This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qXy2zh6sKBIBuxI2VXuU_co-rlA.roa
File: qXy2zh6sKBIBuxI2VXuU_co-rlA.roa (raw, json)
Hash identifier: nvTwBNQ4zf+Mw0SgqfZYIOYLWkoyjCGjxM3i/afBVvw=
Subject key identifier: A9:7C:B6:CE:1E:AC:28:12:01:BB:12:36:55:7B:94:FD:CA:3E:AE:50
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01907992704808DEF40F5965E89DD967EF56
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qXy2zh6sKBIBuxI2VXuU_co-rlA.roa
Signing time: Wed 03 Jul 2024 17:09:18 +0000
ROA not before: Wed 03 Jul 2024 17:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:92:70:48:08:de:f4:0f:59:65:e8:9d:d9:67:ef:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 3 17:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a97cb6ce1eac281201bb1236557b94fdca3eae50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:9d:90:61:a1:3b:75:b5:50:e9:a1:fa:53:
05:95:cb:15:30:02:d5:09:8f:08:56:21:27:4a:b1:
9f:b2:23:4e:23:78:5d:41:bf:97:3d:ae:79:4b:bc:
ee:67:22:51:92:3b:f0:7e:d7:4f:cd:c9:d8:af:dc:
28:4b:79:17:43:61:2c:29:73:58:7b:93:b2:93:9c:
eb:89:3d:62:fe:a6:85:e6:e5:e1:85:1b:da:7d:be:
23:94:6f:43:cb:b1:61:c2:bc:8d:34:02:73:7f:22:
1e:62:eb:30:57:d5:05:3f:be:5d:e5:e5:31:cb:2c:
24:8b:48:3f:48:51:59:56:5e:ed:0a:bc:d2:fc:48:
2d:4e:ab:6e:00:ef:61:a6:05:e8:49:3b:11:04:4e:
d7:ec:71:27:c1:b1:4f:80:c8:cc:1a:e9:27:d3:3f:
34:85:07:e5:f0:c8:fa:2a:40:fc:57:19:ab:b5:94:
d1:a8:29:9c:25:10:d8:60:bf:d1:6d:90:ed:ee:b4:
63:c3:30:24:a9:33:b1:df:53:3c:d4:cb:84:33:e7:
09:2c:aa:13:01:c3:e5:de:9e:2e:aa:1d:27:22:fd:
e3:95:d1:8f:a9:67:65:01:b8:18:74:19:20:2d:28:
43:5a:1d:9f:6d:59:49:9b:b7:55:51:e7:a8:72:bb:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7C:B6:CE:1E:AC:28:12:01:BB:12:36:55:7B:94:FD:CA:3E:AE:50
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qXy2zh6sKBIBuxI2VXuU_co-rlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:71:bf:1f:de:d9:95:c0:a8:bd:b4:80:ac:1e:c2:60:5f:6a:
b2:78:46:8a:af:b3:dc:1a:6b:5e:2b:51:70:c7:af:b4:a9:91:
ac:c0:e3:3c:a2:8e:a9:68:54:6a:34:43:86:95:91:15:04:91:
2f:55:4d:5a:e8:2b:c3:71:df:44:b4:ba:db:a2:35:70:4b:79:
d6:a0:8d:b2:e2:29:31:10:b6:6d:50:34:15:53:fc:35:f6:ed:
11:3f:df:67:f3:a8:42:ca:b1:3c:5c:e5:6e:f8:1d:b1:3a:60:
53:03:47:90:db:5d:29:9a:14:68:a4:4a:14:87:32:5e:64:c0:
47:02:05:1f:fc:7b:b4:d3:83:03:01:b5:d4:d3:0e:95:ba:98:
16:11:80:46:18:4a:18:2d:e7:d4:67:28:91:86:e2:7f:9a:39:
ed:ca:3f:08:3b:45:5a:60:30:1e:f3:f4:65:19:7b:f3:e8:89:
95:ce:c0:7b:b5:c6:80:07:5b:d7:75:de:1a:29:5b:df:80:99:
9a:ca:ce:f2:90:22:cb:05:db:c9:46:9a:40:74:50:d9:09:95:
e0:f1:89:dd:f8:6f:3c:8b:45:8c:e5:a7:31:42:5d:54:d9:84:
49:62:a0:c1:23:c3:a4:c1:69:6f:bd:95:4a:a8:f7:b4:ff:3d:
bb:94:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:58:46 2025 by rpki-client