This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-6nE-LFC01fOQAVMFzLP09w3bNo.roa
File: 1-6nE-LFC01fOQAVMFzLP09w3bNo.roa (raw, json)
Hash identifier: xLe6Bi+kziXg6e87zx8nT/uFQYWGl5L9Hn822Pdi0js=
Subject key identifier: FB:A9:C4:F8:B1:42:D3:57:CE:40:05:4C:17:32:CF:D3:DC:37:6C:DA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2FC94BF9E4D6FA2D954DFBCE1FDBBA0D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-6nE-LFC01fOQAVMFzLP09w3bNo.roa
Signing time: Mon 11 Mar 2024 23:11:45 +0000
ROA not before: Mon 11 Mar 2024 23:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2f:c9:4b:f9:e4:d6:fa:2d:95:4d:fb:ce:1f:db:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 23:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fba9c4f8b142d357ce40054c1732cfd3dc376cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6d:f7:0a:33:98:d5:da:c4:8e:eb:ab:b6:5d:
28:25:0a:b3:4b:a9:53:33:a1:65:6b:5b:af:f4:3c:
05:fe:3f:75:50:16:81:10:e2:c1:81:8d:cf:44:b4:
6a:47:06:b9:e0:62:3f:c0:84:bc:ca:f9:bb:26:41:
92:99:4c:a3:1c:22:81:56:9a:9e:5d:a7:8d:79:1b:
f9:dc:f7:ba:21:42:94:c2:e2:bf:2e:e8:25:1b:c9:
26:e5:cc:e1:74:48:aa:40:ba:81:11:b4:d7:f6:0b:
fa:74:2a:ef:1f:13:20:c9:87:80:e2:79:e5:60:13:
04:a9:8e:d4:39:96:aa:de:d7:2c:91:bb:c9:56:03:
1c:0a:56:90:58:eb:19:48:e6:5f:cb:84:5b:a9:44:
c9:2f:a9:44:3f:d1:70:39:b6:5d:dd:b3:eb:22:07:
91:0e:d7:1d:0a:ed:7a:76:3e:36:20:9e:28:39:a3:
6d:01:41:97:e9:eb:f6:37:33:f8:98:f7:43:62:29:
ce:07:75:ea:f8:d6:e4:63:d7:a0:60:64:33:2b:bc:
25:10:dc:a5:1f:a1:b8:b9:55:84:01:8c:0e:9f:7c:
b9:b2:6b:63:cd:4e:25:2b:01:8e:a5:ee:ce:b9:8b:
2c:38:81:b9:73:77:30:dd:9c:32:7a:86:e0:8e:2a:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:C4:F8:B1:42:D3:57:CE:40:05:4C:17:32:CF:D3:DC:37:6C:DA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-6nE-LFC01fOQAVMFzLP09w3bNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:39:8f:81:ca:00:db:5e:53:89:78:02:de:cf:0b:ea:e4:a4:
fb:21:04:26:7d:cc:65:a7:06:28:fb:a1:60:0b:4f:c0:d4:48:
ca:85:fd:64:68:b1:b7:c1:0f:38:0f:eb:57:f9:1a:28:e9:e2:
ae:73:b9:f4:85:a1:dc:73:45:53:fd:6c:0e:7f:d4:be:9d:c1:
bb:6e:9a:95:bb:b1:a4:e8:6c:ba:59:bd:01:05:ac:b8:8c:c0:
a3:20:8c:bb:d9:3c:1b:e2:f8:66:f4:de:48:4e:c8:ff:bb:09:
bd:df:b4:65:d1:fe:df:35:35:40:a8:cf:13:51:80:ff:4a:cc:
6c:61:85:02:68:f8:9c:bc:77:55:9b:32:97:4f:88:38:26:0c:
2a:41:e2:70:8e:60:92:e4:9f:a4:bc:09:12:a2:c6:07:cf:68:
7c:55:e9:a9:af:c4:45:c7:6a:28:fc:b4:66:41:28:db:b0:43:
cc:c5:69:ce:2b:0a:23:48:94:cc:bb:5c:54:5c:f7:99:48:36:
8c:61:7a:64:5e:ce:72:07:7e:4f:15:81:db:cd:58:31:1f:a9:
8f:a3:d5:24:db:be:5b:70:af:08:01:25:87:1a:aa:91:3c:a3:
08:d6:d7:d4:dd:88:57:ba:1e:ad:f7:ae:fe:aa:cb:8b:72:c2:
25:30:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:32:56 2025 by rpki-client