This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/Ojf3cAd60YODkRLtqq7cNsOhGLM.roa File: Ojf3cAd60YODkRLtqq7cNsOhGLM.roa (raw, json) Hash identifier: 5PRE2g/zgSHqImcyo12c7/8IR2URXj+hPaAvSyuPPWE= Subject key identifier: 3A:37:F7:70:07:7A:D1:83:83:91:12:ED:AA:AE:DC:36:C3:A1:18:B3 Certificate issuer: /CN=81891b261c62dabf777e552eb5ec27d77e484139 Certificate serial: 01FA3C12 Authority key identifier: 81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/Ojf3cAd60YODkRLtqq7cNsOhGLM.roa Signing time: Sat 01 Jan 2022 13:56:41 +0000 ROA not before: Sat 01 Jan 2022 13:56:41 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 200845 IP address blocks: 86.105.31.0/24 maxlen: 24 89.47.7.0/24 maxlen: 24 188.240.204.0/24 maxlen: 24 195.82.122.0/24 maxlen: 24 195.82.121.0/24 maxlen: 24 195.82.120.0/24 maxlen: 24 188.240.206.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 33176594 (0x1fa3c12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81891b261c62dabf777e552eb5ec27d77e484139 Validity Not Before: Jan 1 13:56:41 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=3a37f770077ad183839112edaaaedc36c3a118b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:64:cb:d8:ed:26:76:a8:98:e6:8b:a2:c2: 87:dc:aa:0e:e9:39:4f:07:a4:26:d8:c0:10:47:6d: 96:c9:e4:33:c9:83:31:a0:de:86:62:08:bd:ac:56: a2:73:ce:2b:fe:52:f2:23:d0:37:b9:1c:b5:33:62: 3a:b9:cc:58:dc:18:5d:ca:fe:30:0a:09:67:c0:0e: 30:d8:50:16:f2:df:d2:9f:f8:0c:dc:7d:4a:18:60: 43:64:89:15:33:ac:e5:7c:a3:ba:1b:0d:aa:45:f5: 48:b7:32:99:af:a5:1e:1e:ea:4a:e9:d3:94:8c:69: 3a:d9:72:06:52:3e:b3:e3:75:67:9b:10:4d:80:ed: c0:4f:9c:9a:f0:cf:dc:cf:48:92:1f:47:49:ce:25: 5b:26:c4:7d:6a:9d:fd:0f:a4:a6:58:d2:de:39:79: 39:49:df:56:fb:df:50:9e:8b:c3:9b:a7:e8:6c:2c: b3:fd:8f:19:a2:03:85:aa:66:60:c3:a1:0b:3b:d2: bf:dd:8a:f1:83:0e:f2:eb:a7:17:ad:53:75:b4:43: 35:b5:6f:a2:93:4f:74:c0:3f:2c:e2:18:32:99:66: cb:0e:8a:1d:24:c3:59:0d:79:ad:14:58:4e:c7:75: e6:eb:6d:ad:68:c2:6e:a4:99:78:f7:c9:b4:42:33: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:37:F7:70:07:7A:D1:83:83:91:12:ED:AA:AE:DC:36:C3:A1:18:B3 X509v3 Authority Key Identifier: keyid:81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/Ojf3cAd60YODkRLtqq7cNsOhGLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.31.0/24 89.47.7.0/24 188.240.204.0/24 188.240.206.0/24 195.82.120.0-195.82.122.255 Signature Algorithm: sha256WithRSAEncryption 3c:af:56:d8:12:48:f6:79:39:23:33:88:09:9e:cc:8b:88:45: bf:11:db:6b:f3:60:7d:18:05:60:2f:53:00:6e:a0:78:76:ae: eb:a6:19:f9:ac:2b:04:00:71:2c:bd:88:36:7a:15:52:39:c0: 34:ac:a6:4c:a5:4d:5a:b1:3a:e4:94:3d:c8:98:7a:71:c7:10: 97:ae:6e:0f:89:6e:93:29:6e:ef:2d:c7:3e:35:55:c5:2d:9b: 22:ed:fa:94:c8:94:b8:1e:7c:2d:65:ad:da:41:b5:6b:47:92: 82:53:a1:67:c8:d1:72:ec:d1:00:65:e0:b5:4c:c7:aa:86:d1: fb:d0:c6:fa:81:b1:91:a5:49:1f:89:28:e4:b1:c7:08:84:f6: 64:34:c6:3a:24:25:56:af:3c:89:1e:0b:f3:7e:36:02:9a:95: bc:cc:c7:93:0b:b0:8c:a6:aa:6e:a1:ba:4a:75:77:80:f2:6a: c4:f7:04:42:bd:f7:d1:81:00:c9:01:c7:15:05:eb:63:b8:62: 0c:4a:d7:e8:38:f0:ee:3e:69:a1:e2:66:f4:a8:dd:c0:a5:86: 98:c9:d8:45:de:ba:80:c6:54:44:3b:2d:c6:af:7a:09:1a:42: f0:89:60:cb:bf:27:c2:bd:a6:9b:03:30:83:89:c5:29:a2:7b: 62:2a:94:3e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIEAfo8EjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4 MTg5MWIyNjFjNjJkYWJmNzc3ZTU1MmViNWVjMjdkNzdlNDg0MTM5MB4XDTIyMDEw MTEzNTY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2EzN2Y3NzAwNzdh ZDE4MzgzOTExMmVkYWFhZWRjMzZjM2ExMThiMzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJxWZMvY7SZ2qJjmi6LCh9yqDuk5TwekJtjAEEdtlsnkM8mD MaDehmIIvaxWonPOK/5S8iPQN7kctTNiOrnMWNwYXcr+MAoJZ8AOMNhQFvLf0p/4 DNx9ShhgQ2SJFTOs5XyjuhsNqkX1SLcyma+lHh7qSunTlIxpOtlyBlI+s+N1Z5sQ TYDtwE+cmvDP3M9Ikh9HSc4lWybEfWqd/Q+kpljS3jl5OUnfVvvfUJ6Lw5un6Gws s/2PGaIDhapmYMOhCzvSv92K8YMO8uunF61TdbRDNbVvopNPdMA/LOIYMplmyw6K HSTDWQ15rRRYTsd15uttrWjCbqSZePfJtEIzQC8CAwEAAaOCAikwggIlMB0GA1Ud DgQWBBQ6N/dwB3rRg4OREu2qrtw2w6EYszAfBgNVHSMEGDAWgBSBiRsmHGLav3d+ VS617CfXfkhBOTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L2dZa2JKaHhpMnI5M2ZsVXV0ZXduMTM1SVFUay5jZXIwgY0GCCsGAQUFBwELBIGA MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvNGIvY2ZiYWNkLWQwOWMtNGEyZi1hYmY5LTNiZWYzZjdlNGRlYi8x L09qZjNjQWQ2MFlPRGtSTHRxcTdjTnNPaEdMTS5yb2EwgYEGA1UdHwR6MHgwdqB0 oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv Y2ZiYWNkLWQwOWMtNGEyZi1hYmY5LTNiZWYzZjdlNGRlYi8xL2dZa2JKaHhpMnI5 M2ZsVXV0ZXduMTM1SVFUay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/ BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAFZpHwMEAFkvBwMEALzwzAMEALzw zjAMAwQDw1J4AwQAw1J6MA0GCSqGSIb3DQEBCwUAA4IBAQA8r1bYEkj2eTkjM4gJ nsyLiEW/Edtr82B9GAVgL1MAbqB4dq7rphn5rCsEAHEsvYg2ehVSOcA0rKZMpU1a sTrklD3ImHpxxxCXrm4PiW6TKW7vLcc+NVXFLZsi7fqUyJS4HnwtZa3aQbVrR5KC U6FnyNFy7NEAZeC1TMeqhtH70Mb6gbGRpUkfiSjksccIhPZkNMY6JCVWrzyJHgvz fjYCmpW8zMeTC7CMpqpuobpKdXeA8mrE9wRCvffRgQDJAccVBetjuGIMStfoOPDu Pmmh4mb0qN3ApYaYydhF3rqAxlREOy3Gr3oJGkLwiWDLvyfCvaabAzCDicUponti KpQ+ -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:15 2025 by rpki-client