This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/hNQBPaT3Mjbm_F5mv66oAR4WGQM.roa
File: hNQBPaT3Mjbm_F5mv66oAR4WGQM.roa (raw, json)
Hash identifier: 2XCj9y5WAdeqWKrbiODHzOKE14I0Xk7chdCHcEOmtT4=
Subject key identifier: 84:D4:01:3D:A4:F7:32:36:E6:FC:5E:66:BF:AE:A8:01:1E:16:19:03
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019A6E136ADAF3E3F371DEE6E42786B89F16
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/hNQBPaT3Mjbm_F5mv66oAR4WGQM.roa
Signing time: Mon 10 Nov 2025 14:02:37 +0000
ROA not before: Mon 10 Nov 2025 14:02:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.60.0/23 maxlen: 23
45.149.62.0/24 maxlen: 24
194.50.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6e:13:6a:da:f3:e3:f3:71:de:e6:e4:27:86:b8:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Nov 10 14:02:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84d4013da4f73236e6fc5e66bfaea8011e161903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:0e:32:c5:b2:c4:5f:25:c5:f1:b2:fe:1c:
02:98:28:de:5f:2b:d8:66:5d:6a:27:d0:a5:ca:3d:
bc:3d:53:12:36:3b:e4:b1:f3:0c:67:50:25:5d:af:
13:74:c8:3a:cc:7d:4f:b9:9b:a3:b5:f9:13:28:89:
4f:09:5c:3f:2a:d3:b3:19:29:33:e4:49:07:b4:b8:
4f:cb:1c:b0:12:34:20:f8:0a:dc:b2:3a:b7:ef:08:
b5:3f:f4:68:38:ee:37:72:01:e9:76:69:96:a7:d9:
86:a7:ce:e1:a9:2a:82:00:ba:02:1e:28:b4:b9:70:
6b:01:86:a6:bf:5a:5a:97:11:4c:ad:77:08:1c:7d:
a4:04:9f:6f:f2:33:7e:60:be:2a:bd:c2:be:0e:6e:
b6:00:a2:71:5d:a1:60:b5:b3:75:2d:25:fe:ba:36:
2c:1d:ea:b8:3b:43:f2:b0:b1:3f:2b:bb:b6:de:bb:
b9:3f:b6:b3:a9:14:09:3e:8c:65:64:84:4a:2a:5b:
1f:2c:d6:2c:51:a1:f5:29:ba:d3:47:3b:46:6c:f3:
52:e4:a2:1f:5a:b9:d4:90:49:24:23:b9:3a:76:5d:
ee:b1:cf:9a:02:a1:7a:54:02:bb:d1:9a:ac:1b:c9:
64:3e:8b:6c:cb:8a:50:29:64:1c:67:d8:5b:e8:16:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:01:3D:A4:F7:32:36:E6:FC:5E:66:BF:AE:A8:01:1E:16:19:03
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/hNQBPaT3Mjbm_F5mv66oAR4WGQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0-45.149.62.255
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2c:34:2e:5e:a3:bf:be:9c:48:c3:fb:3a:10:a9:3c:d4:4b:
57:12:09:58:4e:11:a8:44:64:c2:c1:d1:9c:99:4c:b7:80:ad:
68:50:6a:cd:93:78:09:18:6b:35:42:5e:a5:c8:10:d5:3e:d7:
4a:2e:bd:9f:5c:e2:12:75:48:ae:96:fe:15:7c:e2:1b:17:41:
3c:e1:5d:0b:67:91:7c:3b:68:5f:cc:b6:44:7b:cb:f0:6e:c0:
af:f6:74:18:06:30:65:f9:01:02:2f:bf:3b:db:d6:95:60:10:
e5:23:52:99:df:0b:e7:06:5e:4b:a5:d3:60:30:ca:75:22:f2:
09:bd:1f:32:3d:0a:e6:2f:33:a1:c9:4c:5c:08:e1:55:2a:6c:
9f:79:89:13:fd:1f:33:ff:11:94:c8:22:ca:50:6c:7a:0f:54:
58:54:e6:56:02:04:2c:78:99:3a:02:4c:7a:bc:b7:26:e5:b0:
e8:cd:45:0a:bd:cf:b7:b2:c6:28:8c:19:72:f2:51:29:98:87:
1e:4f:5d:94:c5:e6:af:37:2f:41:c2:1d:aa:35:99:8b:d3:7f:
a9:ae:39:30:0b:91:c8:c7:d2:6e:b4:44:34:b1:9d:a7:e4:5a:
8a:74:8d:39:b5:0e:69:70:cc:57:14:ca:cb:50:b4:01:eb:c8:
7d:74:ab:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Dec 8 03:01:05 2025 by rpki-client