This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zC2JtIUcVGA8lCJ_XjqTwyd5W6Y.roa
File: zC2JtIUcVGA8lCJ_XjqTwyd5W6Y.roa (raw, json)
Hash identifier: M7vYrXizWJo5G7XD03Tfg+XaYqnh0tRBo2sVVmxIz4s=
Subject key identifier: CC:2D:89:B4:85:1C:54:60:3C:94:22:7F:5E:3A:93:C3:27:79:5B:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F82378A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zC2JtIUcVGA8lCJ_XjqTwyd5W6Y.roa
Signing time: Fri 04 Mar 2022 05:07:34 +0000
ROA not before: Fri 04 Mar 2022 05:07:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870804874 (0x6f82378a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 05:07:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc2d89b4851c54603c94227f5e3a93c327795ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:db:db:c5:79:13:f5:a6:34:1c:0f:65:4e:
f9:0f:09:7b:55:3c:ef:65:c3:f2:5e:e2:f5:34:50:
80:59:07:3f:76:06:cf:cc:c3:7a:a2:85:73:1f:43:
8e:ec:32:1a:45:ef:8e:b7:28:ed:ef:f7:22:da:95:
70:fe:e2:41:ea:01:89:86:dd:bd:f1:9d:e5:0e:1e:
20:d2:a4:49:04:f5:6a:13:07:14:5b:89:71:db:12:
48:6e:fc:81:e2:df:77:85:f2:ff:9a:cb:19:ad:15:
f7:ea:71:8a:1e:d4:f2:e3:33:fe:38:46:14:da:1f:
22:9e:c9:65:9d:27:5d:d5:63:4e:77:1e:01:08:28:
99:b5:0f:16:3c:44:72:4e:86:62:13:f2:5b:87:4f:
f4:0d:53:f6:42:dd:4c:ac:1e:db:d4:57:fe:a4:8c:
45:93:25:b0:c7:28:32:6f:fb:2b:72:c2:81:e1:63:
0f:8e:e9:c9:4d:51:fc:32:1b:ea:33:6c:e5:b5:83:
7f:df:60:fd:19:fd:b1:7b:68:64:bc:a3:16:99:2c:
e4:d8:b5:a0:de:a0:ae:cc:4d:c2:31:16:5a:dc:c6:
84:f9:8d:90:2a:36:56:55:b8:e5:dd:ad:24:33:6b:
eb:38:f0:7b:f9:b4:79:ab:ec:5b:96:ef:ea:84:9e:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:89:B4:85:1C:54:60:3C:94:22:7F:5E:3A:93:C3:27:79:5B:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zC2JtIUcVGA8lCJ_XjqTwyd5W6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:1c:9d:75:18:b4:d9:e1:d5:23:47:36:2f:b3:e5:18:da:5e:
58:90:6c:e2:02:c3:f6:46:80:4a:1a:29:60:e4:de:d7:f9:5d:
4a:03:5c:af:63:45:15:d6:31:61:dd:59:d0:1d:6b:2b:71:b5:
b1:dd:9e:96:56:35:4a:61:e5:22:eb:ea:2e:19:8c:d1:5d:ae:
0d:c2:ae:55:a0:b6:cd:f0:3f:81:72:d8:64:f8:4a:cf:9b:8e:
9b:e5:1f:cf:cd:8a:92:c7:d0:9b:5a:b3:a6:b6:70:e5:23:ab:
b2:80:a5:b8:66:c1:2f:5b:39:ff:5b:fd:80:6e:d3:b1:e9:df:
5f:e0:3c:ea:3e:15:52:95:ac:b0:9e:73:87:5e:83:0f:83:87:
24:df:1d:f9:ed:e4:08:a6:6f:79:e5:51:56:b5:c6:6a:cb:ec:
ce:ce:ef:1e:ca:5c:40:92:18:a5:2c:79:ea:e3:fb:93:ec:fd:
9b:cf:2d:30:23:1f:68:1f:c6:0e:35:2b:0f:b4:74:2f:9b:83:
0c:72:45:c3:cd:a8:98:b4:25:6f:3d:5f:81:74:cb:41:30:5d:
fc:28:cb:64:7c:03:39:eb:d3:d5:ba:f1:3f:8c:54:0a:12:71:
8c:1d:1b:1b:22:f2:7c:58:0b:fd:2f:4b:be:4b:ba:53:99:c0:
d7:0f:8a:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEb4I3ijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
NDA1MDczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2MyZDg5YjQ4NTFj
NTQ2MDNjOTQyMjdmNWUzYTkzYzMyNzc5NWJhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM2929vFeRP1pjQcD2VO+Q8Je1U872XD8l7i9TRQgFkHP3YG
z8zDeqKFcx9DjuwyGkXvjrco7e/3ItqVcP7iQeoBiYbdvfGd5Q4eINKkSQT1ahMH
FFuJcdsSSG78geLfd4Xy/5rLGa0V9+pxih7U8uMz/jhGFNofIp7JZZ0nXdVjTnce
AQgombUPFjxEck6GYhPyW4dP9A1T9kLdTKwe29RX/qSMRZMlsMcoMm/7K3LCgeFj
D47pyU1R/DIb6jNs5bWDf99g/Rn9sXtoZLyjFpks5Ni1oN6grsxNwjEWWtzGhPmN
kCo2VlW45d2tJDNr6zjwe/m0eavsW5bv6oSeNsUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTMLYm0hRxUYDyUIn9eOpPDJ3lbpjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3pDMkp0SVVjVkdBOGxDSl9YanFUd3lkNVc2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBdHJ11GLTZ4dUjRzYvs+UY2l5YkGziAsP2RoBK
Gilg5N7X+V1KA1yvY0UV1jFh3VnQHWsrcbWx3Z6WVjVKYeUi6+ouGYzRXa4Nwq5V
oLbN8D+Bcthk+ErPm46b5R/PzYqSx9CbWrOmtnDlI6uygKW4ZsEvWzn/W/2AbtOx
6d9f4DzqPhVSlaywnnOHXoMPg4ck3x357eQIpm955VFWtcZqy+zOzu8eylxAkhil
LHnq4/uT7P2bzy0wIx9oH8YONSsPtHQvm4MMckXDzaiYtCVvPV+BdMtBMF38KMtk
fAM569PVuvE/jFQKEnGMHRsbIvJ8WAv9L0u+S7pTmcDXD4p3
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:48:44 2025 by rpki-client