This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1pMlUTPGVKTnFXL5F0qzH01i0Qw.roa
File: 1pMlUTPGVKTnFXL5F0qzH01i0Qw.roa (raw, json)
Hash identifier: vL8wG7rY/6WjTNTfEYn4GZb4CVA16DXoZNKq80VmkWc=
Subject key identifier: D6:93:25:51:33:C6:54:A4:E7:15:72:F9:17:4A:B3:1F:4D:62:D1:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CB3384B72F6D175B58D1FCC58630E7C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1pMlUTPGVKTnFXL5F0qzH01i0Qw.roa
Signing time: Sun 06 Aug 2023 14:14:58 +0000
ROA not before: Sun 06 Aug 2023 14:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cb:33:84:b7:2f:6d:17:5b:58:d1:fc:c5:86:30:e7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 14:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d693255133c654a4e71572f9174ab31f4d62d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:74:89:65:72:92:6f:9b:d9:d8:04:a7:1d:89:
f4:3e:1e:d5:6d:64:14:03:f6:0a:62:72:7c:46:49:
34:48:73:41:51:91:48:35:bf:8e:08:14:80:6e:13:
69:fe:3c:18:82:c3:9c:8a:b6:a0:44:2e:a7:2d:de:
fc:b1:a1:8e:2d:55:c3:b3:31:6a:cc:45:6b:82:cb:
f3:24:aa:a1:00:98:a6:7a:c6:f0:61:d5:fa:a6:d9:
d5:3e:99:b8:c5:28:b4:77:f0:ae:59:ea:76:64:3a:
28:ee:63:21:b1:13:dc:f7:8d:3c:cf:2e:75:f1:97:
4b:95:50:9a:b2:ee:50:f3:41:5b:6b:7d:37:dc:5f:
3a:cb:8b:ea:19:76:db:23:d0:2f:08:7a:4e:86:c2:
b8:98:d2:59:a4:02:5a:39:9d:06:f3:81:35:a5:91:
35:4c:fd:ee:12:73:53:a7:cd:84:85:c9:47:42:9c:
33:f6:f9:e3:83:bd:12:a4:9d:f4:9b:67:ac:cd:16:
35:28:8a:2f:27:64:dc:4e:24:0f:07:f6:cf:05:84:
14:69:70:c8:47:37:c1:22:67:f1:b9:f8:16:98:43:
88:82:1c:83:b9:74:ce:23:bc:aa:a7:bf:20:3d:df:
d2:28:78:95:30:bc:47:69:47:6d:8f:f9:ef:3d:7f:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:93:25:51:33:C6:54:A4:E7:15:72:F9:17:4A:B3:1F:4D:62:D1:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1pMlUTPGVKTnFXL5F0qzH01i0Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:ed:47:e8:43:7f:2b:60:46:52:f2:71:10:e0:14:5b:db:fa:
5e:be:2c:28:09:42:30:8c:90:8f:60:a3:e6:20:37:f0:60:8f:
9f:50:14:8c:46:d4:40:1b:16:9e:0f:c0:9a:9e:fc:bc:e4:f0:
ff:79:e5:1e:5e:18:64:ec:0e:f8:af:23:90:d9:58:c7:a7:de:
08:20:51:b3:9e:3e:5e:6c:8b:58:b4:8d:77:32:a3:9e:29:9c:
13:a7:5a:00:e9:d7:26:a1:82:1f:25:90:5c:07:e2:98:b6:8a:
7f:93:cc:09:6b:3e:cb:17:59:10:f3:eb:33:75:8d:33:e5:05:
57:58:c8:ef:26:5b:65:86:2e:35:73:70:c1:fa:b0:e8:81:47:
a7:1a:62:f1:5d:c1:65:e1:b1:a6:1e:d5:05:fc:2b:0a:e9:bc:
29:d0:e8:a9:79:c5:42:9c:99:b4:0a:50:4b:8a:4d:c4:00:55:
89:19:51:56:fe:28:80:38:7f:72:76:8a:e6:e4:37:cc:4a:9c:
09:1f:1c:da:64:d6:f6:1d:38:cc:b7:01:15:1e:6f:1f:00:4e:
d3:47:9b:56:53:19:ac:8c:13:fb:67:47:0e:c4:57:9b:d0:6c:
1c:1d:3f:d8:64:a9:71:27:98:57:ac:20:e8:12:7f:f2:8e:a3:
79:07:78:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 13:00:25 2025 by rpki-client