This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9JBk1bBOk1mCd8W1w4iBQ8Vv5k.roa
File: V9JBk1bBOk1mCd8W1w4iBQ8Vv5k.roa (raw, json)
Hash identifier: vLMwhDZv2jdgnVLP4clpQ1Dc1Hza9jr+EMY1itNxNtU=
Subject key identifier: 57:D2:41:93:56:C1:3A:4D:66:09:DF:16:D7:0E:22:05:0F:15:BF:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BC2CD73503D55EE2B3E410E4D296C2D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9JBk1bBOk1mCd8W1w4iBQ8Vv5k.roa
Signing time: Tue 07 Mar 2023 13:05:00 +0000
ROA not before: Tue 07 Mar 2023 13:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:bc2c:ca0a/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:2c:d7:35:03:d5:5e:e2:b3:e4:10:e4:d2:96:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 13:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57d2419356c13a4d6609df16d70e22050f15bf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:4c:04:39:fc:d6:f9:46:24:05:61:25:8b:
a5:1c:22:61:af:a5:1d:d3:f9:99:56:ef:13:87:a4:
c3:e6:53:e0:47:62:be:89:82:50:4a:1d:60:10:6e:
68:06:ea:68:75:86:e7:a5:fd:dd:94:e9:fa:89:ca:
5e:eb:72:41:cc:dd:c2:93:08:eb:ce:93:c0:f4:c7:
4a:ce:4e:95:0a:b0:9a:a7:ed:b1:24:c8:73:39:d4:
ca:ba:4f:ed:29:b9:aa:b3:fd:16:e7:ac:b8:07:52:
3b:3a:b1:e0:50:9f:1f:55:30:f9:11:66:24:8e:31:
92:7b:0c:76:4e:a2:ce:18:a2:9b:3e:b2:28:bd:30:
28:40:30:be:dc:c8:45:7f:d7:eb:94:55:4c:15:4d:
9e:0f:b4:5d:5c:6c:5f:2e:d9:06:24:f1:89:17:6b:
a5:68:b3:1a:35:6b:6d:bb:57:99:b8:2f:46:cf:76:
21:4c:49:2a:1f:12:4f:3b:61:d8:65:34:ea:be:c2:
3b:5f:49:67:3f:c5:9f:50:0d:c3:0c:6b:fc:f4:63:
36:92:83:e4:96:db:37:ae:10:ab:d2:1c:c7:e3:e8:
3f:4e:c7:d8:e2:78:4f:94:1b:9b:19:ec:fa:96:36:
4a:7c:13:a2:71:db:5b:6a:5e:cd:3b:98:58:58:ba:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D2:41:93:56:C1:3A:4D:66:09:DF:16:D7:0E:22:05:0F:15:BF:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9JBk1bBOk1mCd8W1w4iBQ8Vv5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:91:f8:b1:43:a4:f1:7a:2d:7c:72:d1:68:0e:5e:31:72:71:
a8:78:12:56:3b:81:05:bb:b8:76:14:72:09:c5:cd:45:11:54:
66:0d:e8:08:bf:db:41:06:7b:f4:80:be:a7:d7:6a:94:93:e0:
a5:8b:92:23:85:46:5a:53:b2:70:0c:a4:a3:4a:55:01:d8:cb:
4d:d8:93:5c:fa:2b:be:ee:57:52:10:b6:47:a8:ff:57:ae:66:
f9:07:65:4d:c2:d0:43:6a:be:3a:66:f5:8a:ae:02:d6:31:71:
25:2d:99:52:bd:10:69:75:2a:2c:f9:bb:02:fa:c0:31:a6:10:
d9:32:23:d1:6d:db:d9:04:f6:a3:24:85:57:59:bb:58:ed:06:
71:7a:cb:0b:9d:0e:4a:fb:f1:90:6c:a4:3e:05:ad:13:e5:63:
08:00:82:5d:f9:75:72:be:00:9f:c1:13:0d:b7:53:2c:a5:19:
9c:d2:3d:33:d0:09:c1:c0:f3:47:a7:49:89:ca:a3:6c:14:43:
60:a3:2f:9d:03:44:94:47:bd:fc:bf:55:07:86:4e:2c:78:40:
be:6c:a0:84:88:d2:c2:15:cb:a4:df:1b:c0:77:1c:dc:0d:5b:
d4:aa:86:f4:29:21:dc:e6:5c:f4:ad:61:2e:4a:ab:75:24:9f:
c8:cc:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:42:10 2025 by rpki-client