This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lodZgjogPF5cVxZMZqbKTcbtNCA.roa
File: lodZgjogPF5cVxZMZqbKTcbtNCA.roa (raw, json)
Hash identifier: 0Z57MarLG38Ha6Gs9dkAQoIuPqQJpPm46/6GDgJUmt0=
Subject key identifier: 96:87:59:82:3A:20:3C:5E:5C:57:16:4C:66:A6:CA:4D:C6:ED:34:20
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE69C4E980839A07C6F64326C636FE0D7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lodZgjogPF5cVxZMZqbKTcbtNCA.roa
Signing time: Tue 16 Apr 2024 11:13:07 +0000
ROA not before: Tue 16 Apr 2024 11:13:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:9c:4e:98:08:39:a0:7c:6f:64:32:6c:63:6f:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 16 11:13:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=968759823a203c5e5c57164c66a6ca4dc6ed3420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:3f:e1:3c:c5:29:05:6c:2f:18:9c:ea:24:
df:78:78:ba:37:38:9c:e1:7c:43:32:7d:16:a6:bb:
ab:f8:d0:47:21:c5:7a:ad:9f:98:09:3f:0e:90:c7:
2f:2c:da:57:8f:df:fc:e3:4e:6f:1e:18:9d:88:bd:
eb:ee:4a:0f:1d:11:ef:98:ec:6f:47:a2:d2:62:f3:
1c:fd:de:dd:72:08:37:04:e7:5a:79:39:91:3d:81:
8d:c7:1c:7f:77:24:38:75:f9:88:2d:8a:c6:81:39:
c4:67:7d:de:76:2d:3f:e8:19:6c:b3:09:1f:ba:c5:
37:32:44:d3:94:44:f1:94:23:93:2c:9e:39:d4:dd:
69:15:91:a4:8a:7b:b3:f7:82:78:96:e2:30:04:f5:
c5:3e:2d:8f:bd:7e:95:99:88:36:52:ed:8b:78:64:
73:06:ff:1a:ca:6f:22:66:e6:18:48:ed:80:11:21:
59:0c:87:d0:0e:a8:b9:a0:bc:fa:df:f1:80:24:62:
63:02:95:21:2f:17:b9:bf:d4:5e:bd:ce:b3:4d:3e:
c3:18:d2:1c:6d:fd:58:c1:24:51:f7:de:d4:1e:bd:
5e:89:51:e7:f8:05:91:45:3f:16:01:35:92:cd:4c:
49:70:ea:4e:be:0c:ee:70:33:ac:6e:bf:15:e9:91:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:59:82:3A:20:3C:5E:5C:57:16:4C:66:A6:CA:4D:C6:ED:34:20
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lodZgjogPF5cVxZMZqbKTcbtNCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:24:26:05:3c:0b:a7:00:74:02:78:c2:35:4b:ef:61:73:0d:
34:53:e2:bf:e0:87:99:8d:8d:b7:18:04:81:13:37:e8:d5:80:
6b:02:0e:0b:89:1b:e6:05:40:68:18:2b:77:5e:9c:6a:10:83:
05:a4:d6:92:14:6e:e4:34:39:38:43:c8:7d:d9:21:39:0a:ee:
ac:21:b5:34:a6:35:9f:78:45:64:14:39:a7:90:7a:84:14:43:
6a:c8:f5:2e:66:a1:16:3f:15:0d:2c:24:8f:a6:27:29:f6:56:
0e:5d:ab:1a:2c:00:99:1d:14:05:3d:95:8a:ff:e5:22:95:0d:
4a:7d:31:b3:8f:38:3f:37:a1:a2:8d:54:dd:ed:f2:78:04:38:
46:a5:c9:c2:ff:bf:a2:ec:61:21:4a:54:60:b4:15:db:cb:c2:
df:47:b5:2e:43:0c:41:55:4d:75:4b:bf:95:7b:75:f6:63:78:
b9:0e:d3:14:75:5e:df:53:96:48:b4:a5:e9:81:46:94:41:f3:
0a:d2:74:ea:ac:3d:4d:3b:8d:96:21:38:19:cb:6b:13:b6:2b:
14:05:a3:81:eb:41:71:89:59:de:38:39:97:47:f5:d5:3e:8a:
c5:24:39:be:e9:76:f2:66:0e:de:f0:ef:c5:93:3c:b8:3d:61:
ab:2c:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 15:20:10 2025 by rpki-client