This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s-3XY8-JiXVys0MEA-RHZiAOJuM.roa
File: s-3XY8-JiXVys0MEA-RHZiAOJuM.roa (raw, json)
Hash identifier: B+SqkQzjNbfAsAYqldWNx41NLFer033WW+aJIhWCOvg=
Subject key identifier: B3:ED:D7:63:CF:89:89:75:72:B3:43:04:03:E4:47:66:20:0E:26:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018857F21C148B600BF0E3B65A61AB009C2B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s-3XY8-JiXVys0MEA-RHZiAOJuM.roa
Signing time: Fri 26 May 2023 12:04:24 +0000
ROA not before: Fri 26 May 2023 12:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:57f2:eeb/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:f2:1c:14:8b:60:0b:f0:e3:b6:5a:61:ab:00:9c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 12:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3edd763cf89897572b3430403e44766200e26e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:ed:e6:02:f6:53:31:f7:e8:1d:9b:5c:91:
97:43:b0:aa:05:c0:a9:47:78:4b:0b:19:f4:f7:12:
0c:e2:22:48:4f:8d:36:cb:be:16:40:fa:b3:f8:55:
49:02:4e:3b:43:6e:c8:bb:9f:10:c9:5d:db:79:d8:
4a:39:4a:9b:02:7c:cd:66:db:48:72:a9:c3:4c:27:
01:d2:74:68:05:36:42:ae:a1:96:02:3e:ce:bd:e6:
e7:99:f0:b4:ab:22:e2:6a:a2:20:6c:94:70:7b:da:
5a:33:a9:ca:19:82:f8:a9:8e:ac:5e:aa:fd:6e:ad:
94:83:e0:6e:76:95:a9:0c:97:89:95:e4:5f:a4:06:
17:4a:ba:b2:58:d7:4d:f0:3a:21:cf:fb:ae:74:dd:
e2:fc:82:00:c5:29:23:01:84:cb:da:9a:1d:72:0c:
c4:ca:b0:f0:4e:e3:fc:78:c1:f5:6c:cf:4a:a1:83:
28:93:b6:61:b5:9a:9a:60:4e:ce:7c:9e:c7:96:1a:
ee:9c:55:51:de:1f:2d:af:e1:41:01:e2:6f:58:04:
65:eb:55:81:e3:b7:8e:2c:86:d7:cd:33:07:d0:c1:
db:92:7b:c3:50:4f:25:ca:91:89:ef:c4:e1:27:75:
90:e4:9f:23:a9:5a:d1:7e:e7:43:c2:a7:db:dd:95:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:ED:D7:63:CF:89:89:75:72:B3:43:04:03:E4:47:66:20:0E:26:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s-3XY8-JiXVys0MEA-RHZiAOJuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:1d:7f:b9:0a:d4:3f:24:76:17:db:dd:09:c8:ee:e7:5c:61:
e0:0c:3f:dd:41:70:8b:49:48:8f:4d:17:2d:c0:02:ac:3b:ef:
fb:14:92:7e:c9:07:e1:a1:71:b0:8f:e8:10:0e:94:d5:e5:23:
63:11:48:c5:45:8c:b3:6f:c1:34:36:21:f6:c5:6e:7f:d2:45:
5b:44:f8:c3:17:5d:2d:ae:f8:de:af:f6:86:0f:f0:f5:09:31:
85:9d:82:8a:58:a6:44:f5:3b:dc:9b:ef:71:f0:b7:5a:e9:3e:
74:e3:13:2c:36:a1:33:3f:8e:a2:ee:76:53:36:45:5f:87:74:
32:a3:12:d8:35:19:c0:82:f0:8c:88:fe:b3:ac:af:9f:e3:53:
38:1e:53:31:dd:1c:09:dd:b8:80:a5:e2:d9:a5:4f:74:47:84:
95:30:b2:6c:fb:84:62:fd:e3:73:36:8a:4f:19:99:82:10:d1:
91:84:2b:c4:61:62:24:15:b0:2d:d4:46:cc:f0:c2:ed:6e:21:
28:29:fc:fb:d0:d0:12:d7:07:4a:a4:fb:c8:62:23:1e:eb:98:
97:96:3b:cc:57:63:6a:be:9a:31:8c:32:08:c9:63:51:88:f2:
5d:d8:2c:8a:38:54:70:86:d1:a1:27:79:9c:92:91:a0:ad:dc:
be:11:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 18:03:37 2026 by rpki-client