This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIR55zBXrS2ktOxsdUOGhMR59jA.roa
File: uIR55zBXrS2ktOxsdUOGhMR59jA.roa (raw, json)
Hash identifier: dWdBVI/05JqDzqz79pCE/xncERJcXOTedyqB1g1fZYo=
Subject key identifier: B8:84:79:E7:30:57:AD:2D:A4:B4:EC:6C:75:43:86:84:C4:79:F6:30
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E193B4FA5454ECE0F35084EFEE56ECC08
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIR55zBXrS2ktOxsdUOGhMR59jA.roa
Signing time: Thu 07 Mar 2024 14:05:01 +0000
ROA not before: Thu 07 Mar 2024 14:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:193a:a12b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:3b:4f:a5:45:4e:ce:0f:35:08:4e:fe:e5:6e:cc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 7 14:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b88479e73057ad2da4b4ec6c75438684c479f630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:3e:22:c7:8b:40:da:68:03:f6:dd:be:6c:
fe:38:d5:b9:de:f4:94:2f:3f:48:95:9a:89:56:67:
ce:fa:e5:51:3c:0d:f6:8a:ee:cb:ef:16:2c:c8:05:
f9:43:90:dd:0b:a5:bf:2f:fe:93:f1:30:00:6b:82:
d6:53:ab:5a:9c:ce:65:5a:20:7f:c3:3e:3a:d2:bb:
eb:5e:a1:98:2f:99:36:9f:34:c9:c2:ee:6b:af:37:
93:f8:49:4a:1b:a0:66:d8:ff:f0:1a:bd:5e:c4:c6:
49:3b:3e:b2:2e:1f:d0:fd:2f:2b:e5:5c:44:34:36:
b4:1a:cf:41:59:6a:4d:ee:cf:8d:ab:3b:08:97:8c:
42:37:2f:a1:97:7a:a2:6d:e9:c9:d7:e6:f0:5e:14:
79:49:85:73:85:45:f0:d1:ac:7d:db:f7:31:86:db:
ba:ae:fd:fb:3a:2f:53:88:4e:74:6d:81:fa:3c:2c:
eb:5c:f1:73:63:84:61:e8:c8:55:bb:32:0f:4b:60:
0a:5a:f8:4c:be:a8:f4:ad:f1:38:ae:08:8e:2a:71:
1f:e7:33:b6:1f:14:5b:62:97:64:68:a1:18:ab:97:
f7:e1:d7:d5:c6:47:10:0e:0d:cb:49:2f:4d:3b:7f:
da:11:0d:bc:e5:7a:3f:06:77:ce:ac:a3:d0:4c:ac:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:79:E7:30:57:AD:2D:A4:B4:EC:6C:75:43:86:84:C4:79:F6:30
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIR55zBXrS2ktOxsdUOGhMR59jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:3c:67:20:9d:c3:12:d6:46:38:9c:1c:5f:a5:73:5e:bf:ae:
cf:90:d4:f4:b7:49:90:0a:9a:fa:7e:b5:9a:e6:c2:5c:8d:7c:
4d:f5:bf:b3:ed:57:c4:5a:7a:ac:b7:d6:b7:79:50:5e:1c:0d:
05:e1:e4:88:55:05:4f:fb:56:6b:e9:28:d3:a8:b4:c3:13:5b:
68:4e:16:08:2e:bf:84:2c:b5:e8:5a:ad:0f:b1:cb:52:28:9f:
8e:f5:70:94:27:07:fd:58:0e:20:f6:c2:10:6e:ab:90:cc:64:
9b:97:ca:35:bb:39:7c:d7:8d:36:66:7b:08:74:2e:db:fc:54:
f9:8d:6b:ce:bc:09:81:19:33:07:2f:56:8c:6e:cc:ef:ad:83:
a0:4f:1b:81:b4:04:e2:94:8a:11:63:e7:d5:9e:9e:2d:68:38:
25:7a:25:57:1c:e3:a4:49:3a:25:22:49:d5:00:67:d4:ba:91:
5e:f5:22:fc:84:f6:af:e1:69:66:6a:87:80:4f:6f:77:b7:55:
7b:3b:b6:73:8f:cf:39:1d:6b:61:5d:85:3a:1b:a2:79:38:09:
2a:90:cd:ee:de:dd:8f:eb:66:ff:06:42:bc:79:11:c9:c9:65:
be:05:8d:9a:74:ed:fd:83:db:bf:92:07:e6:26:61:1b:a9:19:
ce:7a:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:21:53 2025 by rpki-client