This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jcRsPxym4h9GlCH2C7C_9VwkPLs.roa
File: jcRsPxym4h9GlCH2C7C_9VwkPLs.roa (raw, json)
Hash identifier: YKWdcn5+meQ3EW4aQLBCcJk74J4qwLo4IYRp+CYJ0Gw=
Subject key identifier: 8D:C4:6C:3F:1C:A6:E2:1F:46:94:21:F6:0B:B0:BF:F5:5C:24:3C:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863C85366B8F58F17A25236663B18FAEA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jcRsPxym4h9GlCH2C7C_9VwkPLs.roa
Signing time: Fri 10 Feb 2023 18:10:08 +0000
ROA not before: Fri 10 Feb 2023 18:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:85:36:6b:8f:58:f1:7a:25:23:66:63:b1:8f:ae:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 18:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc46c3f1ca6e21f469421f60bb0bff55c243cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:a0:50:c2:74:ab:67:c8:43:23:cb:23:af:
2b:8a:5b:e0:62:0c:56:2f:52:48:a4:88:f9:88:02:
17:20:19:47:5c:f5:3e:29:d1:35:b0:1d:c9:e2:dc:
ad:a4:51:0a:4b:bd:a5:48:59:2d:8c:9f:b8:c7:6d:
de:45:a4:1a:18:d4:81:bc:1f:38:84:2a:72:63:ee:
78:17:d5:82:2f:43:98:8d:92:77:de:b0:47:00:f3:
4b:3e:b5:61:d3:cd:45:50:ed:a1:57:03:1c:bf:db:
06:5f:6b:8e:42:d8:f9:ee:61:ce:97:bc:6c:ca:b1:
b7:6e:ac:f6:e6:60:3a:c4:e2:82:db:63:05:35:d9:
da:b7:fb:9d:15:56:43:fc:0b:b8:2d:26:8a:07:a3:
bd:3e:78:bb:44:db:f9:9e:05:d8:cf:45:6f:1f:75:
de:8d:b3:b5:ff:0c:ff:a3:00:d1:8a:1b:1e:62:18:
a6:b8:d7:80:2e:8b:53:10:2f:76:de:87:b9:ca:b4:
b8:e8:a8:48:84:62:09:8c:e9:3a:0d:67:ed:11:5a:
1f:be:c1:b0:a0:27:f0:d1:09:1e:45:ff:38:6a:d9:
f9:77:f9:c3:e7:09:c7:84:d0:a0:39:bb:1d:63:e5:
c3:53:da:16:7b:34:a5:b3:7e:3b:b3:ad:0f:b4:43:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:6C:3F:1C:A6:E2:1F:46:94:21:F6:0B:B0:BF:F5:5C:24:3C:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jcRsPxym4h9GlCH2C7C_9VwkPLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:87:16:16:bf:87:e8:46:81:55:6e:ae:7b:02:eb:5b:e5:9a:
2e:05:60:8d:2f:26:b0:e6:29:83:db:c0:2c:7d:9f:cc:8b:61:
c1:3e:79:0e:2d:4e:57:e8:6b:4d:e4:2c:91:00:06:3b:c8:91:
a4:e5:8c:a0:66:2a:b3:2e:a6:9c:df:ed:4b:30:03:d0:2f:65:
d4:de:ef:99:06:b7:90:df:69:46:b6:3b:28:88:d7:31:80:52:
2c:3a:90:9d:32:50:f9:d6:fc:fa:1c:99:8c:9c:46:db:31:4f:
9a:93:78:4f:c4:04:68:11:45:a6:f8:45:50:c7:bd:a6:43:3d:
9b:db:8a:d5:69:ac:28:b2:9e:d1:bd:b3:57:e0:2c:64:18:f1:
37:0a:01:bf:2a:0f:1e:f3:c9:a1:b5:19:1a:f0:ac:83:8d:07:
a6:68:3f:c8:eb:6e:34:a9:68:37:fe:1b:25:ad:f7:01:11:f9:
08:32:e3:4e:f6:ae:8a:86:72:5a:2f:d6:6a:e5:27:8c:68:c6:
24:07:80:e2:67:4e:3e:e4:36:b2:57:26:b9:0a:4c:50:c9:87:
c5:f4:91:f2:38:24:c2:10:55:cc:2f:ae:56:de:e7:99:5a:63:
c1:94:d0:b9:23:f3:4a:ff:e2:67:6f:95:30:3d:7d:7e:fa:8d:
d3:0a:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:23:57 2026 by rpki-client