This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5fNCZx5Bx4zFlpFxCOfAgm_B24.roa
File: k5fNCZx5Bx4zFlpFxCOfAgm_B24.roa (raw, json)
Hash identifier: 0weDEZ/Udt1hHTUqhbnhKphmXefrf5dXeSYzojfVrSs=
Subject key identifier: 93:97:CD:09:9C:79:07:1E:33:16:5A:45:C4:23:9F:02:09:BF:07:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D10674F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5fNCZx5Bx4zFlpFxCOfAgm_B24.roa
Signing time: Wed 23 Feb 2022 17:16:00 +0000
ROA not before: Wed 23 Feb 2022 17:16:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829791567 (0x6d10674f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 17:16:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9397cd099c79071e33165a45c4239f0209bf076e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:76:c7:ce:6b:d5:d6:83:ff:fa:4b:a0:d7:
4e:ef:d3:54:9c:ff:3b:29:3a:5a:ac:96:29:da:c4:
87:cf:6f:f2:22:41:97:db:f5:fa:20:ef:14:43:d5:
6a:ae:c7:c2:8a:53:5c:16:e5:f2:fa:69:28:49:46:
14:8b:23:b8:a9:93:fb:a4:b2:8c:3a:e1:f2:58:23:
dc:a1:3f:9f:2d:59:2f:87:56:5b:7c:d6:1b:92:dc:
15:92:ee:cd:d5:26:42:3c:7c:84:96:43:84:09:17:
88:56:f6:b3:b1:56:e9:63:84:db:89:e6:87:b2:c2:
cb:e3:4f:c1:2c:af:0b:18:88:47:c5:56:d0:55:75:
4c:77:9e:3c:8f:de:f3:79:0b:54:27:36:ac:4d:e5:
cf:13:6d:95:32:bb:8b:fd:11:70:cd:a8:40:0b:cf:
09:8d:99:e7:02:09:a0:7a:35:ad:b5:7e:01:8e:a0:
2e:35:98:cd:6d:31:27:b6:99:9f:98:9c:10:77:8c:
6e:8d:f2:59:78:2d:9d:4b:9c:a2:a0:a0:c0:42:9b:
1a:c0:6c:e1:7f:7e:5c:d7:b9:12:a8:35:5c:83:a2:
ce:0a:ad:8f:49:8f:bf:08:07:3b:18:65:fd:5c:92:
51:75:52:bc:46:9a:a6:50:d8:64:78:34:13:64:0f:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:97:CD:09:9C:79:07:1E:33:16:5A:45:C4:23:9F:02:09:BF:07:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5fNCZx5Bx4zFlpFxCOfAgm_B24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:3c:29:bb:77:d2:37:7e:ea:1f:b9:ae:5f:f3:f6:73:f6:27:
6b:41:8a:dc:41:94:f8:c6:72:13:a1:73:55:f0:6f:d4:b8:9d:
05:5c:00:c5:84:a5:2c:33:0e:38:98:54:20:f8:92:0c:65:75:
6a:8b:54:cd:68:4a:f8:0f:02:a0:b5:48:ea:5c:10:b5:6f:fb:
7a:aa:a7:26:b7:e9:f6:de:e2:ee:a0:21:cd:77:25:91:0d:7c:
bb:6e:47:04:73:41:76:dc:59:d3:e9:c9:59:07:5e:7f:d2:41:
d2:18:da:f2:5a:e3:df:19:c9:82:3b:d7:af:35:ef:ff:aa:7b:
2a:95:6e:d5:b9:3e:f0:44:1a:79:4c:77:1d:81:cd:25:7f:81:
f4:d0:37:38:26:a9:26:45:43:8c:2a:a8:14:3d:37:37:8b:9b:
b6:b3:fe:7d:eb:8a:a0:90:8c:47:d7:ef:02:a2:a5:23:59:0e:
de:3a:50:dc:e3:51:89:bd:42:bc:2f:d4:c5:d6:b3:93:16:55:
d3:6b:75:07:f7:1f:17:a7:89:b6:5e:b6:b7:a0:08:08:bb:b9:
b9:05:ce:fe:ed:f3:12:e6:37:8e:07:4a:40:6f:b5:3b:bf:b6:
16:b3:f7:45:8c:6c:31:ac:c8:be:d5:e9:ad:bf:ed:fe:60:a4:
5c:2e:67:c7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbRBnTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
MzE3MTYwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTM5N2NkMDk5Yzc5
MDcxZTMzMTY1YTQ1YzQyMzlmMDIwOWJmMDc2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKp/dsfOa9XWg//6S6DXTu/TVJz/Oyk6WqyWKdrEh89v8iJB
l9v1+iDvFEPVaq7HwopTXBbl8vppKElGFIsjuKmT+6SyjDrh8lgj3KE/ny1ZL4dW
W3zWG5LcFZLuzdUmQjx8hJZDhAkXiFb2s7FW6WOE24nmh7LCy+NPwSyvCxiIR8VW
0FV1THeePI/e83kLVCc2rE3lzxNtlTK7i/0RcM2oQAvPCY2Z5wIJoHo1rbV+AY6g
LjWYzW0xJ7aZn5icEHeMbo3yWXgtnUucoqCgwEKbGsBs4X9+XNe5Eqg1XIOizgqt
j0mPvwgHOxhl/VySUXVSvEaaplDYZHg0E2QPqi8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSTl80JnHkHHjMWWkXEI58CCb8HbjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2s1Zk5DWng1Qng0ekZscEZ4Q09mQWdtX0IyNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAwPCm7d9I3fuofua5f8/Zz9idrQYrcQZT4xnIT
oXNV8G/UuJ0FXADFhKUsMw44mFQg+JIMZXVqi1TNaEr4DwKgtUjqXBC1b/t6qqcm
t+n23uLuoCHNdyWRDXy7bkcEc0F23FnT6clZB15/0kHSGNryWuPfGcmCO9evNe//
qnsqlW7VuT7wRBp5THcdgc0lf4H00Dc4JqkmRUOMKqgUPTc3i5u2s/5964qgkIxH
1+8CoqUjWQ7eOlDc41GJvUK8L9TF1rOTFlXTa3UH9x8Xp4m2Xra3oAgIu7m5Bc7+
7fMS5jeOB0pAb7U7v7YWs/dFjGwxrMi+1emtv+3+YKRcLmfH
-----END CERTIFICATE-----
Generated at Thu Dec 18 23:35:08 2025 by rpki-client