This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/hOrFucANjUhPkHd-OR5mLROW7js.roa
File: hOrFucANjUhPkHd-OR5mLROW7js.roa (raw, json)
Hash identifier: aJMsmPhRGgP0Ru/6rH88Basbf0upMBbc6smqSJHNBEc=
Subject key identifier: 84:EA:C5:B9:C0:0D:8D:48:4F:90:77:7E:39:1E:66:2D:13:96:EE:3B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F0C973AEF8693FFFB88226776DB5E099D
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/hOrFucANjUhPkHd-OR5mLROW7js.roa
Signing time: Tue 23 Apr 2024 20:13:08 +0000
ROA not before: Tue 23 Apr 2024 20:13:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:97:3a:ef:86:93:ff:fb:88:22:67:76:db:5e:09:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 23 20:13:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84eac5b9c00d8d484f90777e391e662d1396ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:d7:32:f2:f0:51:06:f2:35:2e:ae:96:3e:
6e:89:22:f2:8c:a5:8a:56:e4:99:7a:aa:83:5a:ec:
fa:00:ce:9b:43:15:65:3d:28:cb:4f:de:63:6f:be:
a3:f7:26:f1:68:88:a7:88:7c:41:93:a2:c4:61:2c:
ef:70:77:2e:66:92:95:13:c2:5d:49:8d:b5:29:57:
d9:86:30:3b:2d:ef:fd:6b:76:03:00:01:bc:50:0b:
f0:54:34:71:15:37:88:45:e8:7f:78:ec:30:48:79:
34:33:80:30:ab:2b:c3:74:22:9c:60:07:e1:e8:43:
31:66:ac:10:c3:26:47:93:f4:d2:11:a6:d8:8a:19:
c6:76:e0:93:81:49:c4:2b:17:1a:32:41:27:f6:cb:
88:72:8f:4b:25:73:cb:f9:11:ac:dd:c6:87:6c:20:
dc:2a:0f:f5:cd:99:70:e8:40:60:50:8d:93:f3:1c:
6a:2e:a5:43:80:7d:bd:8d:cb:ab:b6:23:53:8d:1c:
04:ca:b1:ca:87:b8:33:70:93:8a:b0:23:05:3d:86:
27:de:97:af:55:ac:10:ee:7e:da:de:76:73:91:62:
35:ab:52:12:76:14:cb:aa:c6:ce:78:25:8e:27:35:
b6:e5:b5:28:8f:48:ef:8a:44:04:ff:2e:27:8e:3d:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:C5:B9:C0:0D:8D:48:4F:90:77:7E:39:1E:66:2D:13:96:EE:3B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/hOrFucANjUhPkHd-OR5mLROW7js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
ae:0d:85:09:37:1b:fd:b4:5e:cf:e3:73:52:96:58:50:c0:5b:
8f:ac:71:4f:ec:02:ae:a3:95:b2:d0:f8:3a:f8:87:7b:f7:21:
b2:63:9e:81:87:48:11:d9:cb:54:4c:27:a2:1c:76:20:c8:0a:
ab:06:c3:e9:f8:71:35:33:0e:e1:28:39:8b:63:ef:20:6b:7f:
6e:39:c7:ec:b0:fe:a6:76:33:39:bc:90:1f:82:20:ee:56:e2:
21:7f:97:a8:74:b8:3a:e0:b5:c0:ff:2a:ee:ee:f5:0a:80:fe:
bb:76:e4:71:a4:f1:2e:1b:f1:5b:c9:ea:00:dd:52:84:23:56:
f3:0c:92:86:a9:2a:7b:16:2a:87:ef:e8:f4:fc:87:89:04:70:
9f:7f:eb:4c:44:94:e0:0f:a2:96:7f:73:18:f3:a6:c7:54:bd:
0f:27:8b:1f:e3:b7:d1:90:a2:16:7e:9c:84:ce:f6:72:53:37:
c6:b4:aa:02:ca:48:a3:d1:57:bd:a3:f7:cb:80:9e:31:38:39:
df:2a:4a:41:0b:52:90:51:1f:01:79:34:b7:48:df:ff:c8:5d:
30:c8:57:62:27:5a:7e:88:49:ee:c0:48:db:66:9a:76:3a:31:
89:36:c5:84:38:4f:21:31:22:a6:e9:48:11:32:cf:7c:71:b8:
e4:ae:9f:8b
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY8MlzrvhpP/+4giZ3bbXgmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNDIzMjAxMzA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGVhYzViOWMwMGQ4ZDQ4NGY5MDc3N2UzOTFlNjYyZDEzOTZlZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ/XMvLwUQbyNS6ulj5uiSLyjKWK
VuSZeqqDWuz6AM6bQxVlPSjLT95jb76j9ybxaIiniHxBk6LEYSzvcHcuZpKVE8Jd
SY21KVfZhjA7Le/9a3YDAAG8UAvwVDRxFTeIReh/eOwwSHk0M4AwqyvDdCKcYAfh
6EMxZqwQwyZHk/TSEabYihnGduCTgUnEKxcaMkEn9suIco9LJXPL+RGs3caHbCDc
Kg/1zZlw6EBgUI2T8xxqLqVDgH29jcurtiNTjRwEyrHKh7gzcJOKsCMFPYYn3pev
VawQ7n7a3nZzkWI1q1ISdhTLqsbOeCWOJzW25bUoj0jvikQE/y4njj0GyQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFITqxbnADY1IT5B3fjkeZi0Tlu47MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvaE9yRnVjQU5qVWhQa0hkLU9SNW1MUk9XN2pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQDwQAYMBkE
AgACMBMDEQAgAQZ8AGT//wAAAY8FQ55BMA0GCSqGSIb3DQEBCwUAA4IBAQCuDYUJ
Nxv9tF7P43NSllhQwFuPrHFP7AKuo5Wy0Pg6+Id79yGyY56Bh0gR2ctUTCeiHHYg
yAqrBsPp+HE1Mw7hKDmLY+8ga39uOcfssP6mdjM5vJAfgiDuVuIhf5eodLg64LXA
/yru7vUKgP67duRxpPEuG/FbyeoA3VKEI1bzDJKGqSp7FiqH7+j0/IeJBHCff+tM
RJTgD6KWf3MY86bHVL0PJ4sf47fRkKIWfpyEzvZyUzfGtKoCykij0Ve9o/fLgJ4x
ODnfKkpBC1KQUR8BeTS3SN//yF0wyFdiJ1p+iEnuwEjbZpp2OjGJNsWEOE8hMSKm
6UgRMs98cbjkrp+L
-----END CERTIFICATE-----
Generated at Wed Dec 17 22:06:20 2025 by rpki-client