This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/tX42yjt7xCJkXNM8FT1myD5E7gw.roa
File: tX42yjt7xCJkXNM8FT1myD5E7gw.roa (raw, json)
Hash identifier: kCn9GxdKmSXZbegXAhDnAK3bH3Mxt6cJwSg3Pwqap28=
Subject key identifier: B5:7E:36:CA:3B:7B:C4:22:64:5C:D3:3C:15:3D:66:C8:3E:44:EE:0C
Certificate issuer: /CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
Certificate serial: 021BFD26
Authority key identifier: 9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/tX42yjt7xCJkXNM8FT1myD5E7gw.roa
Signing time: Fri 24 Jun 2022 14:10:31 +0000
ROA not before: Fri 24 Jun 2022 14:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.128.97.0/24 maxlen: 24
45.128.98.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35388710 (0x21bfd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
Validity
Not Before: Jun 24 14:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b57e36ca3b7bc422645cd33c153d66c83e44ee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:68:4e:1a:56:68:61:85:5c:19:b7:e9:69:
41:6f:9f:59:18:f9:02:95:06:ab:62:31:79:f0:66:
ec:c2:84:12:97:48:e4:59:fb:0e:e7:86:e4:24:ac:
c3:54:ba:93:3e:64:0e:0c:00:30:a9:2a:3f:fe:39:
cf:36:36:e4:15:d7:8d:0f:13:e0:af:9a:bd:50:cb:
cb:6e:57:88:ae:ba:ad:18:84:cb:9d:52:5c:d3:c8:
ea:8a:f3:aa:cb:8d:de:e5:97:8b:b2:40:a7:39:9e:
4c:45:22:ca:b2:15:75:44:09:7d:5d:23:5f:a5:99:
67:c2:9e:ab:3f:af:ba:9c:5c:fc:20:8e:65:87:06:
7c:eb:f7:df:94:e2:a3:25:8c:0b:c4:ae:93:7e:42:
3d:51:38:23:ab:f0:61:99:b2:a7:3b:28:e2:78:da:
2b:99:ce:76:12:f7:3d:42:0c:22:b7:93:19:5f:6b:
58:76:31:d3:d4:47:86:cb:fa:88:25:d6:83:ac:d3:
82:6c:fc:ac:21:bb:38:1b:84:8f:1b:31:71:f8:8e:
bc:ab:4f:b0:98:c7:11:c3:6c:78:72:93:aa:cf:8d:
7d:02:18:da:6e:eb:24:c2:98:a3:00:af:ef:71:69:
a0:64:43:32:ce:73:44:5b:a6:5b:a4:a2:b7:9b:b7:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:36:CA:3B:7B:C4:22:64:5C:D3:3C:15:3D:66:C8:3E:44:EE:0C
X509v3 Authority Key Identifier:
keyid:9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/tX42yjt7xCJkXNM8FT1myD5E7gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:83:6c:0a:3c:e9:52:d3:82:8b:0a:7f:62:a2:e4:ab:80:37:
1c:95:22:40:a4:6e:a3:17:3a:3c:26:55:1c:c4:06:9b:f9:36:
f6:21:3d:c7:75:35:7a:1b:4c:75:2b:63:ec:8d:75:88:0d:0c:
b4:b3:e1:5b:e6:ed:4c:4c:34:74:4a:7a:5b:5b:e0:9d:7f:c2:
da:26:74:00:61:74:33:f8:09:90:79:2f:e0:c1:31:d1:ed:45:
48:2c:22:13:6c:cc:98:f1:66:a4:6b:d0:74:79:6a:a3:e6:5c:
6f:1a:eb:a6:12:40:d1:13:01:d6:df:ef:fa:7a:4f:c9:1c:b8:
3c:b1:42:bc:68:6e:37:3a:a7:04:7f:1c:20:09:bf:e9:03:dd:
dc:f3:65:1c:8f:8c:6e:f3:2a:0a:2e:e1:5c:a9:2e:dc:52:fc:
18:6f:f7:a0:d5:07:d0:d4:da:fd:da:e0:45:9d:aa:84:a3:bb:
74:ce:a0:f8:c8:67:e0:d0:cc:e2:ed:d0:ad:7b:6f:fb:43:e9:
ec:a7:0c:76:9f:fd:0d:ff:90:01:c3:97:07:34:23:90:8a:1c:
9d:a4:c4:ce:de:c7:2a:43:31:38:d2:40:2b:e3:85:c5:b2:73:
7b:c2:23:5f:99:60:9c:8e:fb:48:c0:a2:6f:cb:33:fa:c8:e8:
f0:1b:67:69
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAhv9JjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZjczYWRiMmE5MDljNjgxZmZmZDZjZGIxYWMzNzI1NzM5ZjZlODY4MB4XDTIyMDYy
NDE0MTAzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjU3ZTM2Y2EzYjdi
YzQyMjY0NWNkMzNjMTUzZDY2YzgzZTQ0ZWUwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJzpaE4aVmhhhVwZt+lpQW+fWRj5ApUGq2IxefBm7MKEEpdI
5Fn7DueG5CSsw1S6kz5kDgwAMKkqP/45zzY25BXXjQ8T4K+avVDLy25XiK66rRiE
y51SXNPI6orzqsuN3uWXi7JApzmeTEUiyrIVdUQJfV0jX6WZZ8Keqz+vupxc/CCO
ZYcGfOv335TioyWMC8Suk35CPVE4I6vwYZmypzso4njaK5nOdhL3PUIMIreTGV9r
WHYx09RHhsv6iCXWg6zTgmz8rCG7OBuEjxsxcfiOvKtPsJjHEcNseHKTqs+NfQIY
2m7rJMKYowCv73FpoGRDMs5zRFumW6Sit5u3QAkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS1fjbKO3vEImRc0zwVPWbIPkTuDDAfBgNVHSMEGDAWgBSfc62yqQnGgf/9
bNsaw3JXOfboaDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L24zT3RzcWtKeG9IX19XemJHc055VnpuMjZHZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvZWMzMjZkLTg0OWYtNDA5Yy04OTMzLTE5Y2NhOTEyZDgyNy8x
L3RYNDJ5anQ3eENKa1hOTThGVDFteUQ1RTdndy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
ZWMzMjZkLTg0OWYtNDA5Yy04OTMzLTE5Y2NhOTEyZDgyNy8xL24zT3RzcWtKeG9I
X19XemJHc055VnpuMjZHZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2AYDANBgkqhkiG9w0BAQsFAAOC
AQEAboNsCjzpUtOCiwp/YqLkq4A3HJUiQKRuoxc6PCZVHMQGm/k29iE9x3U1ehtM
dStj7I11iA0MtLPhW+btTEw0dEp6W1vgnX/C2iZ0AGF0M/gJkHkv4MEx0e1FSCwi
E2zMmPFmpGvQdHlqo+ZcbxrrphJA0RMB1t/v+npPyRy4PLFCvGhuNzqnBH8cIAm/
6QPd3PNlHI+MbvMqCi7hXKku3FL8GG/3oNUH0NTa/drgRZ2qhKO7dM6g+Mhn4NDM
4u3QrXtv+0Pp7KcMdp/9Df+QAcOXBzQjkIocnaTEzt7HKkMxONJAK+OFxbJze8Ij
X5lgnI77SMCib8sz+sjo8BtnaQ==
-----END CERTIFICATE-----
Generated at Mon Dec 15 14:41:07 2025 by rpki-client