This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JYBLXbTSP64OT5I1LZi8xY0hnCU.roa
File: JYBLXbTSP64OT5I1LZi8xY0hnCU.roa (raw, json)
Hash identifier: m6ZbUlnzuRS36QYCkf8Pj3emh/WvOF04UUaX3eOpfro=
Subject key identifier: 25:80:4B:5D:B4:D2:3F:AE:0E:4F:92:35:2D:98:BC:C5:8D:21:9C:25
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019000888DEA29217194B78B1984AA411072
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JYBLXbTSP64OT5I1LZi8xY0hnCU.roa
Signing time: Mon 10 Jun 2024 05:04:27 +0000
ROA not before: Mon 10 Jun 2024 05:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:88:4ec1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:88:8d:ea:29:21:71:94:b7:8b:19:84:aa:41:10:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 10 05:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25804b5db4d23fae0e4f92352d98bcc58d219c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:1d:5c:db:0f:71:5c:c3:d0:f0:02:d7:75:
50:b1:f4:0f:77:08:1a:89:2d:91:c3:49:b5:b1:cd:
64:39:87:bc:1d:f4:0f:ec:85:36:19:48:06:5b:d2:
dd:56:ea:f6:85:15:18:a8:cb:3c:46:64:4c:c7:35:
b8:8d:a6:f6:40:c5:c6:bd:9b:d3:23:61:05:8e:65:
8a:cf:36:0a:75:99:6c:16:71:4c:1c:6e:54:4d:c3:
ad:94:a6:3f:56:20:1c:93:1b:c0:ab:30:e5:3f:55:
45:ed:a0:24:60:56:38:a7:9c:88:26:fd:5f:bb:9b:
77:fd:de:9e:45:77:07:71:88:13:b2:da:fe:5a:7d:
7f:b1:7d:d9:b0:85:97:db:5e:14:0a:4b:0c:39:ea:
ef:18:ed:5a:c3:9f:79:91:a0:51:63:ed:58:0f:e2:
9f:ab:b8:09:c9:2c:7b:52:49:c1:95:80:3b:79:1d:
f6:39:ae:21:f8:d9:5f:f3:37:f8:36:c3:44:31:63:
e2:13:39:77:17:35:0c:84:f5:ce:e7:41:4b:ac:9f:
ec:99:7f:66:0d:c3:0e:93:d3:20:64:7a:54:09:7c:
49:ef:d6:4d:5f:9e:45:85:a5:8e:44:e1:88:fa:45:
1c:74:4c:74:08:2d:c6:4f:28:32:93:a6:3b:b2:61:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:80:4B:5D:B4:D2:3F:AE:0E:4F:92:35:2D:98:BC:C5:8D:21:9C:25
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JYBLXbTSP64OT5I1LZi8xY0hnCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:1c:1c:87:ce:64:39:94:25:13:ef:4d:10:6c:bf:e9:ee:9c:
0e:57:88:b1:5b:6b:71:22:10:7d:c5:c4:14:2a:88:80:3f:72:
7b:2c:95:f5:76:d3:b2:9f:21:e3:06:91:3e:4b:c0:52:73:ba:
79:ce:83:35:ae:7e:f1:2b:83:53:ba:15:62:3c:26:5d:8e:bd:
39:37:b6:1f:9a:50:39:0e:64:f7:eb:4c:b5:e3:6e:28:10:9d:
c9:04:8c:08:87:ec:6d:9f:7a:7d:88:5c:66:18:e1:61:40:45:
bc:6a:39:c7:51:f6:58:2b:9d:7a:80:b8:db:21:4f:76:e9:19:
0e:49:03:91:00:85:7c:3e:51:0d:73:8f:93:e0:a5:5f:e2:72:
37:fe:16:b4:b4:41:f0:2b:1a:5f:39:ac:01:38:8b:85:51:65:
83:35:74:91:6c:2d:80:f3:d5:1e:15:43:59:69:bd:3a:ec:f7:
23:93:65:3d:8d:b9:3e:0f:60:41:20:56:58:1e:2e:c5:74:0d:
cc:ee:d5:fc:ea:2d:dc:86:eb:f0:99:8d:d5:72:ff:c7:4e:d5:
be:ec:db:01:e2:51:56:fd:c6:05:8f:15:ca:03:e9:20:c5:2a:
05:16:4f:bf:66:5e:71:bf:c4:5c:ed:7e:ed:e0:74:54:08:98:
87:4e:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:48:00 2025 by rpki-client