This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4_Yc_ups0PiYvTLS6ZUSvtqRBY.roa
File: I4_Yc_ups0PiYvTLS6ZUSvtqRBY.roa (raw, json)
Hash identifier: mpxIfKqLndG/wtC3ONHDOKZjOuz6S9smj/S4s9Q36BM=
Subject key identifier: 23:8F:D8:73:FB:A9:B3:43:E2:62:F4:CB:4B:A6:54:4A:FB:6A:44:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185594831EA3DFD1C30E9625A9A2195E470
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4_Yc_ups0PiYvTLS6ZUSvtqRBY.roa
Signing time: Wed 28 Dec 2022 15:09:41 +0000
ROA not before: Wed 28 Dec 2022 15:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:48:31:ea:3d:fd:1c:30:e9:62:5a:9a:21:95:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 15:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=238fd873fba9b343e262f4cb4ba6544afb6a4416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:e9:bf:d5:ca:a7:16:9f:df:4c:7b:13:5a:
3a:69:44:28:b2:68:bb:a7:d5:5d:fd:4c:92:83:1e:
81:31:53:5b:77:75:58:34:c0:0e:71:bb:8c:ac:d6:
c0:39:c2:78:2e:d3:c2:f2:69:d0:1e:20:99:13:59:
d9:f6:ed:6d:a1:7b:26:60:a6:cd:e9:93:77:ac:06:
6d:d2:61:80:65:2b:fe:c0:51:77:7a:55:0f:6b:4a:
3e:b1:a1:05:50:ec:63:b5:18:0e:c3:9c:73:ae:cf:
57:77:93:c4:5e:0f:87:37:bd:35:b5:93:f8:e2:42:
92:54:9c:75:6d:6e:cc:86:34:8e:8c:83:39:68:44:
60:cc:e6:c3:cf:a1:4e:f9:cf:5f:54:05:36:b0:80:
eb:e2:f7:f6:54:38:7f:ea:2d:12:a9:09:d6:22:9d:
3d:c3:5b:bf:d7:6b:dc:c3:03:06:0b:13:8d:2c:03:
18:03:57:df:cf:a7:f6:a5:da:8d:c4:a7:44:e0:6e:
a7:49:5d:7c:64:2b:f0:7b:9a:a9:22:86:23:0b:ae:
3e:72:7d:ee:2c:fe:64:a4:78:47:37:96:65:e0:b8:
12:01:65:66:ba:d4:fb:37:b9:54:6e:c3:79:1b:5e:
6f:92:dc:d4:57:04:13:f7:d1:57:e6:48:b2:85:b7:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8F:D8:73:FB:A9:B3:43:E2:62:F4:CB:4B:A6:54:4A:FB:6A:44:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4_Yc_ups0PiYvTLS6ZUSvtqRBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:fa:69:c4:11:16:ff:63:4a:19:48:76:88:2c:a4:05:44:05:
d7:8c:dc:d2:41:a5:51:99:e2:b7:85:10:1a:97:76:22:ee:70:
a8:ac:ca:99:3f:b8:9e:1b:c1:16:2c:15:56:64:41:09:1d:cf:
31:24:88:c5:03:99:4a:13:40:42:57:3a:4d:6a:86:7e:c9:be:
2b:06:07:2d:69:72:e1:09:e7:ff:59:e0:e3:87:55:84:b2:22:
5e:37:07:72:6e:63:c1:90:90:c7:6e:19:4b:e9:11:81:25:d2:
05:4b:f9:29:93:03:21:e7:42:b7:12:8f:26:9d:5f:65:4b:c1:
b6:63:50:b9:f1:e3:6b:8f:22:40:f3:6c:57:53:4d:2c:38:a5:
7a:cc:34:18:c1:10:14:81:6d:48:0f:c2:cd:3f:42:2c:b8:e1:
02:01:b9:59:d2:25:0a:74:d6:be:85:f4:8d:25:c9:5d:78:2f:
24:f2:a8:f1:95:55:b6:c7:e7:07:fc:79:f8:0d:4e:12:a2:f3:
24:8c:a8:1f:cc:02:3a:fe:79:46:07:24:71:fd:27:1c:b9:0a:
27:a4:d5:0e:08:45:72:c1:08:aa:45:bf:22:14:8b:43:39:8d:
40:66:cf:44:80:af:04:84:11:69:35:91:a3:70:93:bc:93:33:
ce:b6:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:22:55 2025 by rpki-client