This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GKIXiPfzLyGKnzI7BoDBUEPYQc.roa File: 9GKIXiPfzLyGKnzI7BoDBUEPYQc.roa (raw, json) Hash identifier: px33xMKvZWJSGd4hhLHXBuug+Xkx4mjEbE2iWIYpq64= Subject key identifier: F4:62:88:5E:23:DF:CC:BC:86:2A:7C:C8:EC:1A:03:05:41:0F:61:07 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01854175DD629FF14267FC4CCC16B538EF47 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GKIXiPfzLyGKnzI7BoDBUEPYQc.roa Signing time: Sat 24 Dec 2022 00:08:41 +0000 ROA not before: Sat 24 Dec 2022 00:08:41 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:41:75:dd:62:9f:f1:42:67:fc:4c:cc:16:b5:38:ef:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 24 00:08:41 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=f462885e23dfccbc862a7cc8ec1a0305410f6107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:5f:5b:7f:d7:93:44:af:ff:13:e9:23:d2: a1:e9:83:90:0c:7e:2c:71:09:8c:6c:5c:6c:e0:93: 6a:a8:50:41:85:92:f6:08:44:eb:aa:6b:5b:9f:f7: bc:74:87:20:33:32:3e:a5:79:e5:eb:01:02:41:33: c6:c4:95:48:f7:5e:61:ad:35:f5:bb:eb:be:2f:7e: 26:9c:2f:c7:c4:9d:46:f7:45:e1:a8:47:cf:af:a0: c9:85:af:ec:54:54:c3:5b:26:da:cd:7c:42:53:74: 8b:93:a7:7d:2d:77:28:8f:3b:d6:ba:03:b1:4a:44: 2c:cb:03:7b:59:cb:a8:d3:32:8e:97:72:46:8c:08: 46:a7:9c:96:86:65:53:21:b2:83:79:c8:2b:76:a6: dc:18:53:87:ca:6f:62:c5:9d:4c:13:02:45:84:a3: 5e:c3:70:18:d1:09:65:ce:7d:ce:39:03:60:7d:73: 71:15:74:2a:1d:38:cf:73:25:4f:74:97:aa:70:59: 92:d9:18:cd:ca:58:e0:37:90:4e:6b:81:37:32:ce: db:64:e5:eb:bf:a3:51:b2:b8:4c:d6:4e:27:cb:e2: 88:cd:93:37:1f:44:05:b0:a8:c7:ee:b0:90:a7:8c: 55:5e:76:b5:44:3a:dd:1b:40:96:ae:cb:19:08:9d: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:62:88:5E:23:DF:CC:BC:86:2A:7C:C8:EC:1A:03:05:41:0F:61:07 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GKIXiPfzLyGKnzI7BoDBUEPYQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 72:d7:21:3d:ec:5c:b5:b6:2e:69:06:9e:49:e7:73:48:68:f1: 6b:6b:6a:55:7b:ed:a8:4c:be:31:4f:89:78:1a:c6:17:61:55: ba:f7:00:ee:72:37:f7:bf:94:28:3f:6b:07:09:c9:0f:fd:fa: e0:66:61:9e:fc:ef:a6:71:c2:d6:cd:7a:a7:b8:cc:e3:24:b5: d0:de:a7:72:c8:ff:ba:44:a7:48:24:23:28:94:36:95:42:aa: de:4f:e0:4f:89:ff:aa:3f:f3:1a:d0:51:c5:05:7c:90:f4:88: d0:5b:45:e5:06:6a:d3:9c:4d:e2:ce:bf:40:5d:a1:5a:f1:a8: 5e:b1:f8:a3:ce:9a:4c:94:33:82:8c:23:5a:d2:51:97:6a:b5: e3:57:1c:6c:2c:0d:d2:95:a2:54:04:52:ca:15:b9:2e:a3:4a: f0:55:dc:b1:ae:21:22:ee:1a:c5:6f:59:37:f0:0a:af:b3:c1: af:46:35:12:ca:6a:87:9e:cc:db:d7:36:82:70:41:d9:59:27: 77:0b:aa:5c:be:20:14:f7:e0:aa:f3:f1:96:07:cd:99:16:8e: f5:fd:00:c5:08:6a:d8:6e:45:4a:de:e8:29:a3:aa:d1:c6:80: a9:6f:5a:6a:ae:87:c0:ca:4a:5f:3c:c0:90:63:46:6a:71:27: cb:fa:1d:81 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYVBdd1in/FCZ/xMzBa1OO9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjI0MDAwODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDYyODg1ZTIzZGZjY2JjODYyYTdjYzhlYzFhMDMwNTQxMGY2MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjNfW3/Xk0Sv/xPpI9Kh6YOQDH4s cQmMbFxs4JNqqFBBhZL2CETrqmtbn/e8dIcgMzI+pXnl6wECQTPGxJVI915hrTX1 u+u+L34mnC/HxJ1G90XhqEfPr6DJha/sVFTDWybazXxCU3SLk6d9LXcojzvWugOx SkQsywN7Wcuo0zKOl3JGjAhGp5yWhmVTIbKDecgrdqbcGFOHym9ixZ1MEwJFhKNe w3AY0Qllzn3OOQNgfXNxFXQqHTjPcyVPdJeqcFmS2RjNyljgN5BOa4E3Ms7bZOXr v6NRsrhM1k4ny+KIzZM3H0QFsKjH7rCQp4xVXna1RDrdG0CWrssZCJ22fwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPRiiF4j38y8hip8yOwaAwVBD2EHMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvOUdLSVhpUGZ6THlHS256STdCb0RCVUVQWVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHLXIT3sXLW2LmkGnknn c0ho8WtralV77ahMvjFPiXgaxhdhVbr3AO5yN/e/lCg/awcJyQ/9+uBmYZ7876Zx wtbNeqe4zOMktdDep3LI/7pEp0gkIyiUNpVCqt5P4E+J/6o/8xrQUcUFfJD0iNBb ReUGatOcTeLOv0BdoVrxqF6x+KPOmkyUM4KMI1rSUZdqteNXHGwsDdKVolQEUsoV uS6jSvBV3LGuISLuGsVvWTfwCq+zwa9GNRLKaoeezNvXNoJwQdlZJ3cLqly+IBT3 4Krz8ZYHzZkWjvX9AMUIathuRUre6CmjqtHGgKlvWmquh8DKSl88wJBjRmpxJ8v6 HYE= -----END CERTIFICATE-----Generated at Fri Dec 19 14:39:15 2025 by rpki-client