This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aak5mlbqCeGOw70xuGlBL3VYPp8.roa
File: Aak5mlbqCeGOw70xuGlBL3VYPp8.roa (raw, json)
Hash identifier: G7A/wmNuL2BLWqbqs59RArmcyekevL5hbkAE8pZNCTM=
Subject key identifier: 01:A9:39:9A:56:EA:09:E1:8E:C3:BD:31:B8:69:41:2F:75:58:3E:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EEDA44FB1910FDA5669115DB6C2320DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aak5mlbqCeGOw70xuGlBL3VYPp8.roa
Signing time: Fri 17 Mar 2023 09:15:27 +0000
ROA not before: Fri 17 Mar 2023 09:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:da:44:fb:19:10:fd:a5:66:91:15:db:6c:23:20:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 09:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01a9399a56ea09e18ec3bd31b869412f75583e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:a5:5a:0a:e3:d4:72:02:2b:21:c7:3b:8b:
b5:29:1e:b7:d2:40:9b:6b:30:ea:99:0c:9f:35:a2:
d7:4d:9f:79:af:6a:ba:a1:48:dd:af:d5:ef:75:c4:
7d:2a:ed:4b:ad:32:90:f6:8a:7c:e8:b5:d1:3d:2a:
a0:14:d2:36:5c:29:1d:fd:e5:f7:6c:40:d4:1e:40:
4a:82:f7:77:b0:f5:a8:68:13:74:e9:59:6f:83:16:
bb:68:8f:c9:db:37:5b:ed:f0:4f:97:c4:02:5b:b6:
e4:a7:08:d1:0d:76:5f:db:3b:a8:8f:2a:38:d1:9e:
1a:ff:45:26:ee:9d:f4:a3:fe:3f:e6:36:77:84:14:
7c:f9:4e:e3:41:e3:1c:25:e2:48:09:9c:d3:7f:d0:
c2:83:29:1f:d5:8c:4b:09:ce:9c:05:93:0e:3d:bb:
bb:fa:ab:a2:aa:5e:c8:8c:ec:d8:6b:84:ff:2f:b0:
50:f0:30:bb:3a:eb:0e:53:08:61:1a:09:a2:08:5a:
b4:37:a9:c8:61:15:bf:0a:b1:4e:d1:45:d1:65:47:
2d:e6:47:c9:13:92:52:ee:d3:c7:23:a7:39:e6:fc:
c6:15:e6:4b:62:8b:1f:34:ee:dd:d2:40:5b:e0:eb:
75:b5:4e:23:f5:ba:fe:06:62:7c:de:3a:80:1e:a8:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A9:39:9A:56:EA:09:E1:8E:C3:BD:31:B8:69:41:2F:75:58:3E:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aak5mlbqCeGOw70xuGlBL3VYPp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7c:0a:76:03:6e:f8:91:fe:97:cb:8e:6c:06:1a:cc:66:05:
29:76:89:b7:ad:a2:28:55:0e:54:4a:f3:4f:0e:e3:87:59:45:
f9:7f:1e:94:ec:bd:a7:d7:84:c8:6b:2b:29:0d:a6:10:c6:64:
59:72:e3:63:df:d8:b1:18:9c:e1:99:bd:c4:a6:f7:3b:0d:4f:
5a:9b:bd:d0:f7:e7:63:80:a3:04:1b:39:cc:04:29:32:56:6c:
f1:92:2e:08:92:0e:bb:4e:57:ab:4a:cd:5f:b7:e3:2b:d7:71:
b6:d4:ae:be:c3:6f:c8:e5:1b:3e:c9:6e:c6:a1:7e:55:31:1d:
2e:37:24:48:60:a6:9b:26:2e:8b:a5:67:79:e5:48:ba:44:4d:
47:e6:03:1c:33:fe:d9:8e:a2:8b:2c:ce:94:2c:4f:7f:8a:7a:
cc:40:86:1b:37:99:e9:65:93:73:8c:99:8f:55:70:68:fb:cd:
c4:0f:e0:7d:67:49:4a:45:16:cb:24:11:b3:e7:c1:26:4c:62:
64:af:23:f6:98:46:ba:a3:8a:a7:9b:7f:7f:c3:ff:a6:1a:cb:
71:e3:e7:e1:07:f0:28:f1:05:1f:57:da:a8:33:7a:25:00:8e:
25:92:b6:b5:73:76:95:a1:2a:ac:4b:7e:90:d7:6a:99:e8:ed:
9b:be:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:09:13 2025 by rpki-client