This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0qpSCz9TNYn7Avv_K4zJxL9Mwj4.roa File: 0qpSCz9TNYn7Avv_K4zJxL9Mwj4.roa (raw, json) Hash identifier: 18SgS/wBIeywcXOajb8VfzJpacp4Ls165uIzk5ry1Rs= Subject key identifier: D2:AA:52:0B:3F:53:35:89:FB:02:FB:FF:2B:8C:C9:C4:BF:4C:C2:3E Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189BAABF287AF1F3A81551C1C5B5C1CA62F Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0qpSCz9TNYn7Avv_K4zJxL9Mwj4.roa Signing time: Thu 03 Aug 2023 09:12:58 +0000 ROA not before: Thu 03 Aug 2023 09:12:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:ba:ab:f2:87:af:1f:3a:81:55:1c:1c:5b:5c:1c:a6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 3 09:12:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d2aa520b3f533589fb02fbff2b8cc9c4bf4cc23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:76:52:3a:29:e8:3d:c7:fd:e8:4d:6e:59: 0d:92:16:e8:59:06:c2:f7:06:87:3e:57:58:8d:ca: 6b:24:59:a7:12:32:8f:f8:9a:0c:16:27:ca:8c:a5: aa:b1:74:10:be:60:a4:58:4b:2f:5f:b5:17:35:a8: 76:24:ea:e8:41:95:a5:46:06:d9:d7:01:e9:e0:29: 53:b1:a6:8f:7a:89:7c:88:42:b5:e9:68:34:e7:6d: 8b:08:dd:4c:b8:25:98:e9:fd:b0:4e:99:7e:49:50: 17:29:97:4f:a1:1c:2b:58:d3:42:e2:8c:61:79:9d: 10:95:fc:42:0c:6a:a7:c1:c4:3f:45:28:fa:b4:e8: 6c:df:e0:ac:c7:cd:33:94:88:de:5e:af:10:f8:f5: 54:d1:9e:ff:16:59:db:68:19:33:a4:cc:10:84:58: de:ea:90:c2:1d:3e:55:fd:7b:b6:cd:04:9f:4e:0e: 11:53:7f:bd:95:23:42:02:78:4a:57:a4:22:4c:51: 72:7d:23:87:23:e9:54:f1:ab:08:d1:0a:c8:45:e9: 03:8d:ce:d4:97:be:f8:14:f9:36:29:29:a1:7e:dc: 9f:6c:42:f2:20:c2:f9:ef:4b:6d:95:6d:11:17:b3: 04:0e:ea:04:4c:e0:be:f9:af:f7:b3:06:52:62:1e: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:52:0B:3F:53:35:89:FB:02:FB:FF:2B:8C:C9:C4:BF:4C:C2:3E X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0qpSCz9TNYn7Avv_K4zJxL9Mwj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 26:85:84:3b:10:6d:3c:61:8b:a7:97:e0:f3:15:80:75:2d:cd: b3:73:cb:9b:9d:3e:be:99:c8:d9:6a:97:4d:d6:ae:c4:a5:97: b9:56:17:c8:18:0a:67:bc:80:75:63:7c:85:dd:01:bf:d1:55: b8:08:b2:11:72:19:e8:3d:88:0c:a7:67:39:21:f7:51:a7:59: 85:45:b4:83:cf:8c:82:28:bd:40:81:8e:0c:34:a8:10:ca:92: 17:b8:24:26:88:b6:a5:29:49:76:9a:bf:c9:fe:8f:17:b6:f0: 32:28:b0:be:77:64:82:86:a4:28:d5:f1:05:37:03:70:53:fb: e7:5e:cb:21:c5:d4:d3:28:f5:09:b2:a9:e2:c4:d5:e7:30:77: c9:b8:31:9e:27:79:ca:02:98:33:11:37:5a:c3:34:d1:5e:a4: cc:6c:93:fc:13:2a:01:93:53:54:31:da:fe:52:65:75:9c:a9: 8f:ff:c4:81:03:35:2c:e6:95:6e:20:98:b6:b4:8c:42:aa:78: ca:83:57:7f:2a:ec:bc:19:12:e1:9e:b5:51:eb:8f:ed:c7:84: 63:f0:65:fb:3c:95:d0:05:03:0b:42:82:26:5e:0f:5c:9a:58: 3a:d2:0b:d9:a8:e2:fb:e0:12:4e:25:83:47:a3:c3:fb:62:1e: 1e:4f:37:87 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYm6q/KHrx86gVUcHFtcHKYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODAzMDkxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmFhNTIwYjNmNTMzNTg5ZmIwMmZiZmYyYjhjYzljNGJmNGNjMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwR2Ujop6D3H/ehNblkNkhboWQbC 9waHPldYjcprJFmnEjKP+JoMFifKjKWqsXQQvmCkWEsvX7UXNah2JOroQZWlRgbZ 1wHp4ClTsaaPeol8iEK16Wg0522LCN1MuCWY6f2wTpl+SVAXKZdPoRwrWNNC4oxh eZ0QlfxCDGqnwcQ/RSj6tOhs3+Csx80zlIjeXq8Q+PVU0Z7/FlnbaBkzpMwQhFje 6pDCHT5V/Xu2zQSfTg4RU3+9lSNCAnhKV6QiTFFyfSOHI+lU8asI0QrIRekDjc7U l774FPk2KSmhftyfbELyIML570ttlW0RF7MEDuoETOC++a/3swZSYh6e1wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNKqUgs/UzWJ+wL7/yuMycS/TMI+MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvMHFwU0N6OVROWW43QXZ2X0s0ekp4TDlNd2o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACaFhDsQbTxhi6eX4PMV gHUtzbNzy5udPr6ZyNlql03WrsSll7lWF8gYCme8gHVjfIXdAb/RVbgIshFyGeg9 iAynZzkh91GnWYVFtIPPjIIovUCBjgw0qBDKkhe4JCaItqUpSXaav8n+jxe28DIo sL53ZIKGpCjV8QU3A3BT++deyyHF1NMo9QmyqeLE1ecwd8m4MZ4necoCmDMRN1rD NNFepMxsk/wTKgGTU1Qx2v5SZXWcqY//xIEDNSzmlW4gmLa0jEKqeMqDV38q7LwZ EuGetVHrj+3HhGPwZfs8ldAFAwtCgiZeD1yaWDrSC9mo4vvgEk4lg0ejw/tiHh5P N4c= -----END CERTIFICATE-----Generated at Fri Dec 19 12:09:04 2025 by rpki-client