This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fvWIvK8YT1NUaes7Y4Z0mogYAfg.roa
File: fvWIvK8YT1NUaes7Y4Z0mogYAfg.roa (raw, json)
Hash identifier: 1i8E/3MYzb70526CO6z2Mbp9EZv9+1RiVkyir16ns4c=
Subject key identifier: 7E:F5:88:BC:AF:18:4F:53:54:69:EB:3B:63:86:74:9A:88:18:01:F8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019039DAF920965BDFB71A9785B805268DCA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fvWIvK8YT1NUaes7Y4Z0mogYAfg.roa
Signing time: Fri 21 Jun 2024 08:12:50 +0000
ROA not before: Fri 21 Jun 2024 08:12:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:da:f9:20:96:5b:df:b7:1a:97:85:b8:05:26:8d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 21 08:12:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef588bcaf184f535469eb3b6386749a881801f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:52:c6:73:6e:b8:35:f4:d8:b3:21:99:d0:
81:93:5e:c8:1a:c0:90:26:d5:59:f4:59:ef:fc:fb:
3e:7c:a6:05:e8:c4:0e:9c:92:46:80:43:14:d8:b4:
d7:b3:8f:6e:ba:72:02:29:8e:28:31:14:88:28:4f:
15:ce:f2:40:db:23:cf:b2:1d:6e:6d:f6:47:6a:48:
31:51:80:55:7f:06:f8:b1:8a:9a:33:b6:41:43:6a:
5f:b0:c6:0f:6f:6b:8f:22:37:b0:49:10:17:77:ef:
78:5f:bd:c5:61:fd:08:1d:81:5a:b2:fc:d5:0d:1e:
c6:ae:44:0e:b7:8c:5e:89:5d:7d:97:4e:60:c2:5e:
72:33:a7:40:a1:01:b7:b2:76:2e:67:b2:f9:14:c7:
4b:ad:e5:74:dc:dd:39:53:73:9f:43:69:ca:b4:87:
42:84:8a:30:96:de:b1:8b:bd:ae:18:bd:bd:6b:c6:
44:8c:c3:b7:1b:d5:18:cf:ff:54:6f:01:27:de:f2:
1c:0c:81:b1:57:ad:68:1c:a0:8a:e7:a2:e4:6c:3a:
e3:a8:21:6a:3d:ec:cb:05:07:5a:0b:bb:14:2e:8c:
82:dc:29:99:5f:49:25:8a:03:c3:62:1d:e0:19:9a:
85:8c:0c:98:4c:fc:b7:7b:79:4e:af:ee:f4:0d:d9:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F5:88:BC:AF:18:4F:53:54:69:EB:3B:63:86:74:9A:88:18:01:F8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fvWIvK8YT1NUaes7Y4Z0mogYAfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:75:79:23:39:72:a4:3b:11:8b:37:fa:a8:b8:32:08:4e:07:
9d:1a:8b:f6:6d:ff:ce:f8:ea:02:af:42:16:80:e0:d8:b3:41:
3d:20:cc:6e:4b:41:cb:38:d3:e0:3d:90:75:60:69:7f:0f:a4:
76:3c:98:2a:1d:48:ae:98:b1:7e:d8:67:b2:c1:0d:6b:50:2f:
97:b0:e9:34:f4:0d:b2:c3:a9:26:bd:7e:35:66:a7:61:9e:ee:
3c:7a:5d:83:62:72:3b:14:3c:64:35:77:33:75:bd:b6:c9:7a:
c4:92:d4:b7:e8:df:f2:c1:0a:41:93:4e:d2:c1:4e:79:67:8e:
fc:9e:f1:dd:be:ac:99:b4:f6:dd:fb:de:8a:be:7d:70:e7:d4:
38:5a:dc:81:2e:dc:6d:60:95:ed:b9:62:5c:c1:f8:79:8b:54:
eb:bd:02:b9:a4:2f:8b:19:06:0b:4b:80:38:4f:08:4b:55:9f:
a5:f9:3a:2c:ad:6c:94:63:7e:f2:9d:e3:c9:6f:22:9a:0b:9e:
56:b4:58:b1:17:4c:4b:2a:1d:ff:bd:1e:22:2e:7d:89:ee:de:
d2:bc:41:81:5c:42:16:69:e3:02:49:3c:2f:76:7c:e6:e1:5d:
b2:f9:b5:ca:3b:23:30:23:02:e1:94:23:e3:ed:87:8f:8f:36:
fd:aa:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:53:19 2025 by rpki-client