This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhZEO9TbLFTlOYf1s5Nh7NLFENI.roa
File: hhZEO9TbLFTlOYf1s5Nh7NLFENI.roa (raw, json)
Hash identifier: NdErDrF1K3uvjC2tT8FeXIBjbACeEw5hQLaG8XO8rNw=
Subject key identifier: 86:16:44:3B:D4:DB:2C:54:E5:39:87:F5:B3:93:61:EC:D2:C5:10:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E60185D4549E7EA894C9FE78C934A0E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhZEO9TbLFTlOYf1s5Nh7NLFENI.roa
Signing time: Thu 04 May 2023 09:04:32 +0000
ROA not before: Thu 04 May 2023 09:04:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:e601:2dfa/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:01:85:d4:54:9e:7e:a8:94:c9:fe:78:c9:34:a0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 09:04:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8616443bd4db2c54e53987f5b39361ecd2c510d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:31:d1:3e:a9:49:69:ca:83:ff:37:c5:8f:
58:11:51:eb:49:7b:b3:db:2f:b7:22:cc:68:43:e2:
0e:fb:e3:d5:9d:ee:7f:83:88:5c:ef:c1:3d:34:7e:
19:18:f6:f4:b0:a8:8b:7f:da:90:ee:ed:82:9a:6c:
81:bf:0e:76:07:d8:d4:87:0f:3d:aa:ce:fe:63:c5:
11:cf:68:c2:18:ed:57:da:2e:84:12:26:41:5e:01:
6d:27:22:b3:df:1b:79:d8:3c:6d:25:fe:9a:9a:15:
32:b7:9e:25:59:48:fd:0d:77:11:62:f9:a8:26:a8:
00:9b:a7:74:fd:8f:c4:27:e3:fc:88:68:75:32:25:
7c:51:fe:6d:21:dd:02:62:e6:2b:08:2b:73:f7:62:
ff:5e:cd:5f:0b:ad:3e:de:40:51:b5:dd:ec:31:ab:
3e:6e:fb:eb:e8:12:ab:0d:80:1d:07:99:2c:99:61:
f7:53:56:9f:8b:78:c9:c1:fe:4b:77:a3:bb:10:69:
2b:c8:0e:03:7a:16:8e:c9:d5:de:d4:f7:24:d9:5d:
e9:11:e9:b1:c8:b8:1b:7f:68:c9:c7:77:18:2a:fc:
57:36:53:47:ce:53:88:98:a7:aa:71:5f:ec:aa:8c:
ba:d9:32:d4:fc:ef:7d:82:a2:cb:3e:17:66:4a:6f:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:16:44:3B:D4:DB:2C:54:E5:39:87:F5:B3:93:61:EC:D2:C5:10:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhZEO9TbLFTlOYf1s5Nh7NLFENI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:1f:22:ba:62:31:37:cb:f4:bd:4d:87:35:b3:43:50:15:82:
5d:8f:94:da:b9:10:23:bd:e4:37:30:05:ea:9d:f4:99:91:1a:
cf:38:bf:b3:a9:54:4e:a7:33:2b:16:65:a7:b7:2c:28:75:95:
d0:02:ba:6d:e7:84:17:07:31:8e:db:14:dd:76:ba:0d:6a:bb:
d6:f4:43:f9:5d:73:51:4c:6a:63:43:95:d3:d4:23:cd:3d:17:
a9:0c:06:3c:59:b5:dd:b9:75:24:40:c2:3a:6a:cd:f1:b7:2e:
c8:31:0b:47:e9:7c:30:a4:fb:34:97:cf:30:60:8b:a2:41:a5:
9a:c6:09:6d:51:1e:a8:53:21:5b:ca:f6:a3:66:ce:f8:1f:2f:
3d:29:e8:26:dc:e8:25:d1:00:80:af:b4:70:9d:e2:53:1b:6a:
f2:b3:05:b6:7a:05:cd:00:fe:a8:48:24:78:4b:6c:50:62:c2:
55:09:30:09:43:40:57:02:f8:84:c6:1a:fe:a5:bd:14:ba:d6:
a9:03:10:7e:90:e2:a4:88:b8:c9:7a:00:90:19:02:e2:24:86:
67:16:55:98:bb:36:40:5d:99:ea:a5:4e:5e:d7:c3:c6:4c:f8:
60:dd:c5:a7:1a:a4:50:a1:b7:03:98:b2:7a:63:45:76:4d:e7:
d6:78:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 02:00:26 2025 by rpki-client