This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IXVoiJDgCuvZnDt0KCi0u0lIFQ.roa File: 3IXVoiJDgCuvZnDt0KCi0u0lIFQ.roa (raw, json) Hash identifier: IaathPp+3RXMZbnUs1/edHaNgu5t2MSjcdT28yC8P58= Subject key identifier: DC:85:D5:A2:22:43:80:2B:AF:66:70:ED:D0:A0:A2:D2:ED:25:20:54 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01851198531E10682332EE679703C20B1804 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IXVoiJDgCuvZnDt0KCi0u0lIFQ.roa Signing time: Wed 14 Dec 2022 17:04:33 +0000 ROA not before: Wed 14 Dec 2022 17:04:33 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:185:1197:fa00/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:11:98:53:1e:10:68:23:32:ee:67:97:03:c2:0b:18:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 14 17:04:33 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=dc85d5a22243802baf6670edd0a0a2d2ed252054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:68:66:09:bf:e0:e3:17:3d:a3:89:9e:e3: b5:32:b6:dd:e0:5f:34:b8:d0:a6:9c:49:db:31:14: 68:0b:79:7e:8e:ce:6f:11:2f:fe:1b:0c:78:a3:49: 6f:ab:a0:39:49:fb:02:aa:25:b4:bc:50:36:7d:81: cb:bd:0f:10:32:97:3f:fb:8b:6f:15:ab:25:37:1b: 10:ca:b0:e0:a9:55:ac:90:cc:71:77:e5:74:44:03: 62:c9:3f:d2:50:6f:15:a2:87:90:f5:de:0c:92:84: 1b:57:83:ed:35:76:c1:40:8d:00:b5:8d:0a:b5:c8: 5c:51:ef:c4:1b:f6:f2:1d:1b:30:cf:42:9e:b8:15: 2a:12:a5:91:80:56:40:d4:09:45:5a:11:8c:a7:f9: ae:e1:8e:f7:a7:7a:ee:16:dd:e8:e0:11:74:f7:8b: a1:50:cb:62:b1:27:1c:1c:d2:67:f7:de:ab:95:95: 80:b0:d3:84:9b:8d:4b:0c:e3:d1:4f:b9:26:5b:83: a5:f9:0b:f7:2d:0c:6d:04:d7:f0:50:03:63:29:7f: c7:2a:8b:bb:22:d5:e1:ba:8a:47:3b:98:6c:5c:5c: 9c:43:0f:b4:d7:e8:75:fd:fe:6b:ad:df:70:99:69: 54:5f:a0:7d:4d:74:25:7e:5b:80:31:5d:8a:43:e0: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:85:D5:A2:22:43:80:2B:AF:66:70:ED:D0:A0:A2:D2:ED:25:20:54 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3IXVoiJDgCuvZnDt0KCi0u0lIFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 91:d3:49:58:09:68:52:00:ab:1a:e4:3a:ae:78:5c:9c:d7:ee: 06:7f:4d:79:18:1c:11:92:20:d9:23:04:18:2b:8d:01:47:1a: be:d7:22:65:2d:e2:dc:18:48:e3:ee:fe:8e:0a:fd:4e:21:82: bb:a7:8c:9e:71:52:fa:2b:cf:a6:56:6d:c6:7f:07:3e:1d:09: 45:1e:d5:28:8b:80:a0:03:d8:fc:4d:99:b8:77:f6:81:fa:b6: b4:81:58:ac:c9:d0:70:56:58:a1:9b:dc:16:3f:df:34:1d:38: ae:f7:c8:33:4c:e9:07:9f:e5:12:a1:15:b2:6f:e4:de:1a:27: d4:be:25:c5:f9:d1:fd:5d:17:b8:09:f5:e9:44:e0:ad:66:f9: 86:64:5e:ad:df:23:7d:f4:87:f8:a6:d7:49:86:b8:31:62:c1: 03:77:82:8a:a8:e9:74:a8:a3:99:9e:7e:5e:d9:c0:a3:a2:86: 6d:e5:50:17:4c:2b:16:3c:d3:a8:82:3b:6c:25:03:07:07:a4: 6a:db:b6:07:82:aa:70:1f:30:6d:7d:93:9f:4c:78:c6:77:f3: 6a:98:47:ac:a5:fb:18:e5:0f:e5:38:79:cc:5e:f8:83:2b:d6: b8:d3:63:63:99:3d:80:86:1d:7f:6c:f4:2a:70:7a:ec:75:31: 84:1c:47:95 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYURmFMeEGgjMu5nlwPCCxgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjE0MTcwNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzg1ZDVhMjIyNDM4MDJiYWY2NjcwZWRkMGEwYTJkMmVkMjUyMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptVoZgm/4OMXPaOJnuO1Mrbd4F80 uNCmnEnbMRRoC3l+js5vES/+Gwx4o0lvq6A5SfsCqiW0vFA2fYHLvQ8QMpc/+4tv FaslNxsQyrDgqVWskMxxd+V0RANiyT/SUG8VooeQ9d4MkoQbV4PtNXbBQI0AtY0K tchcUe/EG/byHRswz0KeuBUqEqWRgFZA1AlFWhGMp/mu4Y73p3ruFt3o4BF094uh UMtisSccHNJn996rlZWAsNOEm41LDOPRT7kmW4Ol+Qv3LQxtBNfwUANjKX/HKou7 ItXhuopHO5hsXFycQw+01+h1/f5rrd9wmWlUX6B9TXQlfluAMV2KQ+A3swIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNyF1aIiQ4Arr2Zw7dCgotLtJSBUMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvM0lYVm9pSkRnQ3V2Wm5EdDBLQ2kwdTBsSUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJHTSVgJaFIAqxrkOq54 XJzX7gZ/TXkYHBGSINkjBBgrjQFHGr7XImUt4twYSOPu/o4K/U4hgrunjJ5xUvor z6ZWbcZ/Bz4dCUUe1SiLgKAD2PxNmbh39oH6trSBWKzJ0HBWWKGb3BY/3zQdOK73 yDNM6Qef5RKhFbJv5N4aJ9S+JcX50f1dF7gJ9elE4K1m+YZkXq3fI330h/im10mG uDFiwQN3goqo6XSoo5mefl7ZwKOihm3lUBdMKxY806iCO2wlAwcHpGrbtgeCqnAf MG19k59MeMZ382qYR6yl+xjlD+U4ecxe+IMr1rjTY2OZPYCGHX9s9Cpweux1MYQc R5U= -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:45 2025 by rpki-client