This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/hZBasgqglyhbUnC3ZEEW3YccTTU.roa File: hZBasgqglyhbUnC3ZEEW3YccTTU.roa (raw, json) Hash identifier: a/JkaaDnQKONNICUxDbMhbpTLbkk9nkMOwy1dtWKLIw= Subject key identifier: 85:90:5A:B2:0A:A0:97:28:5B:52:70:B7:64:41:16:DD:87:1C:4D:35 Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c Certificate serial: 0197367AA97995FD8550CFA7F036C0C08369 Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/hZBasgqglyhbUnC3ZEEW3YccTTU.roa Signing time: Tue 03 Jun 2025 15:48:17 +0000 ROA not before: Tue 03 Jun 2025 15:48:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15830 IP address blocks: 86.109.2.0/23 maxlen: 23 93.187.218.0/23 maxlen: 23 145.40.74.0/23 maxlen: 23 145.40.101.0/24 maxlen: 24 145.40.120.0/22 maxlen: 22 147.28.138.0/23 maxlen: 23 147.28.164.0/23 maxlen: 23 147.28.166.0/23 maxlen: 23 147.28.176.0/23 maxlen: 23 147.28.189.0/24 maxlen: 24 147.28.204.0/23 maxlen: 23 147.28.210.0/23 maxlen: 23 147.28.214.0/23 maxlen: 23 147.28.222.0/23 maxlen: 23 147.28.241.0/24 maxlen: 24 147.75.40.0/23 maxlen: 23 147.75.59.0/24 maxlen: 24 147.75.206.0/24 maxlen: 24 147.75.207.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 04 Jun 2025 21:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:36:7a:a9:79:95:fd:85:50:cf:a7:f0:36:c0:c0:83:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c Validity Not Before: Jun 3 15:48:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=85905ab20aa097285b5270b7644116dd871c4d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:63:00:ce:69:41:76:ed:94:6d:83:03:07: 2b:fd:ba:27:3b:5b:f7:af:3f:f6:0f:ca:75:9a:85: 53:89:0b:cc:d7:72:90:4b:7a:8b:73:24:96:cf:69: 91:60:ed:dd:03:d3:aa:6a:af:27:ca:a3:b3:fe:f2: 64:36:f9:59:4a:b0:0e:3a:1b:d4:00:09:e8:6a:85: 26:62:3e:be:1c:ec:5a:92:b1:fe:5d:50:a3:65:ab: 0e:6e:6a:8e:3b:0c:67:03:ce:62:a8:a5:93:5d:15: c0:db:09:52:8c:02:56:d8:fa:ac:6c:76:cc:ca:30: 31:f6:52:b2:57:f5:0e:a8:58:9e:b0:11:54:af:17: fa:48:a3:43:01:47:67:41:13:e6:a6:50:aa:7c:f9: a7:57:c8:c9:66:d0:d4:9f:b8:4b:a3:8e:54:e4:66: 05:30:5a:bf:cc:8d:b2:b1:f7:ef:66:8e:93:de:f4: 07:fe:86:4a:71:18:5c:b3:45:36:ab:83:5a:c4:a1: ce:03:0c:90:f3:64:10:2c:04:7d:cd:b5:e7:55:b5: 84:8b:e6:54:56:93:4b:1f:d5:06:74:fd:f2:61:03: 90:36:1e:ca:b2:59:db:14:86:4c:b1:81:ef:c1:10: 85:d2:f9:0e:6e:9a:44:23:f5:58:a7:ea:5e:f6:87: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:90:5A:B2:0A:A0:97:28:5B:52:70:B7:64:41:16:DD:87:1C:4D:35 X509v3 Authority Key Identifier: keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/hZBasgqglyhbUnC3ZEEW3YccTTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.2.0/23 93.187.218.0/23 145.40.74.0/23 145.40.101.0/24 145.40.120.0/22 147.28.138.0/23 147.28.164.0/22 147.28.176.0/23 147.28.189.0/24 147.28.204.0/23 147.28.210.0/23 147.28.214.0/23 147.28.222.0/23 147.28.241.0/24 147.75.40.0/23 147.75.59.0/24 147.75.206.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:57:53:e6:6e:e2:e1:90:35:9a:01:e0:01:4a:c2:d8:7d:b8: 16:74:66:db:94:6e:c2:2d:c9:25:55:f2:80:c0:61:92:a5:8b: b9:96:9e:b4:dc:10:02:c9:c2:d4:52:c9:5b:1a:0a:bc:3f:fc: 74:b6:56:94:dd:8b:eb:25:cd:36:9f:5e:bd:2d:9e:96:54:dc: d4:a4:64:75:42:b6:fe:5a:7f:6f:4c:82:6d:47:4e:6a:ef:25: 4b:ab:03:fe:6d:5b:fc:6e:a0:3a:21:93:95:d4:b8:0d:84:06: 14:49:18:60:47:29:a4:04:cc:b7:63:0b:f8:d9:dd:98:bf:52: 3a:db:a2:f5:0b:04:fa:c4:9b:e7:f5:c7:e4:b7:ca:ee:83:f0: 23:4c:08:e1:03:6a:32:4b:60:a3:d0:db:6e:53:87:dd:41:a5: 1f:91:3e:1e:8d:2c:9b:80:e0:9a:ab:d8:71:a7:29:13:8d:3f: 8a:84:e2:69:64:2a:b9:88:93:41:34:07:42:2b:65:fc:8e:a1: 9a:8b:be:31:fc:34:ec:b1:86:23:05:a9:01:6e:e1:4d:23:3c: 88:f2:63:35:59:eb:d6:e4:68:09:2f:e6:b8:72:5f:49:07:74: 19:83:80:1f:01:24:60:79:23:29:5f:84:11:7f:da:58:81:a6: 0b:55:9b:a1 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZc2eql5lf2FUM+n8DbAwINpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4 ZDRhNGMwHhcNMjUwNjAzMTU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTkwNWFiMjBhYTA5NzI4NWI1MjcwYjc2NDQxMTZkZDg3MWM0ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4INjAM5pQXbtlG2DAwcr/bonO1v3 rz/2D8p1moVTiQvM13KQS3qLcySWz2mRYO3dA9Oqaq8nyqOz/vJkNvlZSrAOOhvU AAnoaoUmYj6+HOxakrH+XVCjZasObmqOOwxnA85iqKWTXRXA2wlSjAJW2PqsbHbM yjAx9lKyV/UOqFiesBFUrxf6SKNDAUdnQRPmplCqfPmnV8jJZtDUn7hLo45U5GYF MFq/zI2ysffvZo6T3vQH/oZKcRhcs0U2q4NaxKHOAwyQ82QQLAR9zbXnVbWEi+ZU VpNLH9UGdP3yYQOQNh7KslnbFIZMsYHvwRCF0vkObppEI/VYp+pe9odzNwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFIWQWrIKoJcoW1Jwt2RBFt2HHE01MB8GA1UdIwQY MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt YWM0YTQwNjE3NDZkLzEvaFpCYXNncWdseWhiVW5DM1pFRVczWWNjVFRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQBVm0CAwQB XbvaAwQBkShKAwQAkShlAwQCkSh4AwQBkxyKAwQCkxykAwQBkxywAwQAkxy9AwQB kxzMAwQBkxzSAwQBkxzWAwQBkxzeAwQAkxzxAwQBk0soAwQAk0s7AwQBk0vOMA0G CSqGSIb3DQEBCwUAA4IBAQBMV1PmbuLhkDWaAeABSsLYfbgWdGbblG7CLcklVfKA wGGSpYu5lp603BACycLUUslbGgq8P/x0tlaU3YvrJc02n169LZ6WVNzUpGR1Qrb+ Wn9vTIJtR05q7yVLqwP+bVv8bqA6IZOV1LgNhAYUSRhgRymkBMy3Ywv42d2Yv1I6 26L1CwT6xJvn9cfkt8rug/AjTAjhA2oyS2Cj0NtuU4fdQaUfkT4ejSybgOCaq9hx pykTjT+KhOJpZCq5iJNBNAdCK2X8jqGai74x/DTssYYjBakBbuFNIzyI8mM1WevW 5GgJL+a4cl9JB3QZg4AfASRgeSMpX4QRf9pYgaYLVZuh -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:00 2025 by rpki-client