This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/01CcSlGlYnwYOsFQXgGbVcAbqpc.roa
File: 01CcSlGlYnwYOsFQXgGbVcAbqpc.roa (raw, json)
Hash identifier: akvYNaVBYwKSLlFMSBJCSR+/T9KYXNBmqLpRFzFcerM=
Subject key identifier: D3:50:9C:4A:51:A5:62:7C:18:3A:C1:50:5E:01:9B:55:C0:1B:AA:97
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9F5CA665037815B18DC4038C1C8FD437
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/01CcSlGlYnwYOsFQXgGbVcAbqpc.roa
Signing time: Mon 25 Dec 2023 05:04:58 +0000
ROA not before: Mon 25 Dec 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:9f5c:1d3f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9f:5c:a6:65:03:78:15:b1:8d:c4:03:8c:1c:8f:d4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3509c4a51a5627c183ac1505e019b55c01baa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:5f:04:0b:6b:70:28:1f:e5:d1:c4:23:95:
5b:94:35:bb:7c:b6:82:4b:7e:c7:28:65:d2:68:2f:
39:2e:a2:de:00:8b:67:fd:60:9d:89:f2:09:e3:76:
1e:9d:fc:c5:5f:8c:b7:05:e1:a7:96:cf:b3:11:a2:
02:0b:af:e8:70:6e:8c:44:8b:fe:8d:e9:f9:ed:ec:
ce:f2:8d:70:b4:80:a0:e5:35:12:fa:62:6f:c3:fe:
50:c7:b7:0c:f9:36:95:80:e9:72:41:16:db:fc:e3:
8f:b2:a5:c8:c9:c9:91:84:8d:86:c8:bf:04:6c:0e:
35:93:81:e1:86:11:77:cc:43:6b:c8:4b:f8:24:ca:
6d:bd:d2:ea:99:76:d6:6d:c0:da:03:d0:78:a6:97:
4e:21:16:8f:c7:35:2c:27:0e:cb:7c:d8:a9:2c:be:
0a:28:0e:9a:ae:b2:b5:fa:35:d0:9a:1c:67:ce:23:
e8:10:b9:fc:94:b5:af:7c:06:c2:b8:93:1f:48:52:
5a:79:7a:58:31:6d:46:79:10:b1:e2:bb:9d:f5:f1:
75:82:b2:59:bf:68:b8:96:ee:36:cf:76:f4:c8:83:
01:0d:7c:f6:a3:02:e8:af:c8:91:0b:5c:e4:08:e7:
94:5a:b3:bd:e8:c9:b1:73:cf:c8:e6:48:ed:a9:c2:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:9C:4A:51:A5:62:7C:18:3A:C1:50:5E:01:9B:55:C0:1B:AA:97
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/01CcSlGlYnwYOsFQXgGbVcAbqpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:63:cb:45:42:ea:7f:7b:3f:ae:73:75:26:cf:ed:2f:e3:fa:
94:43:d0:37:9f:66:f2:13:7a:ad:ff:40:84:eb:39:36:22:8f:
f3:0a:f0:e6:0d:bc:41:a6:e1:7d:37:82:95:a6:5a:06:aa:cf:
95:ad:c0:8c:4f:7e:3c:ba:f2:cb:bb:5f:8f:bd:19:f2:61:7e:
e0:a6:e0:52:fe:4a:de:c2:97:25:b7:9f:a8:50:6a:b2:dd:28:
17:c7:42:53:b3:fc:82:c6:8a:41:a6:53:47:72:7c:2a:e8:9d:
f1:d0:92:c7:a3:42:ce:5d:22:f4:27:6a:43:3c:f6:0d:1d:e9:
37:c8:bb:36:df:63:b2:2e:b1:bb:00:4d:55:77:0e:bf:6e:80:
40:11:fb:44:5f:57:af:4d:e2:b5:9e:e3:25:07:e5:39:78:4b:
2a:65:78:1a:c8:bb:1d:18:29:52:2d:42:f0:c3:ba:13:7a:f3:
35:06:6c:81:05:f4:ef:2d:d0:89:48:0f:fc:9b:00:19:89:3e:
1d:ba:5a:28:92:7f:4d:e2:0b:5f:b5:7f:4d:79:48:a7:de:53:
9e:9e:8e:1f:56:04:71:97:4a:1d:9a:0f:ea:b0:fe:95:c6:98:
e3:a5:05:2c:14:c4:6b:e8:56:f0:db:38:ee:04:53:83:0a:bd:
f5:f4:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:15:05 2025 by rpki-client