This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlvvXl0F2HdZiAX47QLPy0BMpls.roa
File: QlvvXl0F2HdZiAX47QLPy0BMpls.roa (raw, json)
Hash identifier: 1nIjIl0fi1xCaDHcILWK8k5f91mQbUGWxtSJpC35Q8A=
Subject key identifier: 42:5B:EF:5E:5D:05:D8:77:59:88:05:F8:ED:02:CF:CB:40:4C:A6:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E93DF75218D4E96EBDC206ADA5471BA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlvvXl0F2HdZiAX47QLPy0BMpls.roa
Signing time: Sat 12 Aug 2023 10:14:59 +0000
ROA not before: Sat 12 Aug 2023 10:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:3d:f7:52:18:d4:e9:6e:bd:c2:06:ad:a5:47:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 10:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=425bef5e5d05d877598805f8ed02cfcb404ca65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:6a:37:70:27:c4:71:16:f0:3c:9d:26:f8:
6d:b5:36:e7:ee:1a:6c:76:c3:f5:06:fa:13:38:70:
5d:62:8b:c1:c5:37:5f:db:dd:61:21:81:b6:c6:ff:
71:56:6b:71:39:b4:c1:ae:f8:96:55:ee:78:2f:fa:
f3:3e:a6:a2:4e:b9:c8:a2:37:33:bf:35:8b:7f:5e:
79:5d:90:1c:c9:ef:54:88:ea:98:35:78:56:05:4b:
65:0e:50:5d:a5:aa:05:5d:81:2c:fa:53:63:2a:f1:
3d:9d:3b:0a:21:95:cf:1f:88:74:11:1e:9e:85:f2:
ec:5b:cf:98:b8:0c:1d:66:c4:bb:c6:50:01:0b:51:
9e:8b:4c:51:69:d3:38:57:71:53:62:68:82:28:cd:
3f:64:61:8a:a3:86:b5:c1:82:b4:bc:41:fe:a5:2f:
9b:16:eb:07:41:88:9e:91:2f:89:5a:38:ca:b6:48:
9d:d8:f2:e2:53:18:ae:61:ac:b1:0d:c6:9e:4f:d7:
5c:77:77:1d:8a:c8:ac:84:9c:b8:3b:9a:62:05:af:
72:7c:42:33:70:f6:9a:a1:47:f0:01:7b:4c:dc:1d:
0e:b5:de:4d:6f:1f:6f:67:4d:7c:63:9e:3b:97:83:
6c:40:29:8b:47:5a:99:31:3d:08:45:84:a9:b6:c4:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:EF:5E:5D:05:D8:77:59:88:05:F8:ED:02:CF:CB:40:4C:A6:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlvvXl0F2HdZiAX47QLPy0BMpls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:ea:f5:6e:7f:57:cc:57:22:3f:60:ab:fb:0c:cf:e9:a4:f4:
be:59:9c:be:de:1a:50:12:b2:e8:1b:e4:98:7e:29:5c:75:63:
64:c6:4d:62:18:32:71:45:a2:d5:0a:f1:cc:e5:ec:25:4c:0d:
91:1b:52:92:64:93:be:72:b3:29:98:93:df:d5:f0:7d:24:ae:
f7:70:21:72:fe:11:6b:bc:62:af:ae:01:15:2c:1c:5c:36:ca:
1e:d2:76:2c:55:7e:f4:c1:a9:1b:08:81:c2:18:3c:61:13:41:
56:ed:5e:7a:f3:a9:c7:e3:c4:a7:2f:51:4d:68:55:c6:d7:59:
3e:14:20:fa:5e:62:04:be:f5:9f:6c:38:d1:47:f3:38:19:32:
a2:eb:19:27:24:6f:64:a0:de:ea:75:fd:40:bd:9c:9e:43:97:
2a:7a:35:55:cd:04:fe:31:f2:f1:e0:09:5f:ff:e8:51:70:24:
6e:98:fd:3c:3a:44:8b:b6:c0:c7:85:53:17:c0:da:1b:01:fb:
cc:3f:34:46:61:e2:7b:05:37:b1:74:27:8c:b3:2f:d4:b1:31:
fd:75:58:44:9a:45:60:c2:a6:b6:a1:ad:65:c9:f5:76:06:5d:
7d:59:4d:dd:e9:09:00:6f:f6:49:ad:73:58:de:0a:5e:68:59:
84:97:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:10:23 2025 by rpki-client