This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa
File: l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa (raw, json)
Hash identifier: r01Jvma9tByEXSDH9Xqkw4ab0NExhxA4UlIuCcU9e1A=
Subject key identifier: 97:D9:78:1C:30:85:3E:90:41:CF:B0:38:B4:87:04:DA:FE:C4:24:0A
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 019ADEBD704FD176242A694B6C478F092AEA
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa
Signing time: Tue 02 Dec 2025 11:05:48 +0000
ROA not before: Tue 02 Dec 2025 11:05:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15751
IP address blocks: 185.51.72.0/22 maxlen: 23
212.129.64.0/24 maxlen: 24
212.129.66.0/23 maxlen: 23
212.129.68.0/22 maxlen: 22
212.129.72.0/21 maxlen: 21
212.129.80.0/20 maxlen: 20
2a01:b340::/29 maxlen: 32
2a01:b340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:de:bd:70:4f:d1:76:24:2a:69:4b:6c:47:8f:09:2a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Dec 2 11:05:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97d9781c30853e9041cfb038b48704dafec4240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:e2:99:ef:1c:56:68:6e:3f:94:70:4e:f1:
3a:6a:ca:e4:3f:a6:2e:23:eb:11:cc:82:2b:c5:84:
5e:24:21:2b:67:79:d9:9f:b9:90:64:3b:db:c5:64:
ec:fd:af:3c:cc:7b:a8:9d:8e:ee:9a:af:44:d8:54:
7b:b6:2f:fa:56:77:26:3c:9c:cb:b7:43:74:04:75:
06:92:e7:67:5e:b9:c6:52:9d:45:40:4b:2a:83:aa:
60:2f:23:45:46:4a:48:f0:24:24:17:fc:55:3f:f9:
55:b0:2a:3d:04:d4:a1:45:92:e6:68:ec:d0:6f:b6:
7b:fa:ca:ec:ae:85:b9:e6:ae:99:72:27:a7:5e:9c:
4d:42:2c:67:fb:a5:03:40:f7:79:97:1f:50:ca:f8:
e4:2c:69:07:b6:3d:5d:90:22:57:43:12:53:d8:7a:
46:41:a0:f3:e5:c8:f1:9c:00:41:d6:04:07:35:14:
9c:83:13:02:02:e8:7b:e6:fd:d2:09:53:f7:e0:c7:
ca:b8:99:9e:40:51:49:51:36:6d:05:50:23:94:82:
42:ed:3b:78:3c:e3:dc:70:30:2b:87:72:e9:8d:19:
8b:9d:c4:af:ca:d0:1a:33:f6:db:c6:6e:33:77:3b:
72:80:37:0c:26:5c:f2:7e:2d:d4:c3:ab:d9:14:30:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:78:1C:30:85:3E:90:41:CF:B0:38:B4:87:04:DA:FE:C4:24:0A
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.72.0/22
212.129.64.0/24
212.129.66.0-212.129.95.255
IPv6:
2a01:b340::/29
Signature Algorithm: sha256WithRSAEncryption
72:04:bb:be:98:10:7f:fb:65:aa:ae:2a:1b:a4:db:5f:b8:3f:
4f:bd:1e:d5:9d:ac:d4:dd:3f:8c:9b:3a:f7:fa:df:73:51:1c:
41:e3:b1:7c:ae:0c:f9:f1:56:19:db:11:86:e1:3c:4d:a7:1a:
af:a6:c7:c7:a0:17:df:0e:61:6f:19:d8:84:2d:35:86:9a:11:
e6:c8:5b:bc:e4:44:40:6c:9a:19:e9:44:1d:72:b3:85:1e:dd:
d0:62:7e:33:a7:98:e9:94:3e:c2:d5:a5:fc:15:92:36:c9:82:
b2:e3:a4:ab:89:4a:1e:d8:59:a7:2f:79:56:45:23:51:0d:71:
31:54:ec:39:c5:29:ae:6c:bd:92:7f:81:98:2e:bb:55:47:52:
b0:18:6b:84:a3:55:50:02:1e:af:42:7d:2b:05:89:70:c2:18:
5b:9c:ee:f6:a3:aa:4e:3c:93:e7:00:30:c0:84:59:89:3c:fd:
18:2d:05:a7:73:9c:e3:4b:ce:3c:d4:31:67:38:6e:80:3e:e7:
e3:51:41:7d:d7:70:52:f3:11:c4:4e:de:90:5c:f7:52:d5:2a:
4c:b2:0c:24:d5:6d:91:68:81:2e:71:c8:04:01:48:30:1b:55:
bc:24:5c:e2:eb:d6:80:13:44:9c:0c:84:94:81:96:27:40:e1:
3a:5b:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:17:06 2025 by rpki-client