This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ACdUCBEA2AypzOCG_Cf7sZYZD-8.roa File: ACdUCBEA2AypzOCG_Cf7sZYZD-8.roa (raw, json) Hash identifier: GONOrU+5/LFcWaTbpwXYgWkAaMujaEI5c4+HOmwaVDU= Subject key identifier: 00:27:54:08:11:00:D8:0C:A9:CC:E0:86:FC:27:FB:B1:96:19:0F:EF Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189C339E25B548982DD6B3496322A80229F Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ACdUCBEA2AypzOCG_Cf7sZYZD-8.roa Signing time: Sat 05 Aug 2023 01:04:57 +0000 ROA not before: Sat 05 Aug 2023 01:04:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:c339:57b0/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:c3:39:e2:5b:54:89:82:dd:6b:34:96:32:2a:80:22:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 5 01:04:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=002754081100d80ca9cce086fc27fbb196190fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:33:3d:ae:12:98:4d:03:d0:0c:f6:26:30: f7:d2:9b:8e:3f:25:03:19:56:f2:03:5f:e7:03:e2: 47:15:45:6b:49:77:d7:55:ba:fc:13:fc:bf:7e:db: b2:db:f4:02:55:6d:1f:8d:fe:18:e4:4c:49:5a:1c: d0:d9:31:24:10:dc:63:5d:02:47:40:ea:8b:83:4c: 86:d1:c2:c3:6e:ea:bd:b1:25:c1:78:e4:9d:f8:2e: 94:d5:bb:58:4e:76:ad:27:46:f6:e3:90:61:25:49: 80:42:f8:6c:ce:ba:89:6b:fe:1f:2c:14:c7:96:39: f7:a7:52:d4:a2:b5:82:d9:40:9c:6f:36:36:de:3c: ab:b7:e1:8c:54:dd:b0:0d:a3:cf:80:bf:c1:03:e5: 26:19:dc:ed:db:16:4f:1d:d2:9d:1e:3b:35:27:2b: 89:b4:40:26:7b:b9:fc:f7:e7:d8:02:52:59:6b:6d: 12:3d:d7:16:08:13:cf:b1:ad:95:44:a2:28:2e:b7: ce:c2:ae:57:c0:e5:4f:f9:60:64:d7:81:16:95:7f: 00:36:e1:d7:d4:57:5c:fd:60:cc:aa:60:30:d0:8e: 17:81:27:db:98:d3:93:69:80:73:d7:b8:e3:c7:e6: 4c:b2:0a:db:1f:9b:ce:a2:b9:9b:d7:22:60:05:11: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:27:54:08:11:00:D8:0C:A9:CC:E0:86:FC:27:FB:B1:96:19:0F:EF X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ACdUCBEA2AypzOCG_Cf7sZYZD-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 8c:99:8a:35:8b:93:5c:72:13:20:f6:dd:cd:7a:97:f6:83:42: 5b:51:25:3b:21:4c:86:b7:26:ed:98:77:6a:9b:a4:0f:d4:e1: 8c:c0:be:7b:ca:fb:d8:36:7a:0a:8e:5f:66:e8:93:90:d8:0d: 5f:52:f6:6f:f6:3a:f5:36:97:86:64:b0:80:e6:ef:5c:eb:a3: 0a:5e:8b:e2:0d:d8:dc:e6:08:dd:26:93:37:e1:5d:bd:c2:f1: 5f:9a:5f:2e:b8:a0:ce:fe:2d:e2:fc:8c:97:4d:dc:91:8b:3c: 51:7f:8a:dd:7d:73:f9:d8:29:a9:d8:f6:31:61:9c:88:81:97: 34:62:d0:24:12:c8:96:28:9b:3b:27:0e:34:aa:22:af:ee:34: b2:f1:0d:26:7c:40:68:bb:66:26:4e:c1:b8:e6:ad:ad:46:83: 49:f6:e8:87:65:c8:6c:3c:5e:bc:37:21:2c:72:79:0a:07:57: dc:c4:f7:d6:27:cd:8c:81:3d:74:ac:6d:05:bb:dd:35:fc:5a: 29:a8:4e:cc:dd:68:a4:21:82:77:08:1d:bf:4e:2e:5b:14:33: 7c:64:f8:73:18:cc:dc:9f:ca:ac:39:64:d4:08:fb:60:19:00: 0b:ce:2a:d0:58:44:68:a4:76:76:f2:84:2a:db:68:04:b8:85: ce:0a:0a:5e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYnDOeJbVImC3Ws0ljIqgCKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODA1MDEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDI3NTQwODExMDBkODBjYTljY2UwODZmYzI3ZmJiMTk2MTkwZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoQzPa4SmE0D0Az2JjD30puOPyUD GVbyA1/nA+JHFUVrSXfXVbr8E/y/ftuy2/QCVW0fjf4Y5ExJWhzQ2TEkENxjXQJH QOqLg0yG0cLDbuq9sSXBeOSd+C6U1btYTnatJ0b245BhJUmAQvhszrqJa/4fLBTH ljn3p1LUorWC2UCcbzY23jyrt+GMVN2wDaPPgL/BA+UmGdzt2xZPHdKdHjs1JyuJ tEAme7n89+fYAlJZa20SPdcWCBPPsa2VRKIoLrfOwq5XwOVP+WBk14EWlX8ANuHX 1Fdc/WDMqmAw0I4XgSfbmNOTaYBz17jjx+ZMsgrbH5vOormb1yJgBRGcEQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAAnVAgRANgMqczghvwn+7GWGQ/vMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvQUNkVUNCRUEyQXlwek9DR19DZjdzWllaRC04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIyZijWLk1xyEyD23c16 l/aDQltRJTshTIa3Ju2Yd2qbpA/U4YzAvnvK+9g2egqOX2bok5DYDV9S9m/2OvU2 l4ZksIDm71zrowpei+IN2NzmCN0mkzfhXb3C8V+aXy64oM7+LeL8jJdN3JGLPFF/ it19c/nYKanY9jFhnIiBlzRi0CQSyJYomzsnDjSqIq/uNLLxDSZ8QGi7ZiZOwbjm ra1Gg0n26IdlyGw8Xrw3ISxyeQoHV9zE99YnzYyBPXSsbQW73TX8WimoTszdaKQh gncIHb9OLlsUM3xk+HMYzNyfyqw5ZNQI+2AZAAvOKtBYRGikdnbyhCrbaAS4hc4K Cl4= -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:17 2025 by rpki-client