This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s6e38PHGiEHJSDuiA1plTSkwif4.roa
File: s6e38PHGiEHJSDuiA1plTSkwif4.roa (raw, json)
Hash identifier: cXyX7hJ84NmjbBQPC3+qd7neT2g3HVcNNMpeYeD8zhY=
Subject key identifier: B3:A7:B7:F0:F1:C6:88:41:C9:48:3B:A2:03:5A:65:4D:29:30:89:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863C12C4D4FF8743256A7AC0BB0037EF6B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s6e38PHGiEHJSDuiA1plTSkwif4.roa
Signing time: Fri 10 Feb 2023 16:05:08 +0000
ROA not before: Fri 10 Feb 2023 16:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:3c11:f67d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:12:c4:d4:ff:87:43:25:6a:7a:c0:bb:00:37:ef:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 16:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3a7b7f0f1c68841c9483ba2035a654d293089fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:ea:1c:f8:bf:fa:d7:3f:36:c9:34:e1:26:
18:5b:1a:e7:f3:b6:60:bd:7f:8c:bf:b0:df:66:03:
43:ff:0b:b0:07:8e:8f:fe:10:3a:7e:fa:cd:bf:f9:
25:de:29:9c:73:fd:bc:3a:cb:33:6a:63:d0:96:87:
e8:cd:d0:70:01:f7:9e:2f:26:8b:5c:10:2f:98:ec:
31:07:fd:33:7c:47:72:13:b4:51:d7:60:7a:0d:37:
6b:fe:1f:a9:26:c9:34:4a:20:b9:5a:d3:82:8e:f1:
1e:4d:55:aa:ab:91:f2:24:8d:76:d9:1c:c1:3c:23:
d3:7d:ad:6b:be:12:35:dd:ec:bb:06:9d:63:0c:c3:
2c:66:39:73:98:24:8a:b5:97:31:1c:51:4d:34:1c:
8b:4f:2b:41:fe:02:cc:bf:ed:0d:85:7a:69:9f:c5:
fe:78:9c:9b:7c:93:9d:ed:0e:33:1e:13:1a:04:23:
94:6d:f7:dc:21:82:cd:2b:10:39:da:4b:d0:5e:50:
57:db:b6:f9:ca:4d:e9:a4:1f:d0:91:bc:84:c2:2e:
90:22:69:53:e7:c1:8e:f8:c7:7f:31:0c:16:9d:8e:
52:fb:bb:c5:45:95:4d:48:c6:f6:a3:17:ef:ec:41:
5f:e8:e1:39:89:5a:54:d4:6e:46:a8:3c:37:46:62:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:B7:F0:F1:C6:88:41:C9:48:3B:A2:03:5A:65:4D:29:30:89:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s6e38PHGiEHJSDuiA1plTSkwif4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:ae:0e:8f:52:19:8b:f0:e9:42:da:27:5d:59:e4:d2:d7:37:
71:4d:71:d9:38:3c:33:02:39:3f:b1:f4:5e:ca:3d:e7:7c:b4:
28:61:d0:6b:43:8a:68:cc:25:69:cb:16:8a:98:3a:e8:d7:ff:
bc:e7:31:a9:23:58:4c:52:25:f7:65:fd:8b:cc:2f:b7:02:cd:
30:10:a4:7f:50:1e:d3:08:ed:2d:30:14:89:50:4a:8c:bf:e5:
b8:95:98:31:dc:7e:36:2c:b7:bf:9c:36:dc:14:17:12:69:b3:
82:8c:27:e8:39:eb:fd:42:8e:37:8d:92:2e:86:fd:2b:ad:07:
0b:8d:7f:3f:be:a1:ae:2f:bf:e5:e2:22:1c:f6:32:2c:a0:15:
02:6c:e8:ba:5c:0a:3d:d7:5f:85:7a:55:12:fc:02:18:59:e2:
0c:a1:72:a1:31:6c:f4:3b:93:98:86:8a:2b:76:82:eb:dc:ac:
bd:b8:b2:11:f8:3c:52:c8:32:b7:18:a8:08:f3:5e:6f:4f:86:
b3:0d:ee:d9:08:ff:79:81:f4:53:fc:d8:2b:4f:89:2a:13:b1:
2f:59:c4:d3:1a:ea:4f:0e:60:18:94:91:cf:cf:2f:f7:63:a8:
05:fb:e6:a5:45:65:45:52:7b:e4:7d:fd:59:53:b6:61:e0:aa:
be:2d:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 23:46:21 2025 by rpki-client