:dc:e0:3e:07:be:77:ac:0b:5a:b5: 21:f2:b0:5f:06:60:e1:c0:62:a9:fa:55:44:9a:79:aa:0d:a2: b3:84:48:ba:5f:c8:f3:7c:cd:af:c2:e7:c9:e3:9a:37:78:c7: e2:ae:c5:36:a7:d0:4a:ce:59:eb:45:dc:e7:e3:74:7b:81:0b: 81:67:fc:6b:89:2a:e1:80:4a:51:5d:35:6f:94:8c:f6:40:9c: d7:ac:66:c6:dd:4f:1b:1e:63:55:8e:33:bd:cf:f5:57:fb:ee: 8d:b0:33:3a -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZaKDjrqnrziytzNNi3E68PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNTAxMDQxNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzg4ZWUzYmRlODE0ZGMzNDk3NzU3MTg4YmU0MGE1NzU0YjNiYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnifWxcPHTda8bfrTc1+HY4vSCPLL i5Ltb/o6qdgBsd+bPC5Tmh2HSMvbuW5Z156y7vWYdKEqPLlTtcOWriWanFq9er8o pexroTc6cIeT7kVruapbWJhK68eW6HxSvMrgkwyt43hBR7r2s64LCH2vRpdR2tTb PzkxtLl8fo6Vsnxmdu+XpxfdSp8uufwMZAMWKNDCbIlwQYlMeQdReqJQ+YVtLSQl oA1GvfWMZ6ra5wtPwB1R+TT2HGGWTdSi+MVtZKa80Kkc1ckRJ1KF+0E27I4//CI+ CN+1cBjgzUzPJoSzfV7nBAZ7YRLyb6wyK+xJILXLly01QEYjjDfGzzNFfwIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFIeI7jvegU3DSXdXGIvkCldUs7yZMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaDRqdU85NkJUY05KZDFjWWktUUtWMVN6dkprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBGQYIKwYBBQUHAQcBAf8EggEIMIIBBDCBzwQCAAEwgcgD BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48wDAMEAQWv2gMEAAWv3DAMAwQABa/hAwQA Ba/oAwQABa/rMAwDBAQFr/ADBAAFr/QwCwMEAAWv+wMDBAWgAwMBBeYDBAZNWgAD BANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6ADBAde+YAD BAJf1yADBASyEpADBAK5DZwwDAMEArkvjAMEALkvjgMEALl5RwMEAMEc+wMEAcNu DgMEBNlFoDAwBAIAAjAqAwUDKgAS2AMFAyoAGdADBQAqAM3AAwUDKgG9QAMFAyoC B6ADBQMqAi/AMA0GCSqGSIb3DQEBCwUAA4IBAQAi6ZPZrl3a8ghUbL8VLmysFLs4 rT2bpFvEMW71mQBSilacfRFlPryIfjWiCRNWkcIN60DCZabeu3EwJye8hCZvDUho nHP/M9Fu23JtDGiHfeF7DLVNgaHp+r5sk9HYHwUftlzfjWOOhzfXNeGDyjxK2GP/ 2nH+hK46hbjz6owuVKE8irVexOAPZKp2TEhjP+epUvawmdHdE9zgPge+d6wLWrUh 8rBfBmDhwGKp+lVEmnmqDaKzhEi6X8jzfM2vwufJ45o3eMfirsU2p9BKzlnrRdzn 43R7gQuBZ/xriSrhgEpRXTVvlIz2QJzXrGbG3U8bHmNVjjO9z/VX++6NsDM6 -----END CERTIFICATE-----Generated at Wed Dec 24 16:41:27 2025 by rpki-client