This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1g76WFYinU0KTV6YB8T2s0ueDWc.roa File: 1g76WFYinU0KTV6YB8T2s0ueDWc.roa (raw, json) Hash identifier: yJYJwv/o/UB19/KBpwG7NlKr0iRIwSrUeJiQ6M6xAvo= Subject key identifier: D6:0E:FA:58:56:22:9D:4D:0A:4D:5E:98:07:C4:F6:B3:4B:9E:0D:67 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01832B668AEF67FE5E3AF8AEC40429EFA33B Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1g76WFYinU0KTV6YB8T2s0ueDWc.roa Signing time: Sun 11 Sep 2022 07:14:44 +0000 ROA not before: Sun 11 Sep 2022 07:14:44 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128 2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128 2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:83:2b:66:8a:ef:67:fe:5e:3a:f8:ae:c4:04:29:ef:a3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Sep 11 07:14:44 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=d60efa5856229d4d0a4d5e9807c4f6b34b9e0d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:e8:62:7e:cd:78:c9:62:a9:c0:9d:f1:14: 58:ff:5e:d3:b3:f4:64:17:7d:a3:39:07:53:c3:b0: df:b0:06:54:3b:17:be:cc:8f:c2:bf:57:6c:d1:6c: 03:48:46:f8:c3:36:0e:18:c1:91:5f:d3:6f:3a:e7: 9d:8a:22:a8:ec:a6:9d:c0:31:37:75:7d:c1:a5:8f: 0a:8f:d5:07:67:f2:60:39:39:55:10:e3:64:d6:7c: 59:e9:fe:0e:91:61:9a:ac:be:2f:e5:61:e3:18:10: 7c:91:33:44:1f:74:f1:9c:f2:1a:60:39:11:27:da: 57:1e:7f:62:5f:2c:b2:62:92:1b:bc:07:97:5c:7b: 8d:ee:16:7f:bb:eb:2c:aa:c6:5d:b2:2b:36:e3:eb: 26:30:35:87:34:6b:64:0e:ae:74:ce:af:9d:be:1d: 93:68:61:1a:87:45:c6:39:2f:e3:ea:70:15:ba:42: 63:85:91:21:5f:d4:3f:c4:26:61:98:d4:4c:51:26: 4c:fe:0f:a6:f7:c8:45:b7:dd:51:af:71:9f:f3:0d: b7:c9:1f:ba:84:aa:b2:a5:74:02:f0:b9:7b:0a:f6: eb:fb:0a:71:5e:ab:d7:ac:00:03:86:af:9a:bf:ca: 6a:46:52:0d:0e:1a:db:18:b1:82:31:b6:86:f2:82: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0E:FA:58:56:22:9D:4D:0A:4D:5E:98:07:C4:F6:B3:4B:9E:0D:67 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1g76WFYinU0KTV6YB8T2s0ueDWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 2b:ab:76:5e:51:49:eb:45:03:e8:24:b7:ed:25:29:91:78:ac: 7b:72:36:52:c8:ea:d6:06:03:ee:0b:5a:64:3b:08:f8:14:f3: 1c:89:3a:a0:de:bb:81:38:5d:22:68:f4:3c:a3:0e:66:75:d9: 0c:90:73:70:fa:69:7b:c3:92:fc:86:63:ef:8d:9e:37:1d:25: 56:e1:f3:35:02:85:2a:d4:69:27:53:67:7a:c4:a9:df:dc:56: 2f:ab:d6:ea:5d:30:ca:4a:57:f4:f0:0b:83:a9:9e:08:49:a1: 7a:70:2b:45:46:55:69:11:3e:80:8e:fa:64:05:93:90:e2:2a: 37:6a:fe:59:78:92:ab:56:ce:f9:cf:d1:8a:34:fb:2b:e2:06: 45:5a:ad:64:80:40:2d:e9:b9:4f:c7:1d:b6:36:e6:6a:32:62: 89:44:e3:e2:08:9e:cd:77:52:62:bc:d2:c5:1f:8b:e9:63:cd: 68:cb:93:d3:59:43:ac:e4:80:c4:80:49:6c:02:48:51:5b:f3: 5a:8e:b2:c4:55:d3:61:bc:4e:6b:1b:54:8a:dd:be:bb:b4:51: 68:75:e0:f2:28:6e:41:d1:c7:1a:d8:49:76:11:95:13:c3:c9: fe:88:30:69:30:32:4c:42:a3:9b:7c:3c:59:76:98:ad:2e:d6: 84:77:80:d7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYMrZorvZ/5eOviuxAQp76M7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIwOTExMDcxNDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjBlZmE1ODU2MjI5ZDRkMGE0ZDVlOTgwN2M0ZjZiMzRiOWUwZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntfoYn7NeMliqcCd8RRY/17Ts/Rk F32jOQdTw7DfsAZUOxe+zI/Cv1ds0WwDSEb4wzYOGMGRX9NvOuediiKo7KadwDE3 dX3BpY8Kj9UHZ/JgOTlVEONk1nxZ6f4OkWGarL4v5WHjGBB8kTNEH3TxnPIaYDkR J9pXHn9iXyyyYpIbvAeXXHuN7hZ/u+ssqsZdsis24+smMDWHNGtkDq50zq+dvh2T aGEah0XGOS/j6nAVukJjhZEhX9Q/xCZhmNRMUSZM/g+m98hFt91Rr3Gf8w23yR+6 hKqypXQC8Ll7Cvbr+wpxXqvXrAADhq+av8pqRlINDhrbGLGCMbaG8oLgFQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNYO+lhWIp1NCk1emAfE9rNLng1nMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvMWc3NldGWWluVTBLVFY2WUI4VDJzMHVlRFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACurdl5RSetFA+gkt+0l KZF4rHtyNlLI6tYGA+4LWmQ7CPgU8xyJOqDeu4E4XSJo9DyjDmZ12QyQc3D6aXvD kvyGY++NnjcdJVbh8zUChSrUaSdTZ3rEqd/cVi+r1updMMpKV/TwC4OpnghJoXpw K0VGVWkRPoCO+mQFk5DiKjdq/ll4kqtWzvnP0Yo0+yviBkVarWSAQC3puU/HHbY2 5moyYolE4+IIns13UmK80sUfi+ljzWjLk9NZQ6zkgMSASWwCSFFb81qOssRV02G8 TmsbVIrdvru0UWh14PIobkHRxxrYSXYRlRPDyf6IMGkwMkxCo5t8PFl2mK0u1oR3 gNc= -----END CERTIFICATE-----Generated at Sat Dec 20 08:22:07 2025 by rpki-client