This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DvPMGwSzOUg0HXc8WM52yXHa5c8.roa
File: DvPMGwSzOUg0HXc8WM52yXHa5c8.roa (raw, json)
Hash identifier: WuTvYNhOJBvLanJFjLF+QmSggUrwW8XfqSZv+BYOH8c=
Subject key identifier: 0E:F3:CC:1B:04:B3:39:48:34:1D:77:3C:58:CE:76:C9:71:DA:E5:CF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019006903C71E6614A7BD37B7A894F564006
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DvPMGwSzOUg0HXc8WM52yXHa5c8.roa
Signing time: Tue 11 Jun 2024 09:10:34 +0000
ROA not before: Tue 11 Jun 2024 09:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:90:3c:71:e6:61:4a:7b:d3:7b:7a:89:4f:56:40:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 11 09:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ef3cc1b04b33948341d773c58ce76c971dae5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:99:59:7c:b0:ad:dc:b0:28:bd:e6:4b:d9:
7b:a2:c5:96:0e:96:6e:3d:30:d2:27:92:af:7f:6f:
de:3a:1e:15:78:4a:3f:b4:e7:c5:36:ac:df:52:0f:
09:54:13:af:23:b4:00:67:1e:64:76:ea:77:07:2f:
3c:c6:96:43:b1:55:50:4f:59:06:82:9d:dc:ac:3f:
4f:10:8c:5a:62:c1:b5:1e:27:23:96:5a:52:f4:bf:
31:2c:94:54:c8:0c:76:2e:c0:cf:f1:d5:9f:fe:b8:
65:a4:70:0f:e5:fd:02:53:18:e4:89:61:ca:11:ac:
bd:cb:eb:f4:e3:a3:37:9a:99:74:63:21:61:66:6d:
dc:1c:96:ea:44:31:46:25:5e:6c:12:9e:ce:05:31:
28:d3:70:56:59:15:a1:34:6d:e8:21:a7:72:58:e2:
0b:71:85:38:b1:5d:ec:26:c7:65:15:85:f6:0b:fa:
fb:83:06:fd:65:0f:3e:8a:a4:c1:cf:3b:61:10:78:
08:c8:ab:ba:fd:5a:7e:f8:eb:e3:e1:87:f3:84:5e:
0d:61:3a:b9:55:3e:6c:74:f9:84:9a:5a:88:76:7f:
81:ea:cc:5a:60:dd:43:ee:73:d2:b5:c2:35:de:0c:
61:9f:88:f7:d4:00:b4:f3:25:5c:b6:37:72:c4:ef:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:CC:1B:04:B3:39:48:34:1D:77:3C:58:CE:76:C9:71:DA:E5:CF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DvPMGwSzOUg0HXc8WM52yXHa5c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:6d:34:c2:49:8b:c4:3f:e4:92:c0:b0:74:28:6a:fe:e6:92:
77:81:c8:d1:3a:ea:c8:9d:5e:b2:9a:09:d0:28:e5:56:f9:cf:
99:13:1d:7c:d2:45:fa:20:2a:69:51:3c:5c:5a:44:f1:80:2b:
7e:d4:0a:75:89:78:9b:a4:dd:8c:65:40:a5:c7:96:8e:ef:e8:
5d:84:06:3e:ec:7d:a7:65:f4:33:3e:37:e6:24:55:12:66:97:
45:e2:53:fc:db:fe:bd:6e:a9:c4:07:dc:51:a6:62:1a:55:45:
04:03:d7:ac:e8:a8:0d:28:b7:9c:d0:54:dc:0b:09:49:c2:a7:
c3:0e:0d:45:09:0d:36:a3:a0:4a:df:59:57:b7:da:f1:1f:8c:
b6:06:8e:4a:1a:98:7c:a3:cf:b4:c1:c5:db:ea:b2:54:cd:92:
e4:19:99:87:8b:5e:c4:54:4b:f0:5f:c0:70:bd:e2:e8:0a:31:
d1:5f:78:9b:f0:c1:da:6d:e2:c2:db:ca:ff:8a:c4:91:6e:e3:
f4:5f:92:1f:8c:7b:dd:8b:53:91:53:4e:c6:f8:37:06:02:8a:
4a:e1:36:d9:13:28:57:a9:63:3e:66:4e:2d:ed:51:ae:a4:78:
c8:5f:4d:12:1f:3b:d3:25:48:4b:52:11:4c:57:65:b4:25:b7:
79:90:c4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:51:10 2025 by rpki-client