This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6kHcDiVJRzAhAx9BA2l-duOQFd8.roa
File: 6kHcDiVJRzAhAx9BA2l-duOQFd8.roa (raw, json)
Hash identifier: k7dvYhSVQd2324oi9Ln8T9co3/71ZCuY6zMzrO4LPFg=
Subject key identifier: EA:41:DC:0E:25:49:47:30:21:03:1F:41:03:69:7E:76:E3:90:15:DF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB5A85F1DBA5B3E360242D9CCCDF56E3D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6kHcDiVJRzAhAx9BA2l-duOQFd8.roa
Signing time: Sat 06 Apr 2024 23:04:54 +0000
ROA not before: Sat 06 Apr 2024 23:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:b5a7:cdcb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b5:a8:5f:1d:ba:5b:3e:36:02:42:d9:cc:cd:f5:6e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 23:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea41dc0e2549473021031f4103697e76e39015df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:c3:fd:bd:67:2d:f2:8b:ed:b4:ee:db:33:
f8:77:34:5e:87:89:37:3e:52:6e:18:64:1e:d9:bb:
64:71:b2:58:5b:70:32:61:6b:4b:0b:d5:aa:fa:5f:
35:1b:23:52:56:c6:10:0c:79:bd:c4:44:25:b4:98:
41:e1:31:c7:6e:be:76:14:7d:49:a8:b0:38:71:0a:
27:71:ba:90:0c:59:b8:bd:b7:3a:b7:ba:85:7e:7c:
7c:62:6b:2e:36:c3:b5:f0:3d:cb:e9:e9:66:25:a4:
65:2f:71:19:b2:96:f4:15:1a:f9:04:f1:cd:37:c4:
93:1a:68:a4:5b:bc:e2:5e:8c:8f:ec:0c:e0:5f:19:
fe:78:dc:e4:f6:a5:8c:8f:bd:f6:c5:2e:7a:cf:52:
7a:4b:ed:76:a2:74:6f:cb:e7:98:c5:62:23:f7:98:
1b:45:db:9e:9d:6f:1a:9a:7a:5a:e8:12:dc:54:ab:
cc:47:fd:ef:49:7e:ca:f4:51:10:95:04:e3:b8:7f:
9d:a3:d2:68:36:aa:99:c5:6f:17:e5:be:b3:75:98:
55:08:41:61:d9:f5:24:7c:89:f0:f2:db:93:c3:fc:
c9:ae:40:2b:85:3a:a1:b7:16:65:0c:6e:b9:e4:e0:
57:00:04:77:24:3b:1a:f4:fb:70:d2:87:a9:27:8d:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:41:DC:0E:25:49:47:30:21:03:1F:41:03:69:7E:76:E3:90:15:DF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6kHcDiVJRzAhAx9BA2l-duOQFd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:cc:09:5f:57:fd:28:62:66:e6:a6:bb:3b:92:05:eb:82:47:
f3:bd:30:8b:8b:ba:2e:78:f3:2d:a1:13:f4:f2:fa:a2:fb:59:
42:6f:1d:fc:95:12:dd:6d:ba:b9:ef:92:21:40:7c:d9:c7:89:
0d:d4:57:d6:f0:6f:35:02:db:55:85:c3:97:44:d6:6a:0a:f7:
7e:c5:73:57:62:63:a9:c5:6c:9e:bc:21:5b:db:ea:f1:1f:b4:
af:db:fe:83:70:8f:f1:a5:c7:ff:ea:f9:49:91:66:c3:9c:1f:
60:90:3c:f5:fc:34:55:71:a2:18:76:ca:02:e1:0e:47:c6:d0:
70:a1:a3:03:d7:8b:a4:a7:cf:04:fc:fc:51:99:1d:52:47:7a:
53:32:a1:7e:c6:6d:07:15:d2:55:c5:14:09:61:51:cf:9f:c0:
75:39:b7:e2:92:d3:7c:f2:06:6f:85:6f:e7:37:16:4b:c6:9d:
0e:e3:be:ad:8b:7e:08:cd:b4:be:b8:ea:55:0a:97:d0:15:dd:
d0:ec:87:05:0d:b1:6e:07:b0:7b:70:00:ac:3b:b7:2c:2c:4d:
58:d5:97:6b:47:22:bd:e8:82:9a:c7:22:f1:32:ee:62:54:a9:
86:a1:24:52:6d:5a:4c:d7:92:6f:94:97:f5:da:30:db:39:d8:
e5:90:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:06:37 2025 by rpki-client