This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3k4DRfayzjXBaEjeTAQA9wIlJA.roa
File: u3k4DRfayzjXBaEjeTAQA9wIlJA.roa (raw, json)
Hash identifier: G+I81uyYM3X2n3q7jSA2ER+glnGmu/0LcJH5LoM3NWQ=
Subject key identifier: BB:79:38:0D:17:DA:CB:38:D7:05:A1:23:79:30:10:03:DC:08:94:90
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01903C6DE92C698A975BF9A00D1C6B2C8CA4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3k4DRfayzjXBaEjeTAQA9wIlJA.roa
Signing time: Fri 21 Jun 2024 20:12:34 +0000
ROA not before: Fri 21 Jun 2024 20:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:6d:e9:2c:69:8a:97:5b:f9:a0:0d:1c:6b:2c:8c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 21 20:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb79380d17dacb38d705a12379301003dc089490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:6e:72:e6:f0:6b:6d:4b:97:0a:f5:f5:89:
48:2d:95:13:6a:a8:f0:21:7f:f2:06:ed:76:de:f6:
6f:d2:c6:bf:b8:9c:3c:22:28:ca:3e:d3:c0:f5:b1:
db:a3:51:a5:29:cb:63:db:7d:12:53:32:98:73:f3:
a2:cd:9c:1a:bd:41:68:a2:64:b7:4d:8f:f9:6a:f5:
06:2f:fa:07:e5:10:e1:41:0b:bc:db:e5:80:8f:0c:
18:41:39:35:8e:87:31:70:fc:06:2f:5f:8a:48:55:
43:23:1c:06:a9:11:64:ff:0f:ab:8f:02:54:8e:9d:
47:b8:09:36:c2:5f:7d:73:43:da:2e:b0:7a:56:38:
de:b3:f5:82:c6:e8:04:45:41:c3:2c:23:e3:43:a1:
06:25:b9:2c:9d:12:b0:1d:ff:8d:65:61:e8:52:f6:
be:ed:43:77:92:b5:c0:99:79:2b:d5:57:d8:65:34:
5f:1a:ae:38:0e:3d:be:70:70:c8:88:75:4e:31:84:
a2:d7:3a:ca:02:02:c8:0f:14:0b:9e:55:7b:51:ca:
c8:b6:74:f7:84:26:56:6c:54:42:75:27:59:35:bd:
33:05:02:73:0f:b1:a1:b7:9d:a5:a0:de:fb:e3:86:
b2:81:ef:49:cc:3f:c1:43:7c:56:96:7a:55:a7:d9:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:38:0D:17:DA:CB:38:D7:05:A1:23:79:30:10:03:DC:08:94:90
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3k4DRfayzjXBaEjeTAQA9wIlJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e3:d5:c5:13:d0:d9:a3:f8:e4:e3:01:68:dc:c8:b1:22:cc:
bc:51:36:f7:2c:6e:3b:cb:cd:47:9c:05:56:0e:78:f0:df:e0:
b5:fb:3b:0c:ab:6c:24:5f:cd:92:bf:24:47:7e:89:bd:e4:6d:
0e:5b:e6:39:d5:d1:d3:15:d6:f5:c3:ef:0d:45:1e:2d:f9:4d:
d4:b6:b4:7e:57:66:fe:7f:a8:be:48:62:40:49:e3:32:2f:d9:
5c:8b:50:60:76:b2:4a:29:1f:4e:06:b3:f4:38:41:eb:e0:43:
cd:ba:9f:7d:39:7d:9e:24:dc:ad:18:6d:84:a7:be:67:29:0e:
f9:4c:4c:eb:3e:01:56:0e:2b:cc:4e:df:c4:c9:cf:95:8e:a1:
73:bb:d2:34:bd:0f:6b:e4:9b:12:44:4b:71:0c:d7:d7:76:42:
f5:f0:96:94:ce:03:22:73:35:e0:7f:b1:91:05:f1:45:6e:85:
52:f4:0e:0f:18:5c:1d:e0:cc:6b:55:1b:78:5e:50:9a:6d:b4:
e2:fb:96:e7:db:3f:72:f5:b2:f5:f3:c0:60:00:8a:39:55:f2:
6c:4f:89:fe:4f:f9:6c:15:2d:38:f9:e9:3a:d1:69:53:6b:7d:
62:6a:8b:24:a1:8f:fb:b6:ae:05:75:fa:fe:cd:7d:9e:53:81:
38:49:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:52:09 2025 by rpki-client