This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNL_88Woct_T6luEswoue12Xh5I.roa
File: NNL_88Woct_T6luEswoue12Xh5I.roa (raw, json)
Hash identifier: JY5j0w75d0IzVK/O1rqDiG1/Sae9JDT0ruM/33Thf3A=
Subject key identifier: 34:D2:FF:F3:C5:A8:72:DF:D3:EA:5B:84:B3:0A:2E:7B:5D:97:87:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C1955064C7767E21750DFB97C7DABA65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNL_88Woct_T6luEswoue12Xh5I.roa
Signing time: Wed 08 Mar 2023 14:17:13 +0000
ROA not before: Wed 08 Mar 2023 14:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:95:50:64:c7:76:7e:21:75:0d:fb:97:c7:da:ba:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 14:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34d2fff3c5a872dfd3ea5b84b30a2e7b5d978792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:57:af:0a:72:ce:49:09:5a:05:f5:50:46:
24:49:de:53:08:fe:65:84:3c:ea:6f:12:11:ec:03:
e1:5b:d6:ce:b3:86:98:4d:6d:93:37:b1:b4:af:12:
60:03:d9:aa:c5:86:1a:b3:f9:22:15:6e:27:e6:a9:
15:34:69:d9:0a:25:62:b9:78:4e:22:00:53:18:54:
01:ea:33:04:38:2a:19:3a:8a:11:49:f1:9c:7e:46:
16:2c:43:e4:8c:f8:d1:67:ff:62:26:97:11:2c:06:
53:0d:00:f7:62:d8:11:e6:9b:e3:79:c5:69:6e:2b:
d3:88:98:04:4e:90:46:98:4c:b8:c1:2e:d0:53:00:
e8:12:3d:90:b8:6a:f5:b6:b7:2b:e1:17:b0:7a:0a:
01:79:6d:aa:bc:0a:6d:cc:1f:85:37:4d:d8:04:f4:
6c:87:7c:31:b1:32:f3:19:43:36:0a:c6:d5:70:c9:
24:04:7e:aa:60:59:3e:bc:af:3a:05:c9:89:5b:87:
d2:6a:d9:cc:b5:a1:9c:c9:99:b6:8d:a1:2d:a0:9a:
3e:75:9f:06:71:46:19:4b:17:1f:5f:42:7f:48:77:
5d:74:48:49:58:1e:3e:ba:e3:da:b9:a9:5f:f6:16:
ec:a6:86:ac:2b:4d:44:cc:c7:58:8f:eb:b7:0e:5f:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:FF:F3:C5:A8:72:DF:D3:EA:5B:84:B3:0A:2E:7B:5D:97:87:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNL_88Woct_T6luEswoue12Xh5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:5b:40:08:d9:08:87:35:6b:90:4c:c4:4e:66:f7:ce:63:1b:
20:b9:09:1a:74:9d:58:a2:56:df:3f:1b:0c:a5:0b:e3:13:b6:
57:3d:36:ba:5c:0b:70:54:a7:dd:53:34:b7:0c:62:12:06:0f:
07:d1:50:dd:e5:c7:28:5a:30:78:03:0e:18:42:c6:bf:ee:96:
25:de:8f:0c:a9:23:96:c7:1c:ee:37:fd:6a:ab:1c:e3:58:da:
25:ed:54:ff:6b:cf:7e:97:3c:0e:ae:a8:99:3e:83:36:9b:c4:
0f:37:23:55:da:45:06:c0:41:36:08:8f:70:ab:30:1c:c5:2e:
b0:9b:c1:c1:d0:f2:1e:58:0d:a3:e4:ba:b6:87:54:49:f1:17:
ff:fc:40:a5:5d:ef:b3:07:de:43:ac:b9:d5:87:20:57:ba:75:
00:2f:3d:49:52:a1:db:1c:59:52:61:2f:b6:ce:89:bb:3d:87:
f3:28:0b:83:6b:4f:0a:7a:c4:c8:ed:6c:95:31:00:dc:3d:91:
bb:6f:6f:b8:ab:ea:e5:de:e1:26:7a:47:66:10:54:09:98:72:
5d:20:41:36:b7:1d:92:88:a8:a4:47:9f:df:5d:4d:a6:d7:e4:
e9:8b:45:22:d6:2a:fe:13:c9:98:97:48:4a:91:f7:6d:6f:1d:
1d:a8:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 07:28:22 2026 by rpki-client