This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-p-HEzgTCiCV4n7a-1WFEXtHvrA.roa File: 1-p-HEzgTCiCV4n7a-1WFEXtHvrA.roa (raw, json) Hash identifier: 7yPaXqZv3CeOQ/xBT1dB+deucvwXgSSzniY0SRpZ8F8= Subject key identifier: FA:9F:87:13:38:13:0A:20:95:E2:7E:DA:FB:55:85:11:7B:47:BE:B0 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018571F814980A5EE269465F94A33E97B411 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-p-HEzgTCiCV4n7a-1WFEXtHvrA.roa Signing time: Mon 02 Jan 2023 10:12:41 +0000 ROA not before: Mon 02 Jan 2023 10:12:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:71:f8:14:98:0a:5e:e2:69:46:5f:94:a3:3e:97:b4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jan 2 10:12:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=fa9f871338130a2095e27edafb5585117b47beb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:bc:3b:7e:67:14:9a:0f:ed:c3:4d:d6:5d: 7a:10:58:73:f5:ce:ba:b3:05:57:19:7f:15:af:19: b3:ac:91:54:8e:f7:56:f8:ca:1f:f1:b6:31:f2:b1: 85:00:ca:f3:c9:ca:dc:0e:4d:27:68:4c:89:4d:da: e1:bb:e1:53:d6:c4:d8:46:c0:3c:5a:ff:fa:97:8e: ee:9d:25:ad:f3:a5:e7:3d:ad:ed:80:f9:c1:4b:e8: c4:cd:b0:49:c5:88:1d:35:65:d4:f9:6b:bf:4e:58: 58:e4:fd:1a:19:e7:7a:f5:37:5f:01:83:ac:dc:b0: d5:48:55:be:c7:87:fc:d2:fe:0f:52:c9:a6:33:e1: 21:76:60:ba:90:0e:cd:b6:8c:66:44:c5:94:41:9c: f8:54:3f:23:b8:96:21:89:0a:ce:b1:ea:06:e7:ae: 62:9c:51:e5:80:5d:e5:fa:a7:2a:b8:75:3a:72:e3: d3:3f:61:b4:7e:59:b8:cc:4e:46:bd:e5:f7:8f:56: 56:9d:73:43:a8:dc:c3:a7:05:32:f0:90:7e:8d:a0: b6:eb:50:50:e3:ed:f5:0b:b3:f3:74:63:61:3c:09: 60:b1:42:4e:d6:cc:5b:75:17:5e:f3:77:93:1b:54: cd:ac:a6:01:d8:70:0c:57:83:45:84:16:de:d9:3b: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9F:87:13:38:13:0A:20:95:E2:7E:DA:FB:55:85:11:7B:47:BE:B0 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-p-HEzgTCiCV4n7a-1WFEXtHvrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 54:f9:3c:ef:c8:32:aa:9f:4b:cc:42:66:28:dc:50:40:b0:b9: 83:c4:d0:00:5e:7a:b2:33:c2:0d:87:a7:9b:e1:4a:f9:0b:80: 6f:ae:63:54:03:9b:be:18:86:25:45:40:75:c8:f5:a0:e8:55: 1e:c6:c7:bc:62:a4:ee:6b:4f:42:28:92:9e:f0:69:6d:f1:40: 31:1e:a7:f9:d8:9e:de:dc:27:cf:1d:13:2c:a8:9f:89:b2:d0: 3b:43:a5:01:20:00:29:7e:1a:a6:a5:b5:b8:7c:f4:d5:91:b6: 1f:7a:2f:ef:a6:97:bc:ed:5c:10:c4:9a:ff:eb:60:13:2f:0c: 56:ed:ea:f3:e5:57:24:e3:27:f4:a0:50:7b:b9:25:7c:cd:0d: 3f:7d:13:a0:41:2f:90:e9:5b:e6:61:73:32:6e:b9:91:50:40: 7c:59:5f:d4:75:66:c1:d3:fe:70:85:f6:84:ef:5d:e8:25:7b: bf:85:8c:b1:cc:62:37:3b:39:ef:a1:5b:de:da:f0:b0:1b:78: 8c:39:95:88:3e:b1:65:f0:10:94:28:78:2a:d0:2d:af:ac:5a: f2:0f:0a:7a:39:7d:cb:19:ea:25:fd:2a:f4:fe:3c:57:80:b3: 70:ff:ec:17:ef:40:a8:65:ab:92:5b:ea:5d:e0:db:6b:81:b6: 17:35:d9:cb -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAYVx+BSYCl7iaUZflKM+l7QRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMTAyMTAxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTlmODcxMzM4MTMwYTIwOTVlMjdlZGFmYjU1ODUxMTdiNDdiZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDi8O35nFJoP7cNN1l16EFhz9c66 swVXGX8VrxmzrJFUjvdW+Mof8bYx8rGFAMrzycrcDk0naEyJTdrhu+FT1sTYRsA8 Wv/6l47unSWt86XnPa3tgPnBS+jEzbBJxYgdNWXU+Wu/TlhY5P0aGed69TdfAYOs 3LDVSFW+x4f80v4PUsmmM+EhdmC6kA7NtoxmRMWUQZz4VD8juJYhiQrOseoG565i nFHlgF3l+qcquHU6cuPTP2G0flm4zE5GveX3j1ZWnXNDqNzDpwUy8JB+jaC261BQ 4+31C7PzdGNhPAlgsUJO1sxbdRde83eTG1TNrKYB2HAMV4NFhBbe2TscxQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPqfhxM4EwogleJ+2vtVhRF7R76wMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvMS1wLUhFemdUQ2lDVjRuN2EtMVdGRVh0SHZyQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBU+TzvyDKqn0vMQmYo 3FBAsLmDxNAAXnqyM8INh6eb4Ur5C4BvrmNUA5u+GIYlRUB1yPWg6FUexse8YqTu a09CKJKe8Glt8UAxHqf52J7e3CfPHRMsqJ+JstA7Q6UBIAApfhqmpbW4fPTVkbYf ei/vppe87VwQxJr/62ATLwxW7erz5Vck4yf0oFB7uSV8zQ0/fROgQS+Q6VvmYXMy brmRUEB8WV/UdWbB0/5whfaE713oJXu/hYyxzGI3OznvoVve2vCwG3iMOZWIPrFl 8BCUKHgq0C2vrFryDwp6OX3LGeol/Sr0/jxXgLNw/+wX70CoZauSW+pd4NtrgbYX NdnL -----END CERTIFICATE-----Generated at Fri Dec 19 13:13:16 2025 by rpki-client