This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PH5piplEKNI3DurdKBen_tsKNis.roa
File: PH5piplEKNI3DurdKBen_tsKNis.roa (raw, json)
Hash identifier: 1PVph3ic2aI6zq8tMt4F6wFURLRtOUswU02BaqoQ+KE=
Subject key identifier: 3C:7E:69:8A:99:44:28:D2:37:0E:EA:DD:28:17:A7:FE:DB:0A:36:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFB018EC8A28DBB1B00FCD7256CB7B10B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PH5piplEKNI3DurdKBen_tsKNis.roa
Signing time: Wed 04 Oct 2023 14:04:57 +0000
ROA not before: Wed 04 Oct 2023 14:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:fb01:11e7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:01:8e:c8:a2:8d:bb:1b:00:fc:d7:25:6c:b7:b1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 14:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c7e698a994428d2370eeadd2817a7fedb0a362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:ed:5c:c9:07:ef:87:95:1e:c8:3a:4b:d9:
ca:6b:c2:54:72:29:6c:2b:d5:46:fb:84:57:68:64:
ad:57:08:cc:bf:81:32:ce:14:de:ce:4b:da:51:8d:
8b:95:3c:bd:ce:90:86:7f:1b:1f:7a:2f:46:fb:ae:
9e:73:9c:b8:c6:0b:81:e2:08:ef:15:1b:ac:b8:97:
db:bc:8a:1f:9e:ea:4e:88:37:35:64:ac:b6:eb:61:
94:9b:a0:6d:c3:63:d7:95:b4:90:32:a2:b8:59:26:
8f:ae:14:52:17:a9:d8:d4:a4:f5:09:cb:bf:1d:1e:
b0:0d:9a:db:b2:c5:e5:8d:b8:2c:2a:9d:22:b4:b7:
19:2c:00:09:95:cb:0c:05:91:77:2c:1a:2f:fa:8b:
fc:72:b0:2c:00:86:ce:4a:81:15:56:f5:fb:13:00:
e7:4f:95:d5:4a:b1:54:03:fd:97:08:81:30:71:a9:
ff:30:a0:ce:b6:e0:e1:93:b3:7d:8b:dd:b1:57:a6:
d0:7c:1e:c0:bf:50:d0:66:9e:86:28:f6:4a:bf:36:
6e:57:57:33:32:e6:94:56:86:e0:fd:a6:27:b6:e2:
37:01:87:ec:5f:85:cc:7a:4a:47:47:f1:eb:f3:81:
9c:17:bc:66:69:11:5e:f7:00:76:df:4e:05:82:6d:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:69:8A:99:44:28:D2:37:0E:EA:DD:28:17:A7:FE:DB:0A:36:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/PH5piplEKNI3DurdKBen_tsKNis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:aa:f7:6f:9b:23:27:7d:7c:bd:8f:55:ae:eb:85:ee:61:21:
12:5d:27:d1:e5:a6:2c:84:69:d2:b7:85:6d:fe:e6:c4:90:7a:
9d:2d:43:af:0a:42:88:2b:46:5c:bb:fb:a0:d2:45:dc:70:7a:
f3:06:c9:1a:ab:db:86:c2:77:84:51:3a:aa:38:7d:34:20:73:
56:4a:58:17:da:bc:fa:45:d7:bb:93:93:da:4b:25:df:88:f4:
f2:0f:1f:55:02:b2:a4:09:bc:de:4b:3f:72:81:27:f8:2b:eb:
03:86:02:ad:d5:fd:d5:5d:2f:ab:82:7e:46:be:0f:5b:bf:ca:
c0:51:4a:55:38:34:6b:07:69:e4:71:30:78:52:e5:65:5e:96:
c2:d8:9c:53:47:89:e4:32:02:80:75:ed:d3:33:f6:c2:54:eb:
b5:af:b4:f7:25:e9:a0:11:b5:b9:b8:be:e2:41:79:25:7a:d6:
9a:01:54:14:c4:e1:f3:ba:6b:d2:64:09:53:a7:b5:df:08:bc:
a3:5c:b0:6d:0d:f0:00:48:61:ae:63:d1:47:da:1f:9e:64:c0:
65:a2:80:30:d6:ef:a9:4c:a4:77:03:5f:e4:67:5f:02:91:c9:
dc:3b:12:46:be:a9:dc:a6:35:f3:20:e7:22:9d:c2:54:87:a0:
87:53:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:35:25 2025 by rpki-client