This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MFCOMYXQrHGA8Ka0C3OtNh55YQ.roa File: 7MFCOMYXQrHGA8Ka0C3OtNh55YQ.roa (raw, json) Hash identifier: CFOKKNvcNJJCFMsBgs7iQ5jegkvzva25VQvU7e7l5uU= Subject key identifier: EC:C1:42:38:C6:17:42:B1:C6:03:C2:9A:D0:2D:CE:B4:D8:79:E5:84 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A028E73CF093A89D01E6BE58E1B1A2AD4 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MFCOMYXQrHGA8Ka0C3OtNh55YQ.roa Signing time: Thu 17 Aug 2023 08:13:24 +0000 ROA not before: Thu 17 Aug 2023 08:13:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:02:8e:73:cf:09:3a:89:d0:1e:6b:e5:8e:1b:1a:2a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 17 08:13:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ecc14238c61742b1c603c29ad02dceb4d879e584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:ac:e4:d3:c3:5f:25:4f:df:66:2b:f7:e5: 4d:44:b6:78:b8:17:11:33:d3:18:63:fe:4a:b1:fd: 9e:56:c7:e5:54:bd:ef:54:17:b7:b4:10:f1:ed:bb: d4:e0:1c:79:fc:23:18:4c:83:1d:62:de:78:61:d3: a2:12:d5:61:a7:e3:b9:19:fb:89:1c:31:67:98:ae: f0:99:43:68:c1:4b:c1:3f:0f:36:1c:9d:0b:05:82: e0:13:19:e6:8a:d8:26:24:7d:21:05:9b:20:8b:66: 5a:23:07:27:14:6f:5e:c5:12:4e:54:1a:b4:51:7f: 88:e6:80:32:20:5c:d4:11:25:b9:c4:80:d3:5b:58: 12:0b:f0:43:44:a8:da:0c:93:a2:c4:37:af:51:58: 09:25:81:c6:74:24:79:d0:b0:2e:ba:ab:51:40:8f: a6:07:96:c8:27:84:f5:7a:ab:63:9a:e7:7c:2d:9e: 8f:36:c2:ae:85:86:7e:f2:4e:f6:a0:ca:93:a7:9c: e2:bb:d2:51:5f:0c:2c:b6:3c:57:79:e4:0e:57:31: 10:e3:c4:a2:3c:c2:87:01:89:f7:01:21:5c:c7:8f: 0f:3e:9e:ee:3e:46:b3:19:5d:97:f4:fe:ff:ef:2e: 3a:58:ef:92:4e:cc:51:b5:46:38:e3:36:5a:ca:1e: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:42:38:C6:17:42:B1:C6:03:C2:9A:D0:2D:CE:B4:D8:79:E5:84 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MFCOMYXQrHGA8Ka0C3OtNh55YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 29:ea:05:5a:32:e8:c5:34:ed:a3:75:25:61:0d:2f:48:9f:b9: 69:ed:ba:57:37:c8:24:45:e3:6c:78:7a:8e:c5:b7:fe:89:67: e0:74:f6:86:91:5e:59:a9:47:98:ee:c4:11:56:15:bd:9e:0f: 0a:33:1d:7a:47:e5:85:81:dd:a7:30:cc:85:dc:3a:3e:61:d4: dd:a7:d1:89:96:71:2e:79:a0:01:7b:29:d9:d7:d0:f1:0b:3c: 05:73:13:b9:ac:64:2f:83:2d:71:af:eb:5f:90:d1:93:f3:5b: 19:40:cb:6b:17:7b:9f:2a:f4:a6:b0:80:3d:52:85:ca:9a:f6: fb:2d:2b:00:eb:43:a5:48:2c:f5:bf:6e:fc:3e:f2:33:9d:38: aa:df:00:aa:31:69:cc:62:ea:c8:68:f2:59:fe:37:58:99:d0: 70:d0:f7:ef:39:fe:59:5f:cc:1b:38:f4:d7:9b:dd:c4:6c:cf: 1b:c1:a4:94:ef:1a:16:39:6a:34:22:9f:b3:2f:10:20:e5:13: 01:8b:f0:dc:07:15:cc:66:2b:54:35:00:ad:32:c9:8e:f0:9e: 5f:8e:bf:14:e4:a4:1f:81:05:da:bb:e4:67:24:3b:29:59:dd: 34:cc:f9:1f:6e:78:5f:cc:24:ad:01:f2:4a:30:00:51:f3:b2: 14:68:bd:74 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYoCjnPPCTqJ0B5r5Y4bGirUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE3MDgxMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2MxNDIzOGM2MTc0MmIxYzYwM2MyOWFkMDJkY2ViNGQ4NzllNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+6s5NPDXyVP32Yr9+VNRLZ4uBcR M9MYY/5Ksf2eVsflVL3vVBe3tBDx7bvU4Bx5/CMYTIMdYt54YdOiEtVhp+O5GfuJ HDFnmK7wmUNowUvBPw82HJ0LBYLgExnmitgmJH0hBZsgi2ZaIwcnFG9exRJOVBq0 UX+I5oAyIFzUESW5xIDTW1gSC/BDRKjaDJOixDevUVgJJYHGdCR50LAuuqtRQI+m B5bIJ4T1eqtjmud8LZ6PNsKuhYZ+8k72oMqTp5ziu9JRXwwstjxXeeQOVzEQ48Si PMKHAYn3ASFcx48PPp7uPkazGV2X9P7/7y46WO+STsxRtUY44zZayh7oZwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOzBQjjGF0KxxgPCmtAtzrTYeeWEMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvN01GQ09NWVhRckhHQThLYTBDM090Tmg1NVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACnqBVoy6MU07aN1JWEN L0ifuWntulc3yCRF42x4eo7Ft/6JZ+B09oaRXlmpR5juxBFWFb2eDwozHXpH5YWB 3acwzIXcOj5h1N2n0YmWcS55oAF7KdnX0PELPAVzE7msZC+DLXGv61+Q0ZPzWxlA y2sXe58q9KawgD1Shcqa9vstKwDrQ6VILPW/bvw+8jOdOKrfAKoxacxi6sho8ln+ N1iZ0HDQ9+85/llfzBs49Neb3cRszxvBpJTvGhY5ajQin7MvECDlEwGL8NwHFcxm K1Q1AK0yyY7wnl+OvxTkpB+BBdq75GckOylZ3TTM+R9ueF/MJK0B8kowAFHzshRo vXQ= -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:28 2025 by rpki-client