This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2imB-z-XOOdeOlTz8C4Q6MY1KE.roa
File: Y2imB-z-XOOdeOlTz8C4Q6MY1KE.roa (raw, json)
Hash identifier: u/7rRj7JvkIZHA5X6OZUCrBpv3KcZd27f01igEDJ1z8=
Subject key identifier: 63:68:A6:07:EC:FE:5C:E3:9D:78:E9:53:CF:C0:B8:43:A3:18:D4:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E863254B843DCC4F31DD446B58010C8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2imB-z-XOOdeOlTz8C4Q6MY1KE.roa
Signing time: Sat 12 Aug 2023 06:15:58 +0000
ROA not before: Sat 12 Aug 2023 06:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:63:25:4b:84:3d:cc:4f:31:dd:44:6b:58:01:0c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 06:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6368a607ecfe5ce39d78e953cfc0b843a318d4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:36:88:eb:82:dd:27:97:a0:56:00:6a:68:
f8:ef:09:04:5b:38:7b:44:8a:72:7d:e9:99:95:d8:
2f:66:0b:64:46:91:da:4e:d0:4a:e1:92:97:5c:aa:
eb:7b:cd:95:6a:c2:33:fb:28:88:f5:90:b3:c5:23:
0a:5b:22:48:c3:ba:9f:6a:1d:27:76:e1:df:91:12:
77:3d:b4:80:35:cc:28:f9:40:60:59:bf:3d:1e:2d:
bf:64:94:fe:20:2f:3f:56:7b:ac:50:91:09:b1:3f:
ae:50:5b:b5:ae:50:0b:1b:14:45:26:30:78:44:62:
35:f5:1f:71:f6:44:d7:cc:19:4e:c9:42:36:9e:01:
b7:32:99:c5:3d:3a:1d:80:e5:14:19:32:5b:09:37:
9a:dc:b0:e4:e4:56:6f:05:1f:30:3a:95:a5:6d:db:
53:2f:20:c0:2a:2f:91:a4:39:7b:94:69:d3:1c:af:
42:4c:d7:c6:a1:91:aa:f3:2d:19:db:6f:4b:3d:a0:
cc:95:be:7e:13:e1:b4:02:dc:73:1f:b8:bc:a6:88:
93:af:40:4d:dd:42:82:65:14:1c:f7:e8:06:72:b7:
3a:65:b4:bf:68:78:f7:49:87:07:36:0c:06:09:47:
91:d3:73:9b:a7:88:8d:1b:8d:d1:13:19:22:a7:06:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:68:A6:07:EC:FE:5C:E3:9D:78:E9:53:CF:C0:B8:43:A3:18:D4:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2imB-z-XOOdeOlTz8C4Q6MY1KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:72:1e:64:28:7f:20:4c:30:86:42:57:db:64:e0:de:83:1e:
2c:10:43:a7:38:ee:00:82:d5:c2:5f:17:2a:75:32:21:77:84:
aa:64:48:65:e3:12:82:7c:29:b9:4f:4f:b2:40:76:55:43:fc:
d4:23:cd:8b:3a:9f:5b:3b:ed:a7:13:e6:d3:a7:23:86:23:ee:
56:e5:72:44:01:54:43:22:d4:43:93:8b:e1:06:40:5c:1c:d1:
90:f6:ba:08:58:13:d3:f1:49:56:35:fb:89:b6:2c:23:36:04:
0c:9d:39:0d:1f:87:e8:e4:c9:9e:0b:2c:04:fa:ed:f4:e4:64:
43:33:aa:62:73:cc:97:c2:bf:de:69:67:31:e3:61:4d:85:ff:
d7:ce:e0:4f:61:a2:fc:7e:19:62:46:ed:22:b3:78:cc:c3:0e:
ee:5b:40:2f:92:27:fd:d8:0b:a8:84:d3:46:80:10:c4:58:2c:
11:02:f8:23:80:93:d0:8b:88:37:a0:8e:20:0a:a5:16:55:ca:
2c:43:10:c0:af:92:01:44:3b:29:88:97:2e:ed:6c:6a:ab:b1:
f8:80:b4:b8:ab:64:b0:fb:85:ac:37:58:01:a6:f3:5a:f2:6d:
79:a0:9d:2b:94:94:17:ae:ca:7e:4a:88:d0:6d:1f:67:7a:4c:
8a:db:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:21:13 2025 by rpki-client