This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kfmNXhVbqnakRRxnkRjyLLJ6ltM.roa
File: kfmNXhVbqnakRRxnkRjyLLJ6ltM.roa (raw, json)
Hash identifier: aDSJjgn44uruXjiLuz10eF1P1e1ZUwKJ8r9FVO3v1Mo=
Subject key identifier: 91:F9:8D:5E:15:5B:AA:76:A4:45:1C:67:91:18:F2:2C:B2:7A:96:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018964D731C0B44719CDEDFF9CD9545F12D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kfmNXhVbqnakRRxnkRjyLLJ6ltM.roa
Signing time: Mon 17 Jul 2023 17:12:51 +0000
ROA not before: Mon 17 Jul 2023 17:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:d7:31:c0:b4:47:19:cd:ed:ff:9c:d9:54:5f:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 17:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91f98d5e155baa76a4451c679118f22cb27a96d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:e7:de:ac:49:6f:99:b2:95:30:ef:12:19:
39:d3:02:1a:de:80:12:72:34:cb:5b:17:18:d2:a0:
7f:d7:84:fb:f8:25:9b:27:79:65:d1:02:30:b3:ef:
c9:44:f3:4e:46:0c:40:89:09:2e:03:69:18:b4:74:
33:bd:4b:a3:2e:a9:18:80:92:f9:ac:8b:9e:59:41:
4e:ce:26:46:fd:dd:ac:d1:09:82:55:b1:aa:4c:05:
5b:59:2b:6d:21:5e:12:59:2b:d1:be:7b:47:d3:4e:
92:12:69:a3:17:ea:4d:4a:00:8f:db:31:84:f7:84:
6c:24:74:2d:a7:fd:bd:aa:71:4c:02:7c:72:2e:67:
fa:56:70:fa:8c:de:fc:38:f2:c5:84:f1:55:e9:a2:
8e:e1:67:2d:6e:c9:7d:d8:4a:84:25:a2:e1:36:92:
a9:03:91:04:b1:53:c6:3f:11:db:66:34:3e:55:49:
11:b8:05:dc:3d:4c:f9:28:ca:49:78:c8:71:6d:42:
e8:fc:fb:52:50:b4:b2:06:de:52:cc:f8:9d:80:34:
e5:85:f9:15:a3:54:ca:b1:57:d3:71:68:3e:c6:28:
a0:6f:a0:75:c2:20:b1:83:e1:d1:4e:1b:b2:fc:ec:
2d:7f:98:bb:bd:1e:59:0c:8b:43:ea:50:26:2d:38:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F9:8D:5E:15:5B:AA:76:A4:45:1C:67:91:18:F2:2C:B2:7A:96:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kfmNXhVbqnakRRxnkRjyLLJ6ltM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:41:2c:12:32:02:b4:ce:e3:a8:f8:8e:f4:8f:8e:f4:76:ce:
b0:4c:2f:5f:73:b6:06:40:43:ad:cc:c6:61:98:89:a1:cb:d3:
f8:1d:fe:ff:f8:4a:b8:10:80:0d:15:95:3b:00:0e:b9:36:b9:
c0:02:3e:4a:40:ee:0a:b3:c6:b9:1a:f3:2d:4b:a1:47:bc:05:
2f:8c:89:b7:da:42:a7:27:9b:c4:34:3d:9b:a4:e8:86:87:95:
5c:88:62:9d:44:27:5b:f1:be:f4:a4:b0:87:28:98:fa:c5:97:
4b:5b:60:8e:50:50:4e:9d:d7:91:eb:25:56:e5:2f:08:cb:ac:
85:7e:88:16:a3:c8:7f:59:65:bc:0e:5a:50:01:26:41:52:5a:
d8:15:53:7d:40:6c:d6:7b:e1:43:73:c9:25:ba:01:22:1f:36:
4e:1b:b3:45:68:86:ef:29:74:67:72:6b:3a:a4:51:99:05:d6:
9a:42:2f:61:c2:0d:41:b3:04:5e:23:7d:d6:d3:ad:15:87:a5:
96:43:f1:13:9b:03:4b:9d:61:e9:f1:77:f4:50:0e:fa:11:d9:
07:17:99:10:92:07:3b:2a:f8:5c:41:b2:9e:0e:ff:5b:d6:2f:
e5:7c:43:ad:fd:0a:cc:87:10:4b:0a:31:e5:11:c6:05:57:3a:
a0:b3:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:29:12 2025 by rpki-client