This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1bodyD47l9sDPVm4LIQemX5gN60.roa
File: 1bodyD47l9sDPVm4LIQemX5gN60.roa (raw, json)
Hash identifier: JIv9lfdz/9Vkssb3XrJ8Ts2q+aSye0SjUullXfkoVSo=
Subject key identifier: D5:BA:1D:C8:3E:3B:97:DB:03:3D:59:B8:2C:84:1E:99:7E:60:37:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018445203683FDE5FB158CB67FA99B82C56C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1bodyD47l9sDPVm4LIQemX5gN60.roa
Signing time: Sat 05 Nov 2022 00:10:49 +0000
ROA not before: Sat 05 Nov 2022 00:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:45:20:36:83:fd:e5:fb:15:8c:b6:7f:a9:9b:82:c5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 5 00:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5ba1dc83e3b97db033d59b82c841e997e6037ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:b3:5d:70:11:4b:b3:d1:56:4e:c0:fc:60:
67:a0:76:5c:eb:bf:48:a9:b2:7d:06:a7:ce:f2:f8:
3b:e9:4a:dc:f3:f1:30:70:78:e2:de:e1:1f:43:bd:
f4:81:15:49:30:20:1a:f4:8a:5a:9d:9f:85:1d:70:
f6:a3:0e:25:83:b1:e6:71:94:35:70:11:3d:f3:36:
a0:59:96:fe:8d:f8:c3:64:31:48:2f:eb:22:40:f0:
a0:fb:53:48:34:7b:31:fd:ce:f0:44:22:9b:43:f1:
c7:f4:b9:63:63:36:f5:1c:6c:43:da:5f:17:59:25:
57:eb:8b:c5:b6:a4:8b:09:d3:96:01:7e:5b:49:3c:
3a:07:aa:17:9b:a1:8f:46:de:49:b7:bd:3e:5c:ee:
13:2f:2b:2d:1b:16:a7:2f:88:8b:26:b2:eb:ad:0c:
ba:ad:81:b8:3d:18:2a:17:f1:00:b7:0e:c0:21:9f:
54:ba:1f:20:cb:b4:15:d6:20:df:54:1e:b5:d9:6b:
dd:b7:ed:cf:de:be:17:7d:be:00:13:b0:df:4c:c8:
4b:2f:1b:db:c0:5b:22:68:6e:8f:a3:fd:5a:4b:e7:
5b:bf:4c:71:ec:d0:a7:40:b7:38:e7:d5:69:22:e7:
03:16:d8:e9:7e:ed:91:cd:67:d5:32:23:40:57:8b:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BA:1D:C8:3E:3B:97:DB:03:3D:59:B8:2C:84:1E:99:7E:60:37:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1bodyD47l9sDPVm4LIQemX5gN60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:98:69:09:6a:cb:40:1c:0b:e7:ef:82:48:40:2c:19:b7:4c:
05:86:0e:f4:f6:cf:4d:8b:a1:8f:18:9b:23:75:24:73:5e:67:
5e:41:5f:2a:8c:fe:7f:51:3a:44:84:eb:49:2d:ad:2e:54:ae:
2e:cd:a9:06:c9:14:c5:c6:4f:7a:91:ba:9e:59:ee:0e:a0:e0:
72:4e:5b:3a:e9:6b:46:05:e9:c7:be:46:95:bf:b5:70:82:41:
06:a4:18:07:a4:dd:3f:f7:18:2e:d2:cb:bb:3e:78:e1:ef:40:
7f:af:9b:eb:ac:1c:8a:4b:56:db:6b:90:a3:4b:cd:a3:6f:17:
1d:2c:9a:b6:3e:92:08:4f:6c:7e:c3:02:1c:16:13:c8:4d:25:
31:13:54:f8:71:23:c3:19:a6:0d:80:e2:eb:a8:82:87:4e:49:
83:e1:ae:56:04:86:32:6b:88:c0:b0:57:79:66:4e:06:81:ec:
aa:49:c0:3d:c3:4f:b7:bb:9a:f1:33:1d:e6:e0:51:2e:21:0f:
41:f2:6f:f7:22:aa:97:19:cf:fa:cc:ad:77:a5:31:35:76:95:
45:08:82:63:fe:ed:5e:43:a8:66:51:4f:60:8b:a1:8b:e0:9d:
2c:45:c2:84:73:89:b9:9d:79:8c:20:81:58:82:24:c0:af:f2:
6e:59:94:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRFIDaD/eX7FYy2f6mbgsVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTA1MDAxMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWJhMWRjODNlM2I5N2RiMDMzZDU5YjgyYzg0MWU5OTdlNjAzN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK2zXXARS7PRVk7A/GBnoHZc679I
qbJ9BqfO8vg76Urc8/EwcHji3uEfQ730gRVJMCAa9IpanZ+FHXD2ow4lg7HmcZQ1
cBE98zagWZb+jfjDZDFIL+siQPCg+1NINHsx/c7wRCKbQ/HH9LljYzb1HGxD2l8X
WSVX64vFtqSLCdOWAX5bSTw6B6oXm6GPRt5Jt70+XO4TLystGxanL4iLJrLrrQy6
rYG4PRgqF/EAtw7AIZ9Uuh8gy7QV1iDfVB612Wvdt+3P3r4Xfb4AE7DfTMhLLxvb
wFsiaG6Po/1aS+dbv0xx7NCnQLc459VpIucDFtjpfu2RzWfVMiNAV4uKSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNW6Hcg+O5fbAz1ZuCyEHpl+YDetMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMWJvZHlENDdsOXNEUFZtNExJUWVtWDVnTjYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADOYaQlqy0AcC+fvgkhA
LBm3TAWGDvT2z02LoY8YmyN1JHNeZ15BXyqM/n9ROkSE60ktrS5Uri7NqQbJFMXG
T3qRup5Z7g6g4HJOWzrpa0YF6ce+RpW/tXCCQQakGAek3T/3GC7Sy7s+eOHvQH+v
m+usHIpLVttrkKNLzaNvFx0smrY+kghPbH7DAhwWE8hNJTETVPhxI8MZpg2A4uuo
godOSYPhrlYEhjJriMCwV3lmTgaB7KpJwD3DT7e7mvEzHebgUS4hD0Hyb/ciqpcZ
z/rMrXelMTV2lUUIgmP+7V5DqGZRT2CLoYvgnSxFwoRzibmdeYwggViCJMCv8m5Z
lMQ=
-----END CERTIFICATE-----
Generated at Mon Dec 22 08:35:22 2025 by rpki-client