This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ncGM85_uFrqOeK2yyBbRPmWNAM.roa File: 2ncGM85_uFrqOeK2yyBbRPmWNAM.roa (raw, json) Hash identifier: vHpOwAA/YnLfOwxqmUUjc5FHtnvU8d8QsjcXY/608+g= Subject key identifier: DA:77:06:33:CE:7F:B8:5A:EA:39:E2:B6:CB:20:5B:44:F9:96:34:03 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0187CC106F08B8F994FB9D70E8BC287EA932 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ncGM85_uFrqOeK2yyBbRPmWNAM.roa Signing time: Sat 29 Apr 2023 08:10:41 +0000 ROA not before: Sat 29 Apr 2023 08:10:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:87:cc:10:6f:08:b8:f9:94:fb:9d:70:e8:bc:28:7e:a9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Apr 29 08:10:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=da770633ce7fb85aea39e2b6cb205b44f9963403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:c9:c6:a5:39:99:de:05:f7:a4:3c:57:7f: 8e:50:dd:4c:06:1f:08:46:df:b1:11:b3:b5:ac:cc: 2c:6c:62:c6:f7:8e:c4:b9:4d:7e:fa:b3:5b:a5:ec: bd:5b:7c:2e:46:8f:49:03:62:18:0a:86:c9:11:eb: fb:c2:fa:33:84:4b:e7:48:1f:05:78:9d:62:56:a2: bd:f4:eb:04:23:ee:1c:2a:c9:74:c0:f8:87:76:80: c7:21:5f:48:a3:ac:f8:d4:0d:d1:39:38:06:e8:78: aa:72:e1:59:65:4e:58:e6:2b:50:04:60:9f:d3:89: c5:85:95:b4:3a:9e:42:27:01:05:4a:76:59:cb:8d: 12:bd:ed:f4:00:41:c1:59:65:8a:ab:53:0f:ce:f3: 58:7e:ed:f3:df:9a:e9:99:9a:b0:50:fd:09:0a:71: 45:79:af:76:44:2b:93:f4:9c:84:71:58:3a:87:33: ad:e1:21:fb:17:db:c8:5f:b7:a2:bf:b1:08:a4:d1: 72:ed:6c:3f:31:35:de:60:e0:c5:03:67:66:93:c1: b4:b6:3f:bb:a6:0a:f5:45:49:53:bd:cd:33:1f:57: 72:a9:4f:a3:d0:ff:c5:0d:d7:75:aa:19:4f:81:e2: 2b:46:4e:f9:59:56:06:ca:2f:77:42:05:75:d9:c6: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:77:06:33:CE:7F:B8:5A:EA:39:E2:B6:CB:20:5B:44:F9:96:34:03 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ncGM85_uFrqOeK2yyBbRPmWNAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 77:11:24:42:04:1c:0a:a5:be:5a:22:d0:f3:50:11:f3:ac:03: cb:52:6b:45:cf:2e:8c:1d:b7:08:cd:9c:c0:c9:ce:71:dc:a1: 09:71:05:85:37:a2:6b:56:b7:2b:44:eb:32:fb:2f:77:91:64: bf:18:24:e7:8e:a2:b4:2c:ec:5e:59:a2:3e:d3:44:c0:93:6d: 46:03:31:ca:f7:14:c9:01:33:e2:de:f2:8e:fc:fd:12:c4:50: 00:f1:a8:a5:7e:c7:c2:19:64:84:d3:81:c5:06:07:5d:cf:53: bc:af:f0:64:3e:67:45:9a:1f:f8:63:27:d9:1e:b0:96:18:4c: 10:bb:6e:30:66:9a:53:ee:90:33:19:63:02:5e:11:12:68:cc: cd:a4:1b:7c:bd:70:40:4d:8b:d6:f7:9b:17:fd:96:e6:6d:a8: 3c:14:fe:c1:8b:9d:01:2d:cf:be:25:e0:c7:8b:4c:9f:34:19: 5a:05:f4:7b:54:0f:8d:40:a5:74:31:16:be:af:f5:e5:0f:6f: 0e:ea:8d:84:b1:30:85:a6:4e:2f:c4:d2:fe:8d:f0:23:af:9e: ec:be:48:40:10:52:2a:fb:55:8e:77:08:c6:48:70:2d:f7:dd: 45:25:6c:82:13:75:54:23:08:f2:12:70:de:f3:13:e1:d0:2a: 16:ab:de:b7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYfMEG8IuPmU+51w6LwofqkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNDI5MDgxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTc3MDYzM2NlN2ZiODVhZWEzOWUyYjZjYjIwNWI0NGY5OTYzNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2XJxqU5md4F96Q8V3+OUN1MBh8I Rt+xEbO1rMwsbGLG947EuU1++rNbpey9W3wuRo9JA2IYCobJEev7wvozhEvnSB8F eJ1iVqK99OsEI+4cKsl0wPiHdoDHIV9Io6z41A3ROTgG6HiqcuFZZU5Y5itQBGCf 04nFhZW0Op5CJwEFSnZZy40Sve30AEHBWWWKq1MPzvNYfu3z35rpmZqwUP0JCnFF ea92RCuT9JyEcVg6hzOt4SH7F9vIX7eiv7EIpNFy7Ww/MTXeYODFA2dmk8G0tj+7 pgr1RUlTvc0zH1dyqU+j0P/FDdd1qhlPgeIrRk75WVYGyi93QgV12cbrVQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNp3BjPOf7ha6jnitssgW0T5ljQDMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvMm5jR004NV91RnJxT2VLMnl5QmJSUG1XTkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHcRJEIEHAqlvloi0PNQ EfOsA8tSa0XPLowdtwjNnMDJznHcoQlxBYU3omtWtytE6zL7L3eRZL8YJOeOorQs 7F5Zoj7TRMCTbUYDMcr3FMkBM+Le8o78/RLEUADxqKV+x8IZZITTgcUGB13PU7yv 8GQ+Z0WaH/hjJ9kesJYYTBC7bjBmmlPukDMZYwJeERJozM2kG3y9cEBNi9b3mxf9 luZtqDwU/sGLnQEtz74l4MeLTJ80GVoF9HtUD41ApXQxFr6v9eUPbw7qjYSxMIWm Ti/E0v6N8COvnuy+SEAQUir7VY53CMZIcC333UUlbIITdVQjCPIScN7zE+HQKhar 3rc= -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:45 2025 by rpki-client