This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pw6DoqpNWwXKMIUVyQ72RylTlBo.roa
File: pw6DoqpNWwXKMIUVyQ72RylTlBo.roa (raw, json)
Hash identifier: VrZL8jWTIm4S/YrsuttT0py7+us89pT0UElkmW+X84Q=
Subject key identifier: A7:0E:83:A2:AA:4D:5B:05:CA:30:85:15:C9:0E:F6:47:29:53:94:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FF1DB60A4928E67E7E53ED90DE5A940B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pw6DoqpNWwXKMIUVyQ72RylTlBo.roa
Signing time: Wed 16 Aug 2023 16:11:24 +0000
ROA not before: Wed 16 Aug 2023 16:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ff:1d:b6:0a:49:28:e6:7e:7e:53:ed:90:de:5a:94:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 16:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a70e83a2aa4d5b05ca308515c90ef6472953941a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:bb:e8:b3:06:56:9b:9a:f7:71:06:97:fd:
4b:35:b2:ee:a2:07:1a:d9:82:a6:f6:c2:0a:5c:fc:
cd:2a:37:02:b2:9b:dd:6e:d1:e5:ff:69:49:8d:99:
fb:12:dd:9d:0a:54:12:f7:15:ca:1f:3f:f5:c4:a3:
dc:11:4e:b9:8e:65:8c:b1:33:c4:45:47:50:a9:61:
60:cf:56:a4:22:76:f0:4f:db:f4:01:2d:cd:06:20:
1f:f6:e0:55:22:6b:a3:f9:a6:18:03:a6:69:b3:0e:
95:75:d2:56:cd:b0:b4:91:a3:13:b8:6c:22:9f:b9:
fc:d1:27:1b:d3:fb:a4:57:1b:af:43:ad:d5:41:5b:
3d:1e:cf:e2:22:46:88:52:5e:d3:56:e0:6b:8d:31:
fa:cc:58:eb:bf:14:21:14:40:32:a7:c3:25:fd:31:
25:ca:53:f2:ee:0e:9f:47:23:d7:ca:70:09:b6:0c:
09:b3:19:81:d3:32:50:95:4c:7f:f4:eb:38:c7:20:
9c:d8:a8:17:0d:6f:53:2f:33:d7:40:41:85:a9:e2:
30:90:9b:73:8b:c5:e5:13:19:55:19:50:de:da:ca:
7c:b2:b8:90:ca:49:49:19:bd:f1:a7:1f:e5:f5:5a:
f3:06:3f:9e:72:60:f8:d8:19:c7:0a:cc:31:e2:1e:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0E:83:A2:AA:4D:5B:05:CA:30:85:15:C9:0E:F6:47:29:53:94:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pw6DoqpNWwXKMIUVyQ72RylTlBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:86:63:ad:a2:cd:12:d3:1e:81:57:52:ac:0b:29:87:74:47:
44:9a:97:46:e7:60:f2:e0:4f:ca:e7:be:5e:28:38:c3:d7:ad:
ba:e1:b7:8f:32:86:59:fd:a7:61:b0:98:84:74:d1:20:a8:93:
d6:bd:82:b9:b0:80:b1:18:99:17:97:8b:a3:28:f9:3b:84:cb:
38:35:b8:c0:ec:02:30:f8:3d:55:26:50:57:e6:ac:62:05:ba:
41:0e:d7:de:6f:b2:18:6c:2e:95:93:a3:62:80:03:c2:2c:db:
ae:9d:4a:28:84:62:f3:37:e4:ea:df:cc:ee:e7:d9:26:f7:13:
47:54:d6:8f:56:77:71:ce:28:63:5f:57:55:6e:22:73:ea:a2:
4c:da:11:88:5c:91:60:00:9a:76:80:84:4a:5f:6b:d8:5d:08:
f8:95:8e:93:ac:a7:db:89:e2:54:e1:32:e4:51:74:0e:7d:bd:
8f:6a:62:e1:14:49:35:3a:1a:2c:d7:c3:45:40:31:f6:02:94:
02:1c:a3:eb:0a:0d:94:2b:0b:ab:ca:71:e7:fc:c2:64:b7:08:
a9:5e:75:cc:f1:f3:3f:23:16:dc:b1:1c:04:35:f2:d8:b0:9f:
31:c9:4e:6e:a3:69:9e:95:bb:56:17:8a:cd:58:b3:3b:b5:d6:
e1:64:03:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYn/HbYKSSjmfn5T7ZDeWpQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE2MTYxMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzBlODNhMmFhNGQ1YjA1Y2EzMDg1MTVjOTBlZjY0NzI5NTM5NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7y76LMGVpua93EGl/1LNbLuogca
2YKm9sIKXPzNKjcCspvdbtHl/2lJjZn7Et2dClQS9xXKHz/1xKPcEU65jmWMsTPE
RUdQqWFgz1akInbwT9v0AS3NBiAf9uBVImuj+aYYA6Zpsw6VddJWzbC0kaMTuGwi
n7n80Scb0/ukVxuvQ63VQVs9Hs/iIkaIUl7TVuBrjTH6zFjrvxQhFEAyp8Ml/TEl
ylPy7g6fRyPXynAJtgwJsxmB0zJQlUx/9Os4xyCc2KgXDW9TLzPXQEGFqeIwkJtz
i8XlExlVGVDe2sp8sriQyklJGb3xpx/l9VrzBj+ecmD42BnHCswx4h6WgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKcOg6KqTVsFyjCFFckO9kcpU5QaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcHc2RG9xcE5Xd1hLTUlVVnlRNzJSeWxUbEJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAuGY62izRLTHoFXUqwL
KYd0R0Sal0bnYPLgT8rnvl4oOMPXrbrht48yhln9p2GwmIR00SCok9a9grmwgLEY
mReXi6Mo+TuEyzg1uMDsAjD4PVUmUFfmrGIFukEO195vshhsLpWTo2KAA8Is266d
SiiEYvM35OrfzO7n2Sb3E0dU1o9Wd3HOKGNfV1VuInPqokzaEYhckWAAmnaAhEpf
a9hdCPiVjpOsp9uJ4lThMuRRdA59vY9qYuEUSTU6GizXw0VAMfYClAIco+sKDZQr
C6vKcef8wmS3CKledczx8z8jFtyxHAQ18tiwnzHJTm6jaZ6Vu1YXis1Yszu11uFk
A0Q=
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:39:08 2025 by rpki-client