This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUarSBlx3RPZB7M8GFJlGrLK6NM.roa
File: dUarSBlx3RPZB7M8GFJlGrLK6NM.roa (raw, json)
Hash identifier: U9TY6GZQds233WwRl/oX0p9Se4DmVk0objNGOoqyXa0=
Subject key identifier: 75:46:AB:48:19:71:DD:13:D9:07:B3:3C:18:52:65:1A:B2:CA:E8:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899FA3ECEA93546A418E2A900CA198CEFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUarSBlx3RPZB7M8GFJlGrLK6NM.roa
Signing time: Sat 29 Jul 2023 03:14:27 +0000
ROA not before: Sat 29 Jul 2023 03:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9f:a3:ec:ea:93:54:6a:41:8e:2a:90:0c:a1:98:ce:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 03:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7546ab481971dd13d907b33c1852651ab2cae8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:a2:7c:79:db:85:1a:bb:68:9c:30:30:ae:
88:e9:77:3d:8d:dd:c5:c8:48:36:d4:15:2e:88:cc:
88:f4:ed:58:e7:bf:5e:03:e5:04:0d:1e:cc:26:73:
10:25:09:ec:3b:69:7f:b0:06:d2:01:1f:7b:88:1b:
a2:11:e2:e1:d0:4f:e7:cc:9d:c3:6c:8a:74:11:38:
45:3f:f0:25:03:5f:27:71:ac:d7:f4:8c:11:d0:b7:
04:39:33:5c:83:c5:d7:1d:7a:29:65:60:64:a3:80:
ba:29:0b:5c:a4:b8:74:b3:da:16:d4:c6:d9:2a:a5:
fe:ce:d5:0c:17:5c:7e:94:75:f3:0d:81:e7:e2:ff:
a9:74:2e:8c:99:d9:2e:11:3e:9b:79:e4:41:59:25:
51:0f:22:ac:98:37:5f:f0:d9:9b:fa:a6:7f:8c:ec:
9c:43:de:d8:18:fb:25:14:62:25:dd:69:c6:31:af:
8f:7a:ab:3b:b4:a0:71:6a:ae:73:93:5e:91:3b:80:
df:06:da:c8:7b:39:8a:28:ef:c0:6b:9f:a3:5f:2e:
b5:dc:42:58:88:9f:34:b2:4e:24:bc:fd:73:f7:17:
dc:17:e6:71:eb:3b:bf:87:ee:b5:47:e9:3e:57:56:
be:cc:a8:24:d3:f3:4e:96:1b:39:c0:14:1a:25:5e:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:AB:48:19:71:DD:13:D9:07:B3:3C:18:52:65:1A:B2:CA:E8:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUarSBlx3RPZB7M8GFJlGrLK6NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:c1:1d:a3:8f:70:27:81:8a:cc:1a:4c:07:9d:85:a6:a9:14:
68:c9:a7:6d:eb:2e:65:6f:d9:40:37:1b:b2:c0:37:e0:fe:3c:
b6:ee:86:2e:e5:15:5d:f2:99:ac:71:10:2a:0b:89:78:f7:35:
00:71:2e:0c:c3:39:ea:3d:0d:81:7d:8d:1d:9e:4b:55:a1:e1:
c7:ce:a7:a5:5b:19:85:2b:30:0f:d1:a0:c7:08:39:2e:a5:47:
8e:62:97:4a:88:96:42:00:bd:40:18:fc:21:cc:2a:37:f8:04:
b0:42:93:22:8f:be:69:20:8b:43:5d:52:c5:5a:56:8c:f6:e2:
a9:23:81:a9:92:ba:b5:32:05:1a:cb:b8:d8:d6:1d:23:98:52:
3e:cb:40:3a:ed:64:20:85:77:6b:f7:14:a6:b8:8e:0a:ee:e6:
35:eb:72:81:0b:3d:c8:fc:6f:50:01:71:90:f4:b8:c8:d8:4b:
52:10:6e:39:57:13:50:49:f6:21:77:25:8e:8f:5d:49:56:bb:
a4:9d:6b:52:8c:2a:24:c5:b0:6a:77:01:b4:fc:15:66:0a:21:
7b:ae:a9:59:57:33:ab:0e:55:a4:09:c4:2e:b7:27:35:79:2b:
ef:47:db:3a:0e:53:7f:fd:4e:d3:6c:c2:a3:e4:13:a7:f0:e9:
72:bb:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:48:11 2025 by rpki-client