This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9wEPaki_jSgz7o7mERNSglp-Io.roa
File: t9wEPaki_jSgz7o7mERNSglp-Io.roa (raw, json)
Hash identifier: +z0sAQQKLu08PKWLt0SNOyF9YpiIGxEJ8x0khGoeg90=
Subject key identifier: B7:DC:04:3D:A9:22:FE:34:A0:CF:BA:3B:98:44:4D:4A:09:69:F8:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826F6E20682CC569A83E149A4C601BC4EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9wEPaki_jSgz7o7mERNSglp-Io.roa
Signing time: Fri 05 Aug 2022 19:14:24 +0000
ROA not before: Fri 05 Aug 2022 19:14:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6f:6e:20:68:2c:c5:69:a8:3e:14:9a:4c:60:1b:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 19:14:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7dc043da922fe34a0cfba3b98444d4a0969f88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:d1:55:82:3c:77:2e:b1:0a:b9:f5:0e:15:
69:b7:25:ee:06:9b:14:a4:3f:b7:86:80:ed:83:cf:
7d:7d:dc:bd:19:90:ac:75:c6:ef:64:f5:e0:4e:7a:
e6:32:3d:f8:87:ce:54:ed:ff:2f:63:4b:ff:7d:a8:
cc:65:53:02:13:38:0d:64:83:30:9d:c3:c0:40:dc:
7d:5e:6d:ec:0a:4b:0e:10:ca:eb:bd:8d:ff:e0:ed:
33:71:42:15:fa:a6:a1:0f:cd:04:ce:ad:0d:1b:1b:
94:53:6e:77:2e:41:27:90:aa:80:01:8f:b0:66:23:
64:bf:9b:83:92:bf:63:6f:ac:0e:08:81:47:2b:01:
82:a7:79:20:bc:89:28:11:10:87:b3:b8:8b:e6:4c:
0c:2e:f8:a9:26:7e:c2:ed:dd:28:93:81:93:2f:db:
10:9e:6b:7e:f6:c8:70:3c:ab:cd:a1:22:7a:a5:8f:
bf:bb:77:cc:05:c5:cc:51:f0:d4:10:13:c6:78:c4:
00:15:a4:d2:1d:ac:54:9d:6a:79:9f:6f:5f:ea:12:
1d:8c:80:a7:0a:e3:50:0b:3b:cd:66:df:38:91:77:
12:13:83:83:41:e6:fb:fc:6b:fa:e0:d0:43:6f:d5:
32:2a:45:f0:0f:5b:38:e3:d9:51:e1:fc:72:5f:14:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:04:3D:A9:22:FE:34:A0:CF:BA:3B:98:44:4D:4A:09:69:F8:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9wEPaki_jSgz7o7mERNSglp-Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:60:42:99:de:f2:b9:6a:1a:86:b6:f6:09:3b:c2:4d:72:ae:
14:32:f9:35:4a:02:ed:5d:32:7b:d1:22:e9:96:14:04:fe:7b:
51:61:3e:6c:84:b6:d3:96:36:f1:7c:f9:7b:f9:fa:8e:5a:7e:
7e:81:fc:4f:5b:ac:42:ac:c3:c6:26:d3:15:3b:a2:d3:82:6b:
8a:cb:11:6c:d7:ca:c1:05:76:97:3b:e1:55:79:a2:93:a4:2f:
c6:44:13:a5:e5:4f:2a:4b:35:c7:69:c4:a1:ab:69:d5:d3:9c:
80:e3:df:90:e1:15:12:16:a8:ea:b9:f0:82:9e:35:61:6e:cb:
8d:68:6c:4f:6c:fb:fa:d3:2c:15:3f:80:a0:53:ed:29:f1:58:
6c:53:2d:a5:4b:77:54:07:78:d1:bf:e8:71:07:6d:f7:4f:a5:
f7:5f:24:65:c8:d1:41:7d:ba:ca:9d:26:98:f4:da:f6:85:2d:
8b:c5:8d:af:11:81:27:86:84:6e:85:d7:83:f1:35:35:83:ea:
eb:59:95:5d:ec:aa:bc:f6:8c:06:97:97:f3:94:c4:71:78:28:
01:10:01:6c:bf:f7:66:fe:a4:ee:74:93:32:6b:fa:5b:bb:98:
6f:1f:f5:5f:b2:ff:b0:9e:e9:03:96:96:e5:80:dd:3e:f5:62:
85:c2:da:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJvbiBoLMVpqD4UmkxgG8TqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODA1MTkxNDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2RjMDQzZGE5MjJmZTM0YTBjZmJhM2I5ODQ0NGQ0YTA5NjlmODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyTRVYI8dy6xCrn1DhVptyXuBpsU
pD+3hoDtg899fdy9GZCsdcbvZPXgTnrmMj34h85U7f8vY0v/fajMZVMCEzgNZIMw
ncPAQNx9Xm3sCksOEMrrvY3/4O0zcUIV+qahD80Ezq0NGxuUU253LkEnkKqAAY+w
ZiNkv5uDkr9jb6wOCIFHKwGCp3kgvIkoERCHs7iL5kwMLvipJn7C7d0ok4GTL9sQ
nmt+9shwPKvNoSJ6pY+/u3fMBcXMUfDUEBPGeMQAFaTSHaxUnWp5n29f6hIdjICn
CuNQCzvNZt84kXcSE4ODQeb7/Gv64NBDb9UyKkXwD1s449lR4fxyXxRS3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLfcBD2pIv40oM+6O5hETUoJafiKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdDl3RVBha2lfalNnejdvN21FUk5TZ2xwLUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF9gQpne8rlqGoa29gk7
wk1yrhQy+TVKAu1dMnvRIumWFAT+e1FhPmyEttOWNvF8+Xv5+o5afn6B/E9brEKs
w8Ym0xU7otOCa4rLEWzXysEFdpc74VV5opOkL8ZEE6XlTypLNcdpxKGradXTnIDj
35DhFRIWqOq58IKeNWFuy41obE9s+/rTLBU/gKBT7SnxWGxTLaVLd1QHeNG/6HEH
bfdPpfdfJGXI0UF9usqdJpj02vaFLYvFja8RgSeGhG6F14PxNTWD6utZlV3sqrz2
jAaXl/OUxHF4KAEQAWy/92b+pO50kzJr+lu7mG8f9V+y/7Ce6QOWluWA3T71YoXC
2uE=
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:19:51 2025 by rpki-client