This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WbYa0JC6UYAhdvLcdjZ124Wx2g.roa File: 7WbYa0JC6UYAhdvLcdjZ124Wx2g.roa (raw, json) Hash identifier: nZ+gson/H9jGEzUZyAJ8riXpcAwT9dLE32ucQ5NM0Ac= Subject key identifier: ED:66:D8:6B:42:42:E9:46:00:85:DB:CB:71:D8:D9:D7:6E:16:C7:68 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189AD1F741D8935FE2ABC5A41719902D313 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WbYa0JC6UYAhdvLcdjZ124Wx2g.roa Signing time: Mon 31 Jul 2023 18:04:26 +0000 ROA not before: Mon 31 Jul 2023 18:04:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:189:ad1f:6818/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:ad:1f:74:1d:89:35:fe:2a:bc:5a:41:71:99:02:d3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 31 18:04:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ed66d86b4242e9460085dbcb71d8d9d76e16c768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:92:49:8a:e8:4e:d7:e3:83:eb:ea:79:67: 26:4d:31:e4:3b:b5:9a:82:88:fd:2e:43:d9:cf:aa: fa:3b:40:e1:cb:9f:12:b7:25:9a:d4:09:ce:52:62: aa:be:2c:f0:d8:2d:86:67:3a:8f:db:66:f8:a6:93: d2:a7:7e:cf:04:da:56:cb:be:ed:16:ed:5b:e5:31: f9:2f:3e:b5:59:df:12:06:3e:73:6d:d6:50:e8:8b: 07:b7:ca:9e:88:e0:d9:5e:41:42:38:cd:a2:e3:36: d0:65:3a:61:fc:ea:30:3e:19:ab:5a:ba:af:1a:f5: 72:b2:96:e8:d1:7a:d3:2c:c5:77:bd:b6:0f:13:cf: 1f:26:f0:74:8b:44:ba:78:a9:08:44:38:84:20:bd: c8:ad:a3:0f:7a:f0:ca:9e:20:39:af:42:6a:29:9d: 5d:f0:86:a7:72:9e:ee:d6:e0:d8:64:1a:7d:4d:6e: 84:25:cc:91:d1:c4:0c:3a:a3:53:c5:26:d4:05:3b: 9e:be:d0:4d:4e:8a:e3:71:81:06:40:15:14:e7:9d: 20:74:13:a3:6e:0b:85:b9:19:1d:a8:ec:2a:5a:0f: da:6a:6d:5d:67:15:24:c3:85:4e:37:50:88:9c:fe: 1f:28:21:11:61:23:49:8b:e9:74:97:a8:78:45:8f: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:66:D8:6B:42:42:E9:46:00:85:DB:CB:71:D8:D9:D7:6E:16:C7:68 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WbYa0JC6UYAhdvLcdjZ124Wx2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 01:fc:12:7a:8e:87:02:19:8e:3e:25:4c:24:07:bd:7d:41:c1: c8:e1:9d:55:9e:62:b8:39:c6:19:f5:28:d4:f0:1e:b8:48:4c: f9:2f:fd:5b:e8:13:d6:7e:42:0f:4f:72:65:72:e0:43:b3:e6: f5:37:0e:ed:25:b8:0a:7f:69:53:f0:99:f6:e1:56:25:a0:77: c6:5f:2f:da:26:32:7a:cc:be:0b:2f:3f:ea:bd:16:43:00:c1: 2b:0a:c8:2a:c6:06:f4:b5:d6:47:ca:57:25:14:84:ba:c8:53: ac:14:e7:d6:e9:77:be:3a:9c:96:a0:c0:26:49:0c:ec:f0:4c: 93:8a:2e:23:0f:1e:e9:2a:ba:5c:2c:d9:f7:4b:35:fb:2c:b2: 1e:db:dc:23:ac:ec:2f:57:85:87:17:c2:05:c4:f1:ec:e6:14: a4:ae:f9:ed:e3:e2:93:79:19:04:e1:68:07:c1:1a:67:1d:c4: 0c:fc:ae:71:1b:71:a0:e4:7d:89:77:7e:4f:5b:1a:15:96:c3: 10:70:8b:9b:81:ac:ed:f7:0e:36:d4:0d:6f:31:cb:37:1a:e9: 9e:43:40:45:56:e7:ba:f9:d9:84:83:a3:b8:75:bf:68:84:39: 4c:0b:a2:30:b2:ac:21:2f:b4:e3:37:74:73:92:ec:a4:41:6a: ed:b0:d6:1d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYmtH3QdiTX+KrxaQXGZAtMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNzMxMTgwNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDY2ZDg2YjQyNDJlOTQ2MDA4NWRiY2I3MWQ4ZDlkNzZlMTZjNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3iSSYroTtfjg+vqeWcmTTHkO7Wa goj9LkPZz6r6O0Dhy58StyWa1AnOUmKqvizw2C2GZzqP22b4ppPSp37PBNpWy77t Fu1b5TH5Lz61Wd8SBj5zbdZQ6IsHt8qeiODZXkFCOM2i4zbQZTph/OowPhmrWrqv GvVyspbo0XrTLMV3vbYPE88fJvB0i0S6eKkIRDiEIL3IraMPevDKniA5r0JqKZ1d 8Iancp7u1uDYZBp9TW6EJcyR0cQMOqNTxSbUBTuevtBNTorjcYEGQBUU550gdBOj bguFuRkdqOwqWg/aam1dZxUkw4VON1CInP4fKCERYSNJi+l0l6h4RY/gvQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO1m2GtCQulGAIXby3HY2dduFsdoMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvN1diWWEwSkM2VVlBaGR2TGNkaloxMjRXeDJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAH8EnqOhwIZjj4lTCQH vX1BwcjhnVWeYrg5xhn1KNTwHrhITPkv/VvoE9Z+Qg9PcmVy4EOz5vU3Du0luAp/ aVPwmfbhViWgd8ZfL9omMnrMvgsvP+q9FkMAwSsKyCrGBvS11kfKVyUUhLrIU6wU 59bpd746nJagwCZJDOzwTJOKLiMPHukqulws2fdLNfsssh7b3COs7C9XhYcXwgXE 8ezmFKSu+e3j4pN5GQThaAfBGmcdxAz8rnEbcaDkfYl3fk9bGhWWwxBwi5uBrO33 DjbUDW8xyzca6Z5DQEVW57r52YSDo7h1v2iEOUwLojCyrCEvtOM3dHOS7KRBau2w 1h0= -----END CERTIFICATE-----Generated at Wed Dec 17 19:13:38 2025 by rpki-client