This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Bj8nQcXmuoo33slN9YUKJ_70-gs.roa
File: Bj8nQcXmuoo33slN9YUKJ_70-gs.roa (raw, json)
Hash identifier: JQaIeXRz9eZGIW3Rie8kOGbZJ2y4+in8SLoNt2cUUfw=
Subject key identifier: 06:3F:27:41:C5:E6:BA:8A:37:DE:C9:4D:F5:85:0A:27:FE:F4:FA:0B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01972B8D5FDE0B3A3A45578107008BFD8E06
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Bj8nQcXmuoo33slN9YUKJ_70-gs.roa
Signing time: Sun 01 Jun 2025 12:52:54 +0000
ROA not before: Sun 01 Jun 2025 12:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.208.0/23 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 03 Jun 2025 07:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2b:8d:5f:de:0b:3a:3a:45:57:81:07:00:8b:fd:8e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 1 12:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=063f2741c5e6ba8a37dec94df5850a27fef4fa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:93:a8:cb:a1:ad:90:59:68:80:f3:ed:ef:
ad:b2:4c:2e:43:c2:3e:e6:2b:c6:e3:1a:c6:61:af:
ab:c6:10:9d:aa:4d:5c:f7:ae:6a:f4:29:c4:4b:ee:
a1:28:a6:74:08:7a:b3:93:4c:ab:1b:6a:f0:50:61:
35:a5:25:0b:83:47:47:ca:97:80:e4:d4:e8:2d:f9:
01:89:ac:d6:a8:ae:62:82:a3:ee:73:2a:2a:1d:77:
a1:3f:1b:4f:31:d2:32:ab:92:7a:e8:85:45:5e:4d:
48:e1:a9:88:b5:84:58:f9:a8:ee:3d:85:0b:7c:24:
3d:15:a4:94:e8:7b:5f:44:32:16:6d:b0:6b:a9:f9:
0c:1f:6d:01:5e:4c:83:73:33:6c:6a:be:a5:0e:f8:
b0:cd:db:5a:7e:51:58:42:7e:02:11:01:89:a5:7f:
29:09:43:b6:86:a3:cb:60:db:1e:fa:b1:a1:cb:8b:
0f:3a:7e:f5:d1:38:a6:17:db:c7:ee:bf:6a:03:31:
e9:03:54:93:ba:3e:9a:74:47:51:03:d9:cd:e2:e3:
18:71:d2:28:06:54:a5:50:26:de:d7:3c:27:9d:63:
0c:cc:ee:93:eb:0d:1c:5a:49:e2:d5:f4:59:d2:ce:
10:cf:aa:b7:fb:dc:7b:d0:50:91:68:3b:95:18:ec:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3F:27:41:C5:E6:BA:8A:37:DE:C9:4D:F5:85:0A:27:FE:F4:FA:0B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Bj8nQcXmuoo33slN9YUKJ_70-gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.208.0-85.133.213.255
85.133.220.0/24
85.133.222.0/23
85.133.225.0-85.133.227.255
85.133.229.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.251.0-85.133.252.255
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
88:98:30:eb:3e:79:9b:8f:b1:50:b6:d4:46:4c:cc:9c:be:ca:
05:de:b6:5f:7b:0b:80:68:75:38:67:04:00:c3:4d:15:07:e1:
64:4f:33:93:7e:51:c7:2a:30:f3:9d:42:13:5d:4c:d4:46:22:
d0:65:cb:4e:dc:2c:74:6d:2d:de:ca:2f:76:02:d3:f3:fe:8b:
99:12:91:f3:09:aa:39:1c:35:4d:8d:e5:d4:6e:37:f0:52:dd:
a1:5e:2e:92:cc:12:b2:57:73:e2:49:68:c0:4e:8d:ca:57:08:
f7:7d:86:99:96:a7:31:e9:ba:9c:24:86:a3:8e:62:d6:a7:4a:
de:2a:39:d6:6d:d8:54:a1:37:5a:31:8f:ca:2f:54:af:e3:d2:
6b:0f:2c:e1:79:27:2a:0a:63:b9:aa:a0:0e:86:34:b3:8b:99:
4a:74:a9:48:de:c8:96:d7:00:8e:d7:d5:8f:f2:18:77:02:82:
1a:29:b6:c9:24:d1:94:92:b7:1d:a4:f8:93:6e:33:82:54:3e:
dd:7d:fe:71:17:c5:8f:3f:ba:45:56:49:c1:51:45:fa:0a:48:
44:fa:e1:e1:16:26:af:24:6f:0b:9b:2f:2f:42:e3:3c:2f:64:
58:49:53:83:7d:29:c0:e7:e1:b6:29:52:08:ee:aa:60:c2:9c:
af:39:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:51:58 2025 by rpki-client