This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KHp1DP6-tJBBGBwM-8cXEouErY.roa File: 0KHp1DP6-tJBBGBwM-8cXEouErY.roa (raw, json) Hash identifier: 8MgDiufX1vCRzMx3aWoiHeIaZEqFasdT2Aiys058Av0= Subject key identifier: D0:A1:E9:D4:33:FA:FA:D2:41:04:60:70:33:EF:1C:5C:4A:2E:12:B6 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0185379948A16FC5C91F955C300AA2E20984 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KHp1DP6-tJBBGBwM-8cXEouErY.roa Signing time: Thu 22 Dec 2022 02:11:10 +0000 ROA not before: Thu 22 Dec 2022 02:11:10 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:37:99:48:a1:6f:c5:c9:1f:95:5c:30:0a:a2:e2:09:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 22 02:11:10 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=d0a1e9d433fafad24104607033ef1c5c4a2e12b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:5d:5e:18:4c:7e:0b:bd:1e:c7:28:44:cf: f6:1a:fa:65:29:b6:5a:6b:74:62:b6:b1:2d:40:e8: e3:a0:b9:2d:fa:10:0f:0d:44:1f:06:a1:77:d2:a4: 86:32:45:3a:84:e8:54:ac:1c:c5:80:12:96:8f:a9: c7:07:a2:bd:16:2f:b1:7a:c7:e3:8c:3c:99:05:99: 01:a7:d6:82:79:33:07:d6:be:f0:09:db:59:ea:c7: 5a:37:75:68:54:1c:56:f3:dc:58:21:5f:5b:53:d8: fd:3f:ed:a5:ae:67:94:2e:42:f9:23:fc:26:5b:47: fe:d7:4f:d3:31:d6:73:c7:ee:07:1f:ca:89:91:9d: fd:44:96:3b:3d:a4:ba:cc:6a:ad:c6:36:3c:ea:a3: 80:e5:2a:a8:5d:94:f0:2e:55:c1:f5:8c:86:87:f2: 8f:c1:6d:9f:65:d2:69:71:03:31:35:e4:85:57:fe: 7d:49:61:d6:e6:1d:a1:7f:84:2b:66:e0:6e:ef:50: 4d:28:f9:33:d6:57:58:c1:9a:2a:94:5c:a2:dc:85: 05:9b:57:d4:c3:19:54:d8:14:bd:79:24:81:38:54: 75:95:59:76:6d:95:16:72:29:8a:be:63:ba:98:a4: b0:24:0b:7d:00:c3:7e:aa:bd:94:aa:6c:62:4a:bc: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A1:E9:D4:33:FA:FA:D2:41:04:60:70:33:EF:1C:5C:4A:2E:12:B6 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KHp1DP6-tJBBGBwM-8cXEouErY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 88:81:98:1c:43:6c:d5:19:86:40:65:56:a3:5e:35:ac:c9:79: e7:2a:28:21:09:81:09:4d:be:10:8f:a0:b1:55:f2:c3:e5:4b: 1d:6a:c3:2b:16:26:27:ff:21:f9:0a:c1:9e:aa:e0:eb:c7:9f: 1f:a4:18:70:46:b0:bd:0c:a1:ab:af:1d:55:43:b5:d3:5c:b4: 3d:44:62:b2:28:5e:1e:73:d0:c7:2c:23:60:b2:40:70:ef:7b: e3:38:05:28:5e:cb:70:cd:3e:8d:2b:8d:44:05:cb:cd:30:90: 75:14:5a:c1:0f:fa:31:dc:24:ef:f3:12:9f:7b:57:6a:97:e4: 8f:11:95:00:b7:ba:3e:dd:37:ed:60:de:38:1d:ed:41:f3:5f: da:00:0c:ce:b2:61:8d:bd:03:06:1a:a5:a7:b4:1f:70:bb:58: a4:e2:3b:c9:99:29:23:ba:c4:4c:8e:0a:52:1a:2c:a6:e8:77: 78:df:31:e7:12:78:e6:bf:91:fe:6f:f1:3c:fe:19:bf:af:01: da:f2:ef:09:24:7f:c1:a4:7a:3a:d2:cc:b9:d3:cf:0d:f2:f7: ff:24:68:3c:2c:e6:64:8e:50:0b:39:3a:01:5e:ad:b0:d4:81: e4:fc:51:fa:bf:28:b4:30:b2:e7:77:d3:f1:45:c0:70:46:f4: 2f:47:51:0d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYU3mUihb8XJH5VcMAqi4gmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjIyMDIxMTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGExZTlkNDMzZmFmYWQyNDEwNDYwNzAzM2VmMWM1YzRhMmUxMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9RdXhhMfgu9HscoRM/2GvplKbZa a3RitrEtQOjjoLkt+hAPDUQfBqF30qSGMkU6hOhUrBzFgBKWj6nHB6K9Fi+xesfj jDyZBZkBp9aCeTMH1r7wCdtZ6sdaN3VoVBxW89xYIV9bU9j9P+2lrmeULkL5I/wm W0f+10/TMdZzx+4HH8qJkZ39RJY7PaS6zGqtxjY86qOA5SqoXZTwLlXB9YyGh/KP wW2fZdJpcQMxNeSFV/59SWHW5h2hf4QrZuBu71BNKPkz1ldYwZoqlFyi3IUFm1fU wxlU2BS9eSSBOFR1lVl2bZUWcimKvmO6mKSwJAt9AMN+qr2UqmxiSrwEoQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNCh6dQz+vrSQQRgcDPvHFxKLhK2MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvMEtIcDFEUDYtdEpCQkdCd00tOGNYRW91RXJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIiBmBxDbNUZhkBlVqNe NazJeecqKCEJgQlNvhCPoLFV8sPlSx1qwysWJif/IfkKwZ6q4OvHnx+kGHBGsL0M oauvHVVDtdNctD1EYrIoXh5z0McsI2CyQHDve+M4BShey3DNPo0rjUQFy80wkHUU WsEP+jHcJO/zEp97V2qX5I8RlQC3uj7dN+1g3jgd7UHzX9oADM6yYY29AwYapae0 H3C7WKTiO8mZKSO6xEyOClIaLKbod3jfMecSeOa/kf5v8Tz+Gb+vAdry7wkkf8Gk ejrSzLnTzw3y9/8kaDws5mSOUAs5OgFerbDUgeT8Ufq/KLQwsud30/FFwHBG9C9H UQ0= -----END CERTIFICATE-----Generated at Tue Dec 23 14:33:48 2025 by rpki-client