This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WKlr8zlgzwLJCakEO8HwPIaW3Dw.roa
File: WKlr8zlgzwLJCakEO8HwPIaW3Dw.roa (raw, json)
Hash identifier: Hu//nioWoXIoQPqrLEdD5jPKeFb6luvR+1fEr86SbUI=
Subject key identifier: 58:A9:6B:F3:39:60:CF:02:C9:09:A9:04:3B:C1:F0:3C:86:96:DC:3C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01916604974D0E2608CA95EAE74859989346
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WKlr8zlgzwLJCakEO8HwPIaW3Dw.roa
Signing time: Sun 18 Aug 2024 15:04:22 +0000
ROA not before: Sun 18 Aug 2024 15:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:6604:704c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:66:04:97:4d:0e:26:08:ca:95:ea:e7:48:59:98:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 18 15:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58a96bf33960cf02c909a9043bc1f03c8696dc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b5:f2:a2:1d:92:35:1c:b6:eb:84:38:f3:a8:
28:d7:32:f4:f7:97:06:71:e9:66:d3:8d:14:e0:be:
46:68:55:45:c8:15:df:38:8d:01:fc:b8:0d:9d:41:
8b:34:53:d9:89:0b:72:df:dc:e0:8f:4a:99:7c:60:
a4:f6:d9:a4:86:66:57:4e:a9:78:c0:22:6e:fc:fd:
38:fe:15:73:94:d5:b4:92:ac:59:11:99:ec:cb:49:
73:3d:68:75:d1:40:11:04:f5:50:cd:3c:4b:30:47:
49:1e:df:10:58:48:27:9c:5b:76:32:c5:e9:c6:96:
6e:a5:49:c6:66:20:05:75:c4:77:e8:ff:71:53:c9:
bb:f8:f4:28:7b:d3:c0:8b:55:2b:8c:d2:7c:d0:e4:
f0:0c:8b:43:0f:58:78:57:5a:32:c5:87:50:a1:b3:
63:68:ce:a5:5a:00:d7:5b:5c:e1:5f:3e:48:b3:77:
3e:3a:17:38:11:4a:6b:76:77:7a:6b:b3:8d:ee:c9:
95:d2:a9:d4:03:85:c0:bf:7a:b8:97:73:ee:22:da:
ef:9d:89:58:fc:87:f5:fb:4b:d4:45:d3:ac:2b:1e:
54:e3:7d:9c:ec:36:61:fd:b4:c0:be:10:1c:72:fa:
a0:d7:62:2c:a4:21:6a:6a:79:ad:21:77:71:ea:59:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:6B:F3:39:60:CF:02:C9:09:A9:04:3B:C1:F0:3C:86:96:DC:3C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WKlr8zlgzwLJCakEO8HwPIaW3Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:6604:704c/128
Signature Algorithm: sha256WithRSAEncryption
4c:86:6a:57:01:d1:ad:d6:37:e3:04:90:1e:f1:9d:35:ce:88:
52:0d:d6:84:97:46:70:8e:4d:af:a7:9c:2a:7f:18:ca:c6:4f:
b2:d2:e8:9a:d5:f7:c4:9a:2f:e8:97:ce:7f:ca:9c:b0:20:ed:
fe:5d:d1:5d:6f:5d:06:7f:a8:fa:e9:1f:6f:8d:73:4e:69:03:
02:28:2f:c6:c3:d5:eb:11:a9:75:f9:bb:b0:b0:89:46:71:47:
42:da:ac:a9:0f:d8:8f:01:ec:64:d7:80:d8:17:aa:89:13:79:
5c:3f:7f:d5:4c:e0:79:3b:be:22:f0:32:47:da:95:31:00:58:
81:f9:2f:0d:67:51:c0:9f:31:c9:be:80:68:b9:fe:29:e4:ce:
84:03:dc:a9:54:af:d6:d4:ee:bf:6a:f5:21:2c:4f:f8:56:a0:
29:60:a6:35:61:8f:71:6b:3c:dd:c2:f3:4d:ce:c8:27:5d:59:
a6:8c:87:97:67:f1:44:cd:54:d0:26:d2:9c:35:43:c4:38:d8:
56:1e:b6:e0:55:8d:13:5e:62:e1:b9:5f:73:46:b0:bc:8e:61:
5b:2e:dc:09:b2:45:e2:1a:9e:f3:0f:3f:15:4e:e4:48:53:f2:
ef:6d:d2:46:22:08:90:ac:c8:bb:04:fa:ee:97:9b:cc:e2:0a:
36:03:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 09:13:22 2025 by rpki-client