This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9X0xxS5rEXw8ZlD25RB4tvZA0OY.roa
File: 9X0xxS5rEXw8ZlD25RB4tvZA0OY.roa (raw, json)
Hash identifier: 8YaBC8kC1UoDgjpy1DkiwwmgTEdHLybmz4r7/UvEJhI=
Subject key identifier: F5:7D:31:C5:2E:6B:11:7C:3C:66:50:F6:E5:10:78:B6:F6:40:D0:E6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01902508881200AEEC9578CB4263FBECDAB6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9X0xxS5rEXw8ZlD25RB4tvZA0OY.roa
Signing time: Mon 17 Jun 2024 07:10:34 +0000
ROA not before: Mon 17 Jun 2024 07:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:08:88:12:00:ae:ec:95:78:cb:42:63:fb:ec:da:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 17 07:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f57d31c52e6b117c3c6650f6e51078b6f640d0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:50:15:7d:c9:7c:94:4d:12:52:6d:d6:62:
c3:aa:0b:9e:c2:24:d8:87:ce:80:70:a2:0f:6f:94:
65:b5:8c:8e:57:de:2e:6d:d0:ff:5e:a4:0c:fd:e4:
26:79:88:ce:69:47:20:0a:a1:8e:65:26:ba:41:03:
58:d2:d3:b0:ed:16:14:5e:3b:b7:d5:6d:23:e4:01:
6d:7c:51:bb:bc:79:de:1e:91:b0:74:39:c3:89:53:
f8:82:30:9b:20:0e:bd:42:1d:39:bc:96:87:5b:88:
2d:05:df:bb:23:b1:96:13:c5:7a:48:92:e7:57:f8:
f2:de:e0:60:7b:a7:d0:58:10:8e:13:8d:bf:07:17:
88:89:68:f0:20:b5:be:1b:f1:f9:5c:c5:2b:9c:04:
2d:2d:7f:1a:80:e7:93:e2:d4:e7:3d:d3:71:ad:80:
93:ab:15:fe:b3:56:ad:11:2e:86:bb:5b:da:02:5d:
cf:09:dd:ac:b6:72:9e:de:57:c0:34:82:be:18:a5:
d9:67:64:bb:80:94:71:cf:52:8d:b6:55:54:5c:21:
37:02:59:c2:25:69:57:70:cf:17:fd:12:0e:e7:e3:
a5:29:7f:51:09:ac:44:86:a8:82:bd:71:98:fe:37:
b4:b9:f7:6b:c3:c0:36:5e:9d:9c:3f:f8:e7:2d:1b:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:31:C5:2E:6B:11:7C:3C:66:50:F6:E5:10:78:B6:F6:40:D0:E6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9X0xxS5rEXw8ZlD25RB4tvZA0OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:55:94:82:8e:9f:f2:e3:f1:7b:66:ac:d2:1b:b9:52:63:a4:
64:39:a7:76:68:ba:58:08:47:80:29:59:5c:65:cb:fc:ce:4c:
35:4f:9e:e3:17:d8:3a:b6:5f:8d:f5:20:82:ae:42:af:5d:51:
83:b1:29:7e:1d:88:70:65:45:7d:4a:10:38:d4:1e:7f:39:c7:
f1:6b:5d:4d:6d:7e:a9:16:69:01:9c:03:df:75:f0:61:02:de:
f9:05:aa:04:df:d1:1b:e5:b9:ed:b3:18:3f:7a:5d:9b:c5:52:
1e:e0:e2:dc:20:72:1a:02:b2:a6:1f:e6:f2:35:6f:48:9e:66:
9b:6a:6c:9f:92:d3:ec:d1:39:6b:65:93:07:2e:d0:35:35:6d:
ab:40:c8:09:a0:60:96:d7:b1:38:06:06:e8:be:ee:6b:c0:8d:
df:10:55:9c:22:fe:db:93:c3:6f:7f:f4:ba:40:25:88:aa:7e:
d5:86:1c:54:aa:88:07:1a:52:65:60:03:2b:2b:34:34:1c:39:
48:fa:3f:34:f3:a3:20:5b:ff:56:d3:27:29:b0:53:70:ca:3e:
1c:70:c2:5e:33:89:90:dc:90:62:21:0c:f9:38:a1:19:19:47:
43:47:0c:1f:e5:9a:5c:c4:e0:b3:ff:f4:47:de:14:35:03:dd:
f5:a5:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:38:07 2025 by rpki-client