This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sph9zZv_Y6_2m1T52rY8uvPih3g.roa
File: sph9zZv_Y6_2m1T52rY8uvPih3g.roa (raw, json)
Hash identifier: uY96osPbB1vWEsSwjgByjxT+RqRVHigJrR53G48GHlk=
Subject key identifier: B2:98:7D:CD:9B:FF:63:AF:F6:9B:54:F9:DA:B6:3C:BA:F3:E2:87:78
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FAF6C9F7CA318C49F6F8596889F31F0FF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sph9zZv_Y6_2m1T52rY8uvPih3g.roa
Signing time: Sat 25 May 2024 11:04:42 +0000
ROA not before: Sat 25 May 2024 11:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:af6c:3db2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:af:6c:9f:7c:a3:18:c4:9f:6f:85:96:88:9f:31:f0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 25 11:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2987dcd9bff63aff69b54f9dab63cbaf3e28778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:22:05:b7:d1:a1:db:28:bc:43:8a:9b:3a:
26:52:bc:a5:98:d0:e2:1e:c9:85:e6:e6:9a:da:2b:
42:1d:84:ff:13:46:3c:6f:7e:69:3c:61:50:86:5a:
3a:da:67:22:89:29:36:ff:89:f0:ec:5f:9a:76:91:
46:9e:31:21:0d:d1:9f:5a:10:09:fc:02:ea:f9:91:
74:74:2b:3a:33:b5:12:45:76:dc:dd:11:cf:c9:d5:
0c:97:04:bb:9e:77:6c:55:df:e9:e5:ad:73:b1:6b:
af:ab:93:1b:71:e1:66:54:7c:ff:12:fe:f7:2a:ec:
d9:e9:46:a1:3e:c5:61:f6:c2:f0:a9:41:ca:8b:68:
62:e1:3a:2e:50:be:e4:29:37:3b:76:9d:83:cb:a2:
b0:75:57:d0:c3:ba:ce:42:cc:db:77:87:f6:0c:f9:
b6:3b:95:42:63:55:0f:48:42:d4:2b:14:bb:9d:5e:
48:69:50:3c:35:ee:0c:09:65:fe:b5:09:6c:f0:a6:
0a:94:77:85:a0:0c:7d:38:20:37:ac:db:d2:34:fa:
d5:ba:e5:b9:ea:4b:97:df:5c:09:43:e4:4c:a5:fb:
6e:41:ba:50:ac:55:ac:e6:fa:9f:04:10:ed:d3:69:
bb:b7:60:64:3b:0a:14:ae:03:78:b6:11:db:6e:d6:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:98:7D:CD:9B:FF:63:AF:F6:9B:54:F9:DA:B6:3C:BA:F3:E2:87:78
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sph9zZv_Y6_2m1T52rY8uvPih3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:ea:1d:f5:75:c6:8a:3e:27:33:0a:07:2b:73:c3:8c:94:66:
5d:31:c0:1b:e5:50:62:48:97:20:e3:91:32:c3:f1:b0:cc:a3:
b0:bd:f9:65:ac:b3:be:ac:6a:df:dc:0d:c9:79:8f:64:5c:89:
bc:8c:b1:48:ef:51:f3:af:1d:a3:37:f4:25:e7:26:ab:ef:1c:
d4:31:43:59:75:12:68:c0:a2:1e:4f:36:74:69:b8:5a:26:67:
1a:86:4f:98:8a:77:6d:5b:79:de:7a:39:4a:7a:22:34:49:fc:
52:fe:1a:de:ae:d4:f2:b8:08:f7:41:a0:50:4c:d1:26:92:d3:
48:64:33:90:eb:8b:fc:bb:f3:e4:e9:36:8e:48:ad:c4:fe:b5:
d0:b2:5b:a4:9b:dc:c2:cc:b8:95:20:29:f7:0e:a1:56:1c:c9:
78:f4:8b:8b:91:10:d0:1c:c0:db:52:d1:22:34:94:bc:6a:d6:
dc:bb:e2:54:99:52:bf:a3:5f:ef:e7:a0:23:49:29:b7:a2:e5:
7f:f3:31:c7:b6:9f:a9:64:bc:01:5d:ab:82:72:bb:e0:7f:75:
2a:6f:f8:d5:94:7a:94:8a:0c:95:42:ae:32:e6:ce:49:cb:c0:
21:d1:a9:2a:c9:98:33:0c:16:db:78:c7:14:ac:a4:71:f0:02:
35:c2:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:03:47 2025 by rpki-client