This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8irkz-BcjkB8yqcc-tByA3fUrKQ.roa File: 8irkz-BcjkB8yqcc-tByA3fUrKQ.roa (raw, json) Hash identifier: 7fxsIkPfVFJJzONdUB5MUhomVUCdConPV7WrJArKC4c= Subject key identifier: F2:2A:E4:CF:E0:5C:8E:40:7C:CA:A7:1C:FA:D0:72:03:77:D4:AC:A4 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01854778DEC30958E3807A3BB8A0B7D29712 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8irkz-BcjkB8yqcc-tByA3fUrKQ.roa Signing time: Sun 25 Dec 2022 04:09:41 +0000 ROA not before: Sun 25 Dec 2022 04:09:41 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:47:78:de:c3:09:58:e3:80:7a:3b:b8:a0:b7:d2:97:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 25 04:09:41 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=f22ae4cfe05c8e407ccaa71cfad0720377d4aca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:3f:85:29:10:a9:7d:0e:68:40:c3:27:30: f4:33:3f:6f:5d:ec:85:41:3f:bd:cd:30:f2:58:97: f3:03:03:61:14:bf:37:f6:18:be:c7:4d:d8:a3:31: 44:e4:9a:c1:86:08:7b:e4:0a:d5:96:d1:2e:7d:c9: da:b5:b9:8e:9d:e2:39:e6:ef:f5:1c:b9:87:47:2d: 08:5a:cc:4e:cf:fb:28:64:f0:1d:25:ca:06:4a:c8: 5b:d3:0d:26:81:7e:1f:cb:f5:4f:dc:e3:30:81:55: 77:49:f8:14:5f:55:c8:8f:cf:2a:26:78:db:93:7c: 36:64:77:41:61:e5:60:cc:3f:9c:33:49:e6:d3:9e: 4a:fd:ef:2e:93:bb:65:03:96:30:aa:ee:83:7a:dc: 33:d8:b7:74:0a:78:9f:84:48:68:08:88:70:cb:c7: 14:1a:69:ad:a2:2c:e6:10:d1:44:a3:20:b4:dc:2b: fa:ff:c2:d8:79:5c:58:8e:31:da:e1:38:7f:41:0a: fa:7c:9f:3e:70:79:f1:65:1a:05:31:8a:25:87:52: 47:6d:8a:15:a6:51:3b:9e:cb:32:e0:04:b1:18:41: b2:ac:ba:db:38:76:26:78:81:f6:f8:cf:fe:71:9d: 22:dd:e9:31:4d:30:cd:ee:bc:4e:5c:36:5e:c0:e4: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2A:E4:CF:E0:5C:8E:40:7C:CA:A7:1C:FA:D0:72:03:77:D4:AC:A4 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8irkz-BcjkB8yqcc-tByA3fUrKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 90:73:ee:53:02:39:fe:4d:b2:ac:d2:3b:45:5a:3e:2d:54:ae: ec:bd:f9:66:21:dd:85:89:ae:fe:f3:cf:62:12:e1:7c:a6:df: f8:6e:6d:3a:20:24:2d:69:bd:2c:93:54:93:c7:e3:55:92:cc: 8a:09:16:a3:18:f6:14:4c:65:cf:c2:15:31:42:90:5b:3b:08: 1f:72:3e:1e:21:f4:65:ed:a1:74:bc:5b:73:ed:6e:23:f1:22: 11:be:4b:8c:c4:4a:60:3e:03:c2:47:7c:e3:13:6c:5f:31:e7: 53:32:8e:34:3a:6e:32:17:83:5c:fa:5a:1a:45:cf:cf:19:3b: 00:35:db:40:fa:a9:c4:5f:60:1c:76:55:a1:df:a6:9c:eb:ac: f3:f9:5b:d4:37:50:b0:10:83:91:f6:56:8b:39:ca:43:99:2b: 46:91:93:80:bb:00:35:31:31:31:5f:9e:50:01:2c:3c:4e:3e: 08:e3:ae:30:5d:e0:3b:62:3b:b6:ba:db:75:a9:cb:64:8e:7c: ee:b0:9a:0b:8b:eb:20:72:da:8b:59:16:00:da:91:35:73:5c: 1b:35:6f:c5:58:16:8a:fe:1c:62:d5:9e:c2:30:18:9d:7e:e5: c0:13:58:ab:dd:a8:66:a0:5c:9a:8d:9d:c9:4e:2d:71:5f:4e: 3d:e7:1b:c0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYVHeN7DCVjjgHo7uKC30pcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjI1MDQwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjJhZTRjZmUwNWM4ZTQwN2NjYWE3MWNmYWQwNzIwMzc3ZDRhY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXA/hSkQqX0OaEDDJzD0Mz9vXeyF QT+9zTDyWJfzAwNhFL839hi+x03YozFE5JrBhgh75ArVltEufcnatbmOneI55u/1 HLmHRy0IWsxOz/soZPAdJcoGSshb0w0mgX4fy/VP3OMwgVV3SfgUX1XIj88qJnjb k3w2ZHdBYeVgzD+cM0nm055K/e8uk7tlA5Ywqu6Detwz2Ld0CnifhEhoCIhwy8cU GmmtoizmENFEoyC03Cv6/8LYeVxYjjHa4Th/QQr6fJ8+cHnxZRoFMYolh1JHbYoV plE7nssy4ASxGEGyrLrbOHYmeIH2+M/+cZ0i3ekxTTDN7rxOXDZewOTZiwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPIq5M/gXI5AfMqnHPrQcgN31KykMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvOGlya3otQmNqa0I4eXFjYy10QnlBM2ZVcktRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJBz7lMCOf5NsqzSO0Va Pi1Uruy9+WYh3YWJrv7zz2IS4Xym3/hubTogJC1pvSyTVJPH41WSzIoJFqMY9hRM Zc/CFTFCkFs7CB9yPh4h9GXtoXS8W3PtbiPxIhG+S4zESmA+A8JHfOMTbF8x51My jjQ6bjIXg1z6WhpFz88ZOwA120D6qcRfYBx2VaHfppzrrPP5W9Q3ULAQg5H2Vos5 ykOZK0aRk4C7ADUxMTFfnlABLDxOPgjjrjBd4DtiO7a623Wpy2SOfO6wmguL6yBy 2otZFgDakTVzXBs1b8VYFor+HGLVnsIwGJ1+5cATWKvdqGagXJqNnclOLXFfTj3n G8A= -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:14 2025 by rpki-client