This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/H_e5gChyceWzNz7BJUeEFM73ZPY.roa
File: H_e5gChyceWzNz7BJUeEFM73ZPY.roa (raw, json)
Hash identifier: Jkf1NjL3milSxMuppCF0PCIXWUTGD3eNyMTU3IOP0as=
Subject key identifier: 1F:F7:B9:80:28:72:71:E5:B3:37:3E:C1:25:47:84:14:CE:F7:64:F6
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 019AC53413C3AA4BB76103A447680C390CD6
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/H_e5gChyceWzNz7BJUeEFM73ZPY.roa
Signing time: Thu 27 Nov 2025 12:05:15 +0000
ROA not before: Thu 27 Nov 2025 12:05:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 78.143.252.0/24 maxlen: 24
79.135.102.0/23 maxlen: 24
194.33.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:c5:34:13:c3:aa:4b:b7:61:03:a4:47:68:0c:39:0c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Nov 27 12:05:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ff7b980287271e5b3373ec125478414cef764f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:e1:e9:31:e7:4b:00:ba:47:e6:ff:db:a4:
c3:17:71:cf:60:67:88:fe:c3:5b:29:33:fc:64:b2:
71:23:fe:47:65:26:62:7f:2b:f3:cc:b0:84:18:95:
b8:21:ce:a5:41:4b:3d:fa:c4:37:fd:df:33:b2:96:
23:1d:d4:88:09:36:b8:60:9b:56:f7:46:db:b8:8a:
84:5b:63:c1:f4:33:f6:c3:83:73:f6:dc:7d:0b:c8:
24:4b:72:ab:6b:e0:d0:f6:1b:09:cb:42:34:5b:09:
75:3a:31:4d:2e:a0:04:a0:c8:5a:47:6e:42:25:a6:
9a:25:ce:3f:f1:b9:60:f8:16:32:06:a9:d6:a9:42:
6d:f8:41:e6:4c:ce:9f:4c:24:91:b7:c6:03:17:0b:
e4:fd:96:db:78:69:31:7e:d9:44:ca:46:23:13:97:
3e:43:e6:d1:88:6f:cd:8e:dc:5b:6f:a2:d5:2f:04:
90:6f:41:74:56:87:b2:04:84:dc:a7:94:93:2c:a8:
ce:36:4c:d7:e5:ef:32:ce:0a:1f:b0:d0:5b:b9:b8:
60:72:58:ba:f7:8c:a5:95:a6:0e:a7:75:b1:30:64:
4f:3d:f8:ba:f4:01:57:fb:f8:67:2f:6c:48:60:d4:
f7:a0:a0:49:ec:28:33:f2:64:d1:95:db:cf:88:69:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:B9:80:28:72:71:E5:B3:37:3E:C1:25:47:84:14:CE:F7:64:F6
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/H_e5gChyceWzNz7BJUeEFM73ZPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.252.0/24
79.135.102.0/23
194.33.150.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f7:aa:06:49:99:47:be:2f:b4:d1:b6:04:6f:0c:22:20:83:
6a:33:86:60:de:a4:16:22:56:8e:cd:f8:56:a8:95:95:df:2e:
45:46:5a:05:18:5d:81:80:5e:88:66:52:c7:ef:49:4e:ce:05:
d0:5e:e2:29:4c:69:e5:fb:7d:25:4d:8c:7e:ca:b3:a9:98:9c:
9d:79:a9:cd:99:8c:4d:5e:9b:c4:96:73:13:e5:5d:f3:8f:cf:
15:23:87:1b:0a:b1:f9:5d:99:db:dd:73:7b:ea:b0:42:fb:92:
f0:ec:a6:11:eb:6e:0c:b6:0d:8c:d3:0a:42:04:f5:0f:6c:de:
a2:94:35:3e:ae:6e:16:44:27:4c:50:dc:99:33:43:04:13:7d:
b7:1d:10:12:4c:e8:80:7a:e8:2b:37:6e:04:99:49:ca:34:db:
b2:30:90:00:b7:4c:69:d7:26:73:fa:f8:e0:6e:48:3a:c4:40:
b5:ef:97:34:b1:93:41:0a:2f:64:99:9c:96:b1:26:fd:c2:9a:
e0:be:b3:c7:e0:68:ea:09:ac:f1:7a:d7:2f:02:ad:95:f1:64:
6d:51:2d:de:96:49:70:f8:13:25:bd:7a:d0:c1:74:c3:05:fe:
a0:29:59:ec:d6:a2:a0:14:79:df:6c:e5:7a:95:f5:e3:9f:1b:
5f:d8:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:45:24 2025 by rpki-client