This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/8bG5gGlvDeuRp6jrE-F2lx5_T-U.roa
File: 8bG5gGlvDeuRp6jrE-F2lx5_T-U.roa (raw, json)
Hash identifier: C4ZMCLsKQ/CL0xZr39JjZDohk6ssz+62ipXwGUzDc+A=
Subject key identifier: F1:B1:B9:80:69:6F:0D:EB:91:A7:A8:EB:13:E1:76:97:1E:7F:4F:E5
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0192D4C869477F259C2578FF359B4DA0FABB
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/8bG5gGlvDeuRp6jrE-F2lx5_T-U.roa
Signing time: Mon 28 Oct 2024 20:19:16 +0000
ROA not before: Mon 28 Oct 2024 20:19:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 147.78.68.0/22 maxlen: 22
193.187.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:c8:69:47:7f:25:9c:25:78:ff:35:9b:4d:a0:fa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 28 20:19:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1b1b980696f0deb91a7a8eb13e176971e7f4fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:0c:ef:ed:ea:2b:ec:f2:71:f8:30:02:2d:
c8:42:49:bc:8e:63:00:91:86:67:12:ef:3f:94:7c:
13:55:f2:fa:69:c7:17:97:a0:20:61:a6:6d:97:ec:
6a:20:d2:08:8d:ac:32:72:25:05:68:12:71:98:16:
59:04:de:97:d3:c6:fe:30:5b:5f:16:93:1e:0e:ae:
95:91:7d:1c:2b:9e:c5:f8:fb:c4:68:88:00:0d:5a:
36:53:25:bf:08:e6:7c:d1:36:55:39:70:6b:ed:99:
51:79:72:78:a5:b4:ce:30:c0:41:c6:a0:dd:9c:13:
6b:1a:15:47:4e:94:96:8d:2d:9d:14:df:d7:a0:d0:
81:b2:51:16:a1:55:01:87:85:34:e9:ad:c3:df:51:
f4:c7:9e:f7:ee:00:e2:97:ff:49:ee:5a:7e:73:7d:
e0:3f:48:31:26:3f:48:7e:52:80:d5:ec:ea:88:3c:
67:66:9a:0f:af:ef:7a:fa:2a:1e:74:93:c6:28:6e:
1d:66:97:33:92:d5:13:11:0f:ee:19:ef:00:83:3f:
3e:a1:0f:48:fe:a8:31:2b:eb:34:c3:dc:ed:1e:73:
16:db:5e:ad:80:62:f2:47:23:00:a1:49:71:c3:de:
c3:d3:0a:4c:3c:8a:0e:ba:41:32:50:36:d5:1d:60:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:B9:80:69:6F:0D:EB:91:A7:A8:EB:13:E1:76:97:1E:7F:4F:E5
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/8bG5gGlvDeuRp6jrE-F2lx5_T-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.68.0/22
193.187.132.0/22
Signature Algorithm: sha256WithRSAEncryption
99:e7:31:90:24:d4:14:00:b1:b1:7b:2f:15:37:4c:79:0c:2b:
0f:a3:9c:fc:40:1f:d5:8c:24:b6:39:fe:ac:e4:03:f4:46:d8:
59:66:ec:d7:3f:4d:b0:7c:ab:2d:a2:29:6a:f5:1a:d4:a8:37:
9a:d7:e0:ac:fa:48:2b:99:25:e2:d2:93:23:11:67:b3:a2:86:
d4:a9:32:18:85:83:4d:b8:6f:6b:79:99:3b:7c:8b:2f:f9:79:
22:4f:11:21:d3:85:1e:6a:6a:d7:01:c4:f2:a1:e8:fc:5e:4e:
e1:66:5e:34:25:74:f3:bc:18:b9:99:0b:67:cb:d4:b8:5b:f2:
9f:02:bb:49:5e:e6:86:c9:66:72:d7:d7:03:62:70:9e:53:63:
e7:82:37:fc:7a:3a:da:df:04:d7:f2:d0:63:ff:32:ea:30:02:
f9:18:cb:2f:52:b6:81:f5:52:89:5e:65:ac:ec:69:39:ae:c7:
bc:7e:33:e1:dc:77:08:bb:51:1e:16:75:b8:80:41:da:29:27:
3c:41:54:3c:b5:58:5a:60:72:27:f0:e5:40:b8:6c:a4:0e:a8:
21:ef:f9:e4:9c:d0:17:52:02:cf:44:73:c7:8b:a5:85:4d:51:
81:7a:95:08:e5:ad:e5:bd:d6:4e:55:a9:6c:5b:ea:ee:e4:14:
00:0d:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:29:24 2025 by rpki-client