This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LK93OBS1AIv1e-_I382T1jSOpz4.roa
File: LK93OBS1AIv1e-_I382T1jSOpz4.roa (raw, json)
Hash identifier: ZmWlbC4CrbUvvrJ97ZPVirwH5QHTOnPK6fEY33w23wc=
Subject key identifier: 2C:AF:77:38:14:B5:00:8B:F5:7B:EF:C8:DF:CD:93:D6:34:8E:A7:3E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193AF2B2D94250A2FB0C572B023EEF0DBE5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LK93OBS1AIv1e-_I382T1jSOpz4.roa
Signing time: Tue 10 Dec 2024 06:04:22 +0000
ROA not before: Tue 10 Dec 2024 06:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:af2b:27cc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:2b:2d:94:25:0a:2f:b0:c5:72:b0:23:ee:f0:db:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 10 06:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2caf773814b5008bf57befc8dfcd93d6348ea73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:9f:32:f3:44:b8:09:26:fa:25:c6:d6:51:
4d:2b:38:0a:22:27:ab:5f:40:62:89:d6:de:d4:c3:
8c:4a:97:bf:49:d7:58:db:b0:43:fa:8b:30:3e:ac:
c3:12:21:3a:20:46:5c:f9:6e:62:db:2d:c2:c5:4c:
02:b6:a2:de:01:02:a0:a7:f4:07:88:dd:1a:38:d5:
e9:0f:3a:69:7c:61:ed:45:18:75:4b:f8:83:7b:81:
b0:4d:97:77:44:af:32:f9:aa:06:50:01:3c:e0:10:
c1:c3:82:ad:de:87:7b:37:7a:90:5f:80:4c:4a:b4:
ff:a7:6e:18:ca:d6:69:98:e0:3f:e1:29:00:d7:93:
ff:6f:4e:69:25:b7:3d:34:6a:49:c3:4c:10:e5:12:
f1:3a:bb:00:72:42:39:0f:36:42:46:95:46:0a:ff:
85:af:8f:45:66:29:16:1d:d7:24:b1:c1:0e:32:62:
dc:2b:56:19:50:de:23:39:02:db:b7:34:76:aa:60:
05:7c:e1:8f:31:ff:7c:2f:18:6d:aa:35:49:ce:9a:
0b:b2:95:91:43:8c:2c:bf:72:8b:75:4f:18:6d:7e:
92:fa:4b:9d:7a:9e:b7:ca:8b:c6:11:ce:f7:20:b0:
46:0b:c2:8e:f4:45:41:ba:03:ae:8b:1c:59:65:c1:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:77:38:14:B5:00:8B:F5:7B:EF:C8:DF:CD:93:D6:34:8E:A7:3E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LK93OBS1AIv1e-_I382T1jSOpz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:af2b:27cc/128
Signature Algorithm: sha256WithRSAEncryption
3f:aa:f2:f1:ee:b2:a7:08:9d:d1:56:72:ca:d4:a2:ac:9e:d0:
b2:58:7c:bd:95:a9:2a:71:0d:56:64:97:59:f2:80:ec:f7:8e:
c7:df:98:ab:1f:4a:24:4a:9b:5c:70:2f:df:0f:6c:04:cc:b5:
d1:63:cc:7f:c4:d0:21:ea:a8:4c:29:c4:3b:df:1c:77:73:ea:
0d:05:9c:67:6e:55:1e:9f:80:e1:f3:4d:15:c3:c3:86:2c:f5:
9a:b2:2f:e8:f0:c0:28:a0:ad:8e:d2:90:1c:5c:ce:65:60:92:
12:c9:31:9b:0b:e0:ac:9f:24:81:a6:b1:78:1e:12:ba:e7:0f:
a4:27:e8:40:0c:fb:84:ab:25:45:6b:b1:94:80:cc:2a:3a:c9:
ea:6c:6d:3a:a6:70:08:d3:0a:5d:f4:6d:4a:48:d3:c4:5d:51:
5f:52:3a:f1:d2:95:a5:e9:76:3b:33:09:e4:26:f6:da:18:bb:
41:ab:86:b1:c9:41:bd:a1:0e:d1:6c:e5:70:23:4b:40:8e:49:
9c:3a:7b:80:9f:c5:4b:03:0a:08:a3:f8:4f:e9:45:39:1b:03:
c0:15:f4:aa:93:1e:52:03:1c:a0:bd:2d:0f:0f:66:f6:14:59:
2b:5b:57:61:0d:6f:fd:45:6a:36:ed:ef:5a:74:0d:9b:8c:35:
8b:63:2b:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Dec 16 04:41:22 2025 by rpki-client