This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/II4eBGSU-V9tLhvMxIgY0QwXNMM.roa
File: II4eBGSU-V9tLhvMxIgY0QwXNMM.roa (raw, json)
Hash identifier: gwzum+l0SHSuKWiljrP10MbAxZTfE0Pk/aD5zEXD9Wc=
Subject key identifier: 20:8E:1E:04:64:94:F9:5F:6D:2E:1B:CC:C4:88:18:D1:0C:17:34:C3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01906FE5F0239953D231B06AA89F87D0485B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/II4eBGSU-V9tLhvMxIgY0QwXNMM.roa
Signing time: Mon 01 Jul 2024 20:04:18 +0000
ROA not before: Mon 01 Jul 2024 20:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:6fe5:dbee/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:e5:f0:23:99:53:d2:31:b0:6a:a8:9f:87:d0:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 1 20:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=208e1e046494f95f6d2e1bccc48818d10c1734c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:28:6d:e5:67:8a:f7:58:01:b1:0c:e1:a1:
8f:b2:ae:ed:57:ec:63:57:fe:70:6c:5d:7c:67:d0:
9f:d0:89:68:8e:ea:25:d6:78:ba:91:36:18:96:c5:
6e:cb:86:60:b3:b3:83:28:61:34:bf:5d:ca:99:94:
bf:a4:2e:a5:00:84:fb:41:7a:5b:97:4f:ab:bf:f8:
d0:ff:4b:a9:9a:3e:90:00:a0:d1:24:08:08:df:ee:
e9:cf:9d:6e:be:4b:d9:f6:ff:9f:13:07:b7:ff:0f:
e5:5d:24:b9:7a:77:a2:c3:45:31:2f:7e:ee:81:98:
ce:39:bb:40:2c:9e:5f:ab:87:32:33:2d:f2:d4:9a:
e9:2d:28:5d:2d:08:76:77:15:c4:90:36:dd:41:73:
f2:88:fb:1b:57:fb:92:3c:09:7b:b5:89:06:27:66:
60:b2:8f:e8:ae:46:72:9c:fe:5a:84:a0:bb:9d:38:
fa:9e:73:84:c6:03:8b:fc:e2:59:31:18:b0:63:af:
a3:c7:ce:ab:35:c8:7e:3b:8f:fb:49:90:60:09:c6:
0f:17:a3:73:89:5c:ca:ad:fb:9b:91:a3:28:a4:22:
ee:93:81:c5:57:b3:e8:92:5a:02:8f:3a:25:7a:96:
d7:de:b4:93:ed:32:3a:a3:bd:95:7a:2e:12:ce:58:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:1E:04:64:94:F9:5F:6D:2E:1B:CC:C4:88:18:D1:0C:17:34:C3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/II4eBGSU-V9tLhvMxIgY0QwXNMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:62:92:ee:72:69:59:4c:4e:2e:01:23:d4:b7:9a:1d:1a:7a:
4a:23:e8:e7:90:e9:50:eb:ea:9c:e7:ce:eb:40:b8:9c:55:33:
d8:e6:6e:e8:22:69:84:e3:d2:a1:71:8b:eb:3d:92:eb:8a:70:
40:fc:18:4f:c8:78:44:84:3d:98:26:fa:f8:38:85:48:33:12:
68:84:26:e7:f8:8e:37:f5:b7:2b:1b:dd:33:06:ef:65:1a:18:
50:9e:a1:7d:7b:5a:e6:ad:ba:56:a2:c1:cb:cd:53:11:b1:1f:
c4:2a:81:89:17:17:ca:78:aa:88:2e:7b:9e:8b:72:cc:e4:e0:
c0:68:be:08:c1:0f:01:ee:a1:31:23:02:d7:1f:3d:af:93:8a:
f1:29:84:3b:69:70:f3:b1:62:b8:f4:53:7f:5d:fa:80:2f:52:
96:0a:14:7b:f7:14:1f:01:0c:b8:4c:1d:c9:75:0e:cf:04:25:
fc:d6:02:55:7a:ca:cb:b6:bd:04:c4:d6:30:6a:8f:ad:7d:5a:
c4:f7:68:0c:ef:01:88:90:c2:1b:cc:ae:e8:43:c9:09:68:61:
79:61:bf:41:19:7c:0c:5d:35:e7:89:ed:c6:08:e5:e2:e2:79:
d8:04:c0:da:52:3f:42:d3:48:c9:da:ee:9c:52:7b:f6:ce:38:
95:e6:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:29:16 2025 by rpki-client