This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u_g3Jzc2dq3kj3QdeBKIPO6IqSM.roa
File: u_g3Jzc2dq3kj3QdeBKIPO6IqSM.roa (raw, json)
Hash identifier: hBCDH+SD68PMQgw9qdtkUSJ0It3HT1Ll3K0hKE1R3EY=
Subject key identifier: BB:F8:37:27:37:36:76:AD:E4:8F:74:1D:78:12:88:3C:EE:88:A9:23
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE096263005613D07EA9F420F4EE851A0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u_g3Jzc2dq3kj3QdeBKIPO6IqSM.roa
Signing time: Tue 04 Jun 2024 00:11:27 +0000
ROA not before: Tue 04 Jun 2024 00:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e0:96:26:30:05:61:3d:07:ea:9f:42:0f:4e:e8:51:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 4 00:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbf83727373676ade48f741d7812883cee88a923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:25:b1:a8:81:87:2c:48:e1:04:34:7a:81:
84:1a:5a:c0:95:66:86:37:f4:b1:d2:a8:9d:fc:a5:
eb:79:2c:f5:8b:e6:3d:50:79:b5:dc:58:7f:94:53:
52:7e:93:31:a1:b4:a6:10:8a:3d:87:61:b5:30:5c:
38:9d:69:9f:f0:80:f8:13:d0:e6:cd:75:92:2f:da:
09:f7:c2:9c:d9:b6:7d:f3:6d:6a:bd:3a:b3:da:19:
61:23:46:57:68:2b:da:14:d2:60:88:58:18:c4:c0:
30:54:e4:4a:ed:ee:5c:b6:9f:a1:48:fb:1e:0b:c7:
6c:cd:7d:63:45:4c:73:0a:ee:35:95:ee:c3:83:69:
ce:ff:e2:5c:5e:06:25:66:90:67:81:d0:24:13:c8:
c9:bc:70:df:9b:1e:9a:59:30:4e:94:76:40:82:d6:
7f:6a:38:13:51:f5:6b:ee:66:93:cb:52:9a:ea:0d:
1f:d2:14:c4:61:0c:9c:10:92:17:74:16:69:e0:82:
8c:de:eb:fd:ff:27:39:b7:d8:26:42:32:31:67:c8:
d0:fb:fd:45:b3:8c:f4:d9:03:2c:8a:c1:58:91:89:
82:81:d9:7c:70:fb:0f:ea:9b:f8:6e:83:0e:27:d6:
4d:7f:5a:5e:11:55:4e:cb:72:08:7b:54:45:a7:91:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:37:27:37:36:76:AD:E4:8F:74:1D:78:12:88:3C:EE:88:A9:23
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u_g3Jzc2dq3kj3QdeBKIPO6IqSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:95:85:00:81:34:b7:65:1f:a0:20:6c:73:fb:b8:2f:29:b9:
44:cf:39:b0:a8:cb:68:29:ff:fa:c7:2d:45:38:94:b1:fd:f0:
fa:b3:ad:0c:4e:56:3b:41:30:48:33:9b:72:cb:ea:bd:27:4f:
3f:2c:93:ef:0f:8d:07:3d:10:57:78:41:24:1c:c2:55:6e:c9:
74:c1:7e:17:43:68:d5:25:4f:2e:9b:ec:8f:98:1e:c9:ec:0e:
51:f6:51:16:a4:eb:b8:38:81:4f:c8:da:a2:60:b8:5e:ef:f6:
22:6d:2e:88:f0:e3:53:a1:5f:df:44:4a:07:f1:3a:6f:9b:3f:
e7:a1:1c:36:9c:d2:3f:de:45:05:a9:0c:b1:eb:8a:82:cf:47:
5b:94:13:7d:c7:3e:05:cd:d9:9e:2a:db:4b:08:b0:a1:24:66:
b3:73:1e:a0:36:3b:13:6b:6f:4a:35:4e:aa:20:03:a3:cc:23:
13:11:59:87:42:a1:82:54:62:e0:b5:02:15:e3:eb:d7:01:0f:
f1:ab:95:16:bb:7e:de:c7:97:5b:45:d1:38:04:e3:e7:15:5c:
c6:48:af:10:fc:43:29:de:26:8c:41:22:90:d6:91:38:f7:42:
63:56:32:96:39:d7:09:ab:ea:7e:fb:46:77:cf:c1:42:38:80:
a5:2d:22:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/gliYwBWE9B+qfQg9O6FGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjA0MDAxMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmY4MzcyNzM3MzY3NmFkZTQ4Zjc0MWQ3ODEyODgzY2VlODhhOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIIlsaiBhyxI4QQ0eoGEGlrAlWaG
N/Sx0qid/KXreSz1i+Y9UHm13Fh/lFNSfpMxobSmEIo9h2G1MFw4nWmf8ID4E9Dm
zXWSL9oJ98Kc2bZ9821qvTqz2hlhI0ZXaCvaFNJgiFgYxMAwVORK7e5ctp+hSPse
C8dszX1jRUxzCu41le7Dg2nO/+JcXgYlZpBngdAkE8jJvHDfmx6aWTBOlHZAgtZ/
ajgTUfVr7maTy1Ka6g0f0hTEYQycEJIXdBZp4IKM3uv9/yc5t9gmQjIxZ8jQ+/1F
s4z02QMsisFYkYmCgdl8cPsP6pv4boMOJ9ZNf1peEVVOy3IIe1RFp5EjIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLv4Nyc3Nnat5I90HXgSiDzuiKkjMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvdV9nM0p6YzJkcTNrajNRZGVCS0lQTzZJcVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE6VhQCBNLdlH6AgbHP7
uC8puUTPObCoy2gp//rHLUU4lLH98PqzrQxOVjtBMEgzm3LL6r0nTz8sk+8PjQc9
EFd4QSQcwlVuyXTBfhdDaNUlTy6b7I+YHsnsDlH2URak67g4gU/I2qJguF7v9iJt
Lojw41OhX99ESgfxOm+bP+ehHDac0j/eRQWpDLHrioLPR1uUE33HPgXN2Z4q20sI
sKEkZrNzHqA2OxNrb0o1TqogA6PMIxMRWYdCoYJUYuC1AhXj69cBD/GrlRa7ft7H
l1tF0TgE4+cVXMZIrxD8QyneJoxBIpDWkTj3QmNWMpY51wmr6n77RnfPwUI4gKUt
ImM=
-----END CERTIFICATE-----
Generated at Mon Dec 15 13:22:16 2025 by rpki-client