This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kiw2x3pJ6jgNZJHl-ZwUyiQPv_w.roa
File: kiw2x3pJ6jgNZJHl-ZwUyiQPv_w.roa (raw, json)
Hash identifier: kg0EcbNH4vKRPBeqOE2HgjbPPGSkvMXqIq6JdZlKL1g=
Subject key identifier: 92:2C:36:C7:7A:49:EA:38:0D:64:91:E5:F9:9C:14:CA:24:0F:BF:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F13DE90A18808A517199179646D39FBE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kiw2x3pJ6jgNZJHl-ZwUyiQPv_w.roa
Signing time: Wed 31 Aug 2022 00:12:22 +0000
ROA not before: Wed 31 Aug 2022 00:12:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f1:3d:e9:0a:18:80:8a:51:71:99:17:96:46:d3:9f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 00:12:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=922c36c77a49ea380d6491e5f99c14ca240fbffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:24:9e:f3:c5:47:ae:93:29:e7:f0:b3:7d:
97:55:44:2f:d6:c8:78:3f:c1:e8:c9:5b:8f:d6:61:
56:8a:f0:2f:b0:13:c0:96:ed:a9:d0:8d:49:1f:65:
ef:8e:41:28:f4:26:cf:e0:a3:0e:a0:c0:eb:a6:2d:
ec:d5:16:c8:9b:6f:39:ee:b2:5c:98:d9:64:e1:ca:
92:c4:b4:17:1b:87:09:33:b2:a7:d8:77:0c:cb:0c:
4b:fc:95:58:bc:c8:86:b4:ea:fa:a9:a1:b3:61:90:
73:e8:5c:90:b7:4b:e0:c1:2f:39:30:f6:a9:3b:7f:
0e:e1:c5:26:c7:4d:f2:98:c9:a8:2d:f7:aa:71:f5:
74:c0:c3:37:3d:3f:a6:cd:9f:c8:52:95:68:71:4e:
ac:53:0c:ab:d0:dc:23:cd:54:2d:25:d8:9d:c4:bf:
8d:62:6a:f8:c3:6d:db:e4:04:ab:5e:17:e1:b1:4a:
62:94:29:4a:2e:b2:b4:01:c3:5a:61:90:8c:a9:5c:
22:95:bf:44:d7:52:34:ae:96:55:33:33:a8:ca:6d:
c1:e0:d6:ad:c4:ae:f5:56:4a:9f:f7:e9:c3:14:66:
dc:f8:86:a8:2d:99:09:63:b4:61:98:c4:75:a0:80:
d6:56:c2:19:6a:ab:90:5f:b6:ef:21:73:d5:81:7e:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2C:36:C7:7A:49:EA:38:0D:64:91:E5:F9:9C:14:CA:24:0F:BF:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kiw2x3pJ6jgNZJHl-ZwUyiQPv_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:54:eb:05:5c:b7:08:04:e6:7a:28:df:d6:3b:d7:54:16:cd:
ce:19:d9:8e:ba:4c:a0:61:58:65:98:65:86:d0:d3:b7:41:00:
90:ec:9d:54:2a:52:28:9b:a1:df:22:66:d5:67:29:a0:a0:b4:
37:c4:50:ee:ec:6e:2a:27:6c:49:a1:e3:77:e8:06:3d:75:ce:
2b:62:a5:5c:be:d3:10:8c:46:5c:4e:58:a7:97:f4:87:45:b2:
b3:39:4a:10:d6:45:3b:eb:66:98:8b:ea:0a:d0:f1:69:06:97:
96:7f:10:35:fe:3f:ef:a1:36:3f:07:45:db:f6:83:f4:37:5f:
3a:83:e2:a5:82:b5:3e:40:12:60:58:13:9d:c1:64:41:d4:74:
72:dd:45:99:16:d9:f9:84:97:8e:9a:4e:9f:44:40:a4:38:2c:
32:1a:1f:58:0a:59:14:17:93:b0:28:02:c9:5a:62:0e:0e:fd:
f3:f6:7e:41:6f:96:c6:ce:bd:de:66:04:e1:db:fa:b8:e9:dd:
ea:1d:24:e3:25:2f:2a:66:98:46:34:03:60:2c:6f:44:43:0d:
44:b8:5c:46:b9:fc:c5:94:fd:b2:58:ec:dc:2b:89:4e:ee:16:
3e:60:0b:2d:1d:99:af:9f:f2:3e:34:97:4f:55:31:56:70:6b:
b9:31:96:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLxPekKGICKUXGZF5ZG05++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODMxMDAxMjIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjJjMzZjNzdhNDllYTM4MGQ2NDkxZTVmOTljMTRjYTI0MGZiZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHIknvPFR66TKefws32XVUQv1sh4
P8HoyVuP1mFWivAvsBPAlu2p0I1JH2XvjkEo9CbP4KMOoMDrpi3s1RbIm2857rJc
mNlk4cqSxLQXG4cJM7Kn2HcMywxL/JVYvMiGtOr6qaGzYZBz6FyQt0vgwS85MPap
O38O4cUmx03ymMmoLfeqcfV0wMM3PT+mzZ/IUpVocU6sUwyr0NwjzVQtJdidxL+N
Ymr4w23b5ASrXhfhsUpilClKLrK0AcNaYZCMqVwilb9E11I0rpZVMzOoym3B4Nat
xK71Vkqf9+nDFGbc+IaoLZkJY7RhmMR1oIDWVsIZaquQX7bvIXPVgX4XMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJIsNsd6Seo4DWSR5fmcFMokD7/8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva2l3MngzcEo2amdOWkpIbC1ad1V5aVFQdl93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADFU6wVctwgE5noo39Y7
11QWzc4Z2Y66TKBhWGWYZYbQ07dBAJDsnVQqUiibod8iZtVnKaCgtDfEUO7sbion
bEmh43foBj11zitipVy+0xCMRlxOWKeX9IdFsrM5ShDWRTvrZpiL6grQ8WkGl5Z/
EDX+P++hNj8HRdv2g/Q3XzqD4qWCtT5AEmBYE53BZEHUdHLdRZkW2fmEl46aTp9E
QKQ4LDIaH1gKWRQXk7AoAslaYg4O/fP2fkFvlsbOvd5mBOHb+rjp3eodJOMlLypm
mEY0A2Asb0RDDUS4XEa5/MWU/bJY7NwriU7uFj5gCy0dma+f8j40l09VMVZwa7kx
lis=
-----END CERTIFICATE-----
Generated at Mon Dec 22 22:34:51 2025 by rpki-client