This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXXvocytGI5-9QFOc4i_YDTWZ-s.roa
File: dXXvocytGI5-9QFOc4i_YDTWZ-s.roa (raw, json)
Hash identifier: ohIk0U8GNN1dUnrrA1KZI2SwhNKR+m/vj+K6IOyOX5Y=
Subject key identifier: 75:75:EF:A1:CC:AD:18:8E:7E:F5:01:4E:73:88:BF:60:34:D6:67:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01853573F8A6CE17BA11BD619A3C1278E2EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXXvocytGI5-9QFOc4i_YDTWZ-s.roa
Signing time: Wed 21 Dec 2022 16:11:10 +0000
ROA not before: Wed 21 Dec 2022 16:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:35:73:f8:a6:ce:17:ba:11:bd:61:9a:3c:12:78:e2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 16:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7575efa1ccad188e7ef5014e7388bf6034d667eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:59:dd:7f:05:fc:80:e4:98:da:05:22:1a:
30:cc:27:5a:ed:38:18:8a:ab:c3:86:3f:7b:4d:c2:
ce:5a:cb:5e:3f:df:4e:f8:35:35:ea:f7:34:3c:77:
a6:2a:ec:65:1d:9a:ff:73:2c:65:3f:35:63:65:1a:
a0:ea:c6:30:0d:a4:aa:c3:97:0c:39:da:9b:fa:4f:
77:9c:af:ce:54:5c:27:fa:fb:03:a9:ec:51:f3:df:
03:5f:45:fe:cb:f0:83:f8:69:c4:c7:b3:bb:f4:d5:
13:8b:0a:fd:e3:89:85:cb:2a:ac:b7:f4:c6:fc:f3:
6d:8e:47:1b:a3:29:b8:0b:3a:b9:57:1f:98:d4:85:
7c:de:4d:73:ec:a2:fc:cd:e8:22:a3:9b:5b:58:9b:
4a:82:da:94:a4:df:e4:b1:a0:51:8f:77:61:d0:ff:
00:0c:a9:93:1a:5e:b8:34:b2:5f:4b:78:7b:97:16:
99:42:49:9c:b3:9f:fd:e5:74:3f:5d:91:4d:69:3b:
99:01:4a:68:08:48:83:ea:ac:dc:be:3e:78:9c:c5:
c9:72:57:af:8f:50:5f:b5:15:84:0f:33:49:71:e8:
7a:fb:5f:28:d7:d3:db:96:43:38:5b:6d:7a:13:41:
a9:82:52:7e:68:77:3a:5f:08:dd:2f:e1:84:66:c0:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:EF:A1:CC:AD:18:8E:7E:F5:01:4E:73:88:BF:60:34:D6:67:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dXXvocytGI5-9QFOc4i_YDTWZ-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:72:3b:47:0e:5e:cd:30:5b:8a:48:bc:23:16:d6:ec:90:49:
36:da:06:4d:20:40:47:d6:a5:5c:6e:11:88:9a:c0:53:5f:75:
a7:7b:b6:b5:d8:0f:47:38:92:e4:bf:1f:cc:f5:4f:50:b3:2a:
40:87:5c:6c:3a:e1:63:f9:c1:be:12:09:99:f6:59:f8:7e:55:
55:cd:a0:52:eb:fc:4e:67:a5:a3:99:2c:05:2a:e0:67:47:4d:
80:7e:cc:b8:56:36:d5:bf:1d:4f:11:50:23:72:63:af:55:ee:
5a:d4:39:25:cc:c0:16:aa:09:35:49:6f:04:a7:85:34:56:f6:
3c:01:71:ed:07:34:14:cc:e6:8b:f8:7c:35:99:d1:a2:ca:9e:
26:e6:97:29:7c:ef:c5:a4:4a:44:27:49:cb:ba:ed:2c:a0:e9:
ee:7c:e4:62:e6:91:0d:7f:ad:d2:1c:29:d7:44:98:45:98:c9:
0a:fb:98:69:a4:08:70:cc:e3:f4:e3:84:d7:5f:c9:ff:8c:14:
3f:c8:9e:fe:85:53:3d:3c:ef:2e:fd:cb:cd:5e:e0:d7:dd:f8:
30:83:e0:e3:e7:80:7a:28:4a:f5:00:ab:9a:d6:20:39:18:b5:
68:36:1e:a9:69:cb:39:9c:ac:99:9b:12:f2:db:2b:b9:3a:fb:
55:36:53:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYU1c/imzhe6Eb1hmjwSeOLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIxMTYxMTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTc1ZWZhMWNjYWQxODhlN2VmNTAxNGU3Mzg4YmY2MDM0ZDY2N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocFZ3X8F/IDkmNoFIhowzCda7TgY
iqvDhj97TcLOWsteP99O+DU16vc0PHemKuxlHZr/cyxlPzVjZRqg6sYwDaSqw5cM
Odqb+k93nK/OVFwn+vsDqexR898DX0X+y/CD+GnEx7O79NUTiwr944mFyyqst/TG
/PNtjkcboym4Czq5Vx+Y1IV83k1z7KL8zegio5tbWJtKgtqUpN/ksaBRj3dh0P8A
DKmTGl64NLJfS3h7lxaZQkmcs5/95XQ/XZFNaTuZAUpoCEiD6qzcvj54nMXJclev
j1BftRWEDzNJceh6+18o19PblkM4W216E0GpglJ+aHc6XwjdL+GEZsBP6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHV176HMrRiOfvUBTnOIv2A01mfrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZFhYdm9jeXRHSTUtOVFGT2M0aV9ZRFRXWi1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIVyO0cOXs0wW4pIvCMW
1uyQSTbaBk0gQEfWpVxuEYiawFNfdad7trXYD0c4kuS/H8z1T1CzKkCHXGw64WP5
wb4SCZn2Wfh+VVXNoFLr/E5npaOZLAUq4GdHTYB+zLhWNtW/HU8RUCNyY69V7lrU
OSXMwBaqCTVJbwSnhTRW9jwBce0HNBTM5ov4fDWZ0aLKnibmlyl878WkSkQnScu6
7Syg6e585GLmkQ1/rdIcKddEmEWYyQr7mGmkCHDM4/TjhNdfyf+MFD/Inv6FUz08
7y79y81e4Nfd+DCD4OPngHooSvUAq5rWIDkYtWg2HqlpyzmcrJmbEvLbK7k6+1U2
U2c=
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:11:42 2025 by rpki-client