This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8VP1UQyUVlC_-WZjk6rjpCXW0C8.roa
File: 8VP1UQyUVlC_-WZjk6rjpCXW0C8.roa (raw, json)
Hash identifier: HLLTgX3danTARVDa5Z9byi613d1I+7yZRmnGE5undKI=
Subject key identifier: F1:53:F5:51:0C:94:56:50:BF:F9:66:63:93:AA:E3:A4:25:D6:D0:2F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4A277A99993BF24E8D0D4CB842BF8447
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8VP1UQyUVlC_-WZjk6rjpCXW0C8.roa
Signing time: Sun 17 Mar 2024 02:04:44 +0000
ROA not before: Sun 17 Mar 2024 02:04:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:4a27:3c1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4a:27:7a:99:99:3b:f2:4e:8d:0d:4c:b8:42:bf:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 17 02:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f153f5510c945650bff9666393aae3a425d6d02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:e9:61:54:cb:27:0e:6b:34:e2:c6:fd:8f:
21:2b:eb:30:cd:c2:36:78:45:81:44:5f:e3:b1:13:
a7:1b:19:cb:ba:1b:af:a0:03:d6:42:07:7b:f6:d1:
f0:9a:01:02:6f:5f:87:a4:33:bb:96:7e:04:7b:7c:
f3:51:ed:7a:91:4e:a7:e6:3b:9f:34:72:a3:02:98:
4e:f0:3b:01:ed:4a:c2:3c:fc:24:15:dd:bf:d3:5b:
00:20:63:e5:6f:27:1c:b8:ad:fd:28:1b:53:b0:08:
19:49:56:90:e1:29:b7:26:ef:4a:8b:bd:4a:dc:c1:
f4:f5:b5:36:ba:b0:11:0d:65:bb:79:7e:fb:9a:7a:
d7:c9:cc:31:f9:be:41:d6:db:a0:38:47:3d:d5:55:
be:3a:47:ff:e9:5d:37:19:83:ce:62:b2:1e:fd:b9:
19:16:4f:f9:dd:13:f9:8f:7d:53:c2:f0:3e:56:d6:
db:37:23:d8:ee:4a:70:fa:55:75:fb:ce:84:a2:d8:
46:20:08:3a:fb:29:90:a6:35:fb:e7:84:6c:0e:a4:
1d:cb:7d:e5:1f:bb:5e:43:d5:0a:ab:43:1d:14:6a:
cd:37:20:80:23:34:e8:3f:e2:d2:f1:14:c1:bc:6a:
6c:43:bb:8f:78:f8:da:0b:78:5a:5a:8f:0d:70:e0:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:F5:51:0C:94:56:50:BF:F9:66:63:93:AA:E3:A4:25:D6:D0:2F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8VP1UQyUVlC_-WZjk6rjpCXW0C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:4d:56:cf:0d:93:ac:1a:65:e7:bc:12:ed:df:f1:86:f2:63:
03:63:69:6e:d9:66:7e:b5:e9:42:8e:cd:b0:c4:f9:2c:21:e8:
7c:24:5e:10:2c:a4:d5:d4:91:a5:b6:64:e7:b7:64:f9:2d:5e:
d8:cf:92:8d:c8:31:d5:94:57:44:b1:47:9c:d5:f8:1e:df:10:
45:5d:86:cd:0a:67:e7:97:5f:1d:d4:01:df:67:17:35:6c:34:
0b:8b:0b:62:a2:73:35:a9:54:e8:69:99:b1:49:c1:10:42:eb:
96:14:3e:a9:f2:fa:f4:1b:1e:91:30:3a:19:ac:35:3c:67:3a:
53:bf:9a:07:c4:5b:e3:e8:91:ea:f3:d4:02:32:dc:1c:90:0b:
83:34:44:60:2c:9e:f6:5b:22:cc:1c:bf:39:62:e2:78:ba:15:
48:02:81:cf:ed:e4:0d:4c:90:66:49:3a:65:ce:d9:95:5b:88:
c8:29:6f:b9:18:3b:1a:48:33:57:95:1d:f8:b8:a8:e8:4a:0d:
b6:f5:e5:bf:d8:db:07:12:07:b5:87:65:1f:db:b8:af:47:bd:
db:d8:42:6b:20:ea:11:56:3d:40:1e:ed:71:f3:6c:ca:20:87:
63:7a:cb:0d:f9:7f:e7:0f:f8:77:2c:a3:dc:b9:81:e3:6b:0c:
2f:fc:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:29:14 2025 by rpki-client