This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-z996tzUF9hR70NDyT5yxw5ikXM.roa
File: 1-z996tzUF9hR70NDyT5yxw5ikXM.roa (raw, json)
Hash identifier: XdtGdSQswPah20qMGrOHz+8sJM2je3mLRVLcUjhxLF4=
Subject key identifier: FB:3F:7D:EA:DC:D4:17:D8:51:EF:43:43:C9:3E:72:C7:0E:62:91:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869856B92E350FF9B16D61F5ADD37AE5A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-z996tzUF9hR70NDyT5yxw5ikXM.roa
Signing time: Tue 28 Feb 2023 14:04:25 +0000
ROA not before: Tue 28 Feb 2023 14:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:9856:b037/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:56:b9:2e:35:0f:f9:b1:6d:61:f5:ad:d3:7a:e5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 14:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3f7deadcd417d851ef4343c93e72c70e629173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:0f:88:59:34:3c:a6:76:72:31:68:1f:95:
92:f8:99:d8:7e:77:bb:23:98:af:d1:53:86:28:7c:
b4:c5:26:eb:8e:cd:f5:71:ed:9e:be:6a:33:80:ad:
e1:10:96:9d:35:43:6b:b6:bf:28:d4:3f:24:d5:68:
98:3b:95:ba:05:cc:c1:27:9b:d5:ea:e9:8f:80:4b:
3f:25:94:89:0e:30:2e:3d:e2:a3:f8:68:3f:88:2f:
eb:47:6c:8e:ca:97:af:e0:ac:10:0a:1e:32:a2:e5:
53:24:fe:f6:a8:bc:a9:84:8b:81:d6:a7:1a:ac:20:
0f:40:ea:1a:47:68:33:00:0d:4c:2f:e8:cb:15:a7:
21:a3:2a:5f:54:ce:c6:ed:ad:b8:6c:ea:33:9b:6e:
be:90:c1:b8:ee:0c:87:e9:74:9f:04:be:29:b6:38:
79:47:11:61:0c:37:bf:2c:94:84:14:d9:3c:79:9e:
4e:c9:46:21:46:18:6a:ce:25:56:69:be:0d:bb:b3:
1a:b5:14:e1:71:b3:89:07:93:75:16:ff:e0:ab:95:
6b:eb:3c:90:35:73:ec:d3:ad:9f:3a:31:5f:f8:69:
a4:99:57:b5:3e:97:21:27:25:41:c6:bc:05:2c:69:
56:8c:44:f9:ec:c2:7a:77:a1:28:fc:3a:39:93:7b:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3F:7D:EA:DC:D4:17:D8:51:EF:43:43:C9:3E:72:C7:0E:62:91:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-z996tzUF9hR70NDyT5yxw5ikXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:4d:0b:5b:64:e7:f0:78:92:69:47:0a:18:6c:e3:26:59:16:
b5:ff:2a:65:9e:46:9a:59:a8:89:ee:de:a5:de:ca:b0:ea:03:
e4:48:70:3d:99:ba:aa:67:51:72:25:73:7e:d1:2a:96:ea:3a:
90:c0:75:07:2f:81:1b:bc:4a:11:ed:4e:2f:79:8d:d3:b6:d2:
97:5a:40:e3:e6:2c:dc:31:7d:e7:ac:fb:ad:7c:4a:2a:33:70:
56:39:ff:bd:99:db:12:ec:7e:e4:d9:05:b2:62:14:55:50:4a:
6c:cb:6d:f0:30:7f:cb:98:87:43:25:1e:7f:44:20:d3:79:c8:
c9:bf:a0:0d:24:43:33:10:04:47:ce:4c:e6:75:7f:d7:9e:f7:
84:60:a2:39:05:6f:7d:a5:b7:ed:82:c3:24:ee:f4:6d:d0:63:
6a:17:f0:b1:ed:19:bb:5f:89:23:ea:01:b5:98:2d:0c:19:3d:
bb:4f:a0:c9:0f:ec:bc:1c:2b:73:f1:51:90:62:e3:1d:12:e5:
6d:5d:14:3a:91:dd:5d:a5:79:8c:69:df:2f:93:d2:8f:3c:de:
6b:d9:f4:04:a1:95:1a:d3:ec:f6:a7:a4:e7:1c:8b:89:38:89:
2b:b0:3e:11:d3:c5:ae:0f:80:a0:5b:2f:f4:9a:09:2b:d9:2d:
53:4b:88:8c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYaYVrkuNQ/5sW1h9a3TeuWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI4MTQwNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjNmN2RlYWRjZDQxN2Q4NTFlZjQzNDNjOTNlNzJjNzBlNjI5MTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGcPiFk0PKZ2cjFoH5WS+JnYfne7
I5iv0VOGKHy0xSbrjs31ce2evmozgK3hEJadNUNrtr8o1D8k1WiYO5W6BczBJ5vV
6umPgEs/JZSJDjAuPeKj+Gg/iC/rR2yOypev4KwQCh4youVTJP72qLyphIuB1qca
rCAPQOoaR2gzAA1ML+jLFachoypfVM7G7a24bOozm26+kMG47gyH6XSfBL4ptjh5
RxFhDDe/LJSEFNk8eZ5OyUYhRhhqziVWab4Nu7MatRThcbOJB5N1Fv/gq5Vr6zyQ
NXPs062fOjFf+GmkmVe1PpchJyVBxrwFLGlWjET57MJ6d6Eo/Do5k3uZQwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPs/ferc1BfYUe9DQ8k+cscOYpFzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS16OTk2dHpVRjloUjcwTkR5VDV5eHc1aWtYTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAuTQtbZOfweJJpRwoY
bOMmWRa1/yplnkaaWaiJ7t6l3sqw6gPkSHA9mbqqZ1FyJXN+0SqW6jqQwHUHL4Eb
vEoR7U4veY3TttKXWkDj5izcMX3nrPutfEoqM3BWOf+9mdsS7H7k2QWyYhRVUEps
y23wMH/LmIdDJR5/RCDTecjJv6ANJEMzEARHzkzmdX/XnveEYKI5BW99pbftgsMk
7vRt0GNqF/Cx7Rm7X4kj6gG1mC0MGT27T6DJD+y8HCtz8VGQYuMdEuVtXRQ6kd1d
pXmMad8vk9KPPN5r2fQEoZUa0+z2p6TnHIuJOIkrsD4R08WuD4CgWy/0mgkr2S1T
S4iM
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:12:26 2026 by rpki-client