This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgtK09P3M9zK6EN2ye6PAXBi6bE.roa File: AgtK09P3M9zK6EN2ye6PAXBi6bE.roa (raw, json) Hash identifier: WqfBEgi5tuEhYcURoticLuFe6KGX3T4CaX6U4vKxU9Y= Subject key identifier: 02:0B:4A:D3:D3:F7:33:DC:CA:E8:43:76:C9:EE:8F:01:70:62:E9:B1 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189CFABEFC5539F9D2ED34E1A92A535FED4 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgtK09P3M9zK6EN2ye6PAXBi6bE.roa Signing time: Mon 07 Aug 2023 11:04:58 +0000 ROA not before: Mon 07 Aug 2023 11:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:189:cfab:77a7/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:cf:ab:ef:c5:53:9f:9d:2e:d3:4e:1a:92:a5:35:fe:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 7 11:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=020b4ad3d3f733dccae84376c9ee8f017062e9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:bb:69:8a:c5:6c:af:12:96:21:a8:35:c2: 73:35:3f:d9:10:dc:69:c4:e4:6d:60:f8:31:cf:a2: 6a:0c:db:97:53:a5:96:10:be:dd:76:59:e2:73:eb: 7f:7c:9c:95:e5:b7:2f:e1:58:3d:a8:bf:be:07:c9: a1:9f:8f:ad:bf:3c:a4:1f:2d:29:26:5c:ad:dd:33: 29:f5:5d:ee:41:30:c0:f0:32:30:93:ff:72:09:69: 77:c6:17:03:3f:1c:aa:7e:d0:56:85:41:71:a5:a6: e9:05:fd:7f:9f:aa:86:5d:2c:d8:e5:db:c4:23:04: 0a:f7:d7:5d:47:aa:99:62:55:8e:81:05:e6:70:bd: ad:ee:eb:f5:cc:61:4b:aa:bc:52:d4:60:20:4e:c1: 18:06:13:8b:5e:32:8d:7b:dd:c0:1a:2c:7b:dd:43: e8:3c:a4:e0:4a:c0:12:a3:a8:ad:3b:5f:a9:b9:3c: ce:cd:b9:cb:9b:8d:88:b0:49:b3:80:f2:12:04:4b: ce:9c:9f:40:01:82:73:0f:19:94:9b:6e:34:a3:f5: d2:1a:cf:e1:35:1b:14:8b:3e:e6:4c:6c:95:f9:ca: ed:ab:f7:5a:c7:c7:02:dd:c7:1e:1b:37:93:28:97: dd:5f:8c:20:95:a3:bd:d5:9a:c3:a6:8d:32:76:24: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0B:4A:D3:D3:F7:33:DC:CA:E8:43:76:C9:EE:8F:01:70:62:E9:B1 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgtK09P3M9zK6EN2ye6PAXBi6bE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption b5:b7:df:32:9f:21:5e:d1:61:4f:0c:3f:34:f5:46:1d:8c:af: 86:ea:f0:a0:03:01:b3:b8:ae:1a:f6:a1:60:3c:1b:f3:69:18: 70:f9:79:54:fe:c9:cf:5b:b4:7b:c9:60:20:45:33:b8:4a:fa: 8c:cd:6d:c5:f8:a1:4f:66:08:59:de:aa:cf:fe:39:ec:54:6a: 1a:d4:56:65:c0:fe:80:de:2b:66:e3:b5:a5:62:b6:a2:15:fb: 56:f4:bf:fc:43:e3:1e:f7:58:1e:e3:c6:d2:e5:a8:ff:35:c0: fc:ec:55:dc:8d:ab:dc:25:e8:1d:95:ea:14:d3:ef:2f:54:70: 0a:31:be:03:b9:19:f4:74:79:9c:8c:da:9a:95:e8:1a:5c:be: ab:4e:ac:11:81:8a:7b:f5:de:e9:77:1b:c5:27:3c:ee:cc:85: cc:a2:43:db:f2:7a:9f:c7:5f:82:f8:23:90:b0:8f:83:2e:70: 0d:05:40:88:8c:e1:17:d4:5d:d3:27:47:93:51:d6:d1:e9:8b: e3:e3:15:a4:31:23:85:2c:f3:a6:c3:ba:99:22:3e:4d:49:d2: 27:d2:1e:0c:65:7d:7a:42:66:c0:25:4d:3d:23:4c:10:db:fd: ab:be:b0:0a:12:e1:d1:d2:76:cf:bb:ea:42:7a:5a:7f:c4:4a: 5e:c5:4e:b7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYnPq+/FU5+dLtNOGpKlNf7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODA3MTEwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjBiNGFkM2QzZjczM2RjY2FlODQzNzZjOWVlOGYwMTcwNjJlOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhG7aYrFbK8SliGoNcJzNT/ZENxp xORtYPgxz6JqDNuXU6WWEL7ddlnic+t/fJyV5bcv4Vg9qL++B8mhn4+tvzykHy0p Jlyt3TMp9V3uQTDA8DIwk/9yCWl3xhcDPxyqftBWhUFxpabpBf1/n6qGXSzY5dvE IwQK99ddR6qZYlWOgQXmcL2t7uv1zGFLqrxS1GAgTsEYBhOLXjKNe93AGix73UPo PKTgSsASo6itO1+puTzOzbnLm42IsEmzgPISBEvOnJ9AAYJzDxmUm240o/XSGs/h NRsUiz7mTGyV+crtq/dax8cC3cceGzeTKJfdX4wglaO91ZrDpo0ydiTikwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAILStPT9zPcyuhDdsnujwFwYumxMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvQWd0SzA5UDNNOXpLNkVOMnllNlBBWEJpNmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALW33zKfIV7RYU8MPzT1 Rh2Mr4bq8KADAbO4rhr2oWA8G/NpGHD5eVT+yc9btHvJYCBFM7hK+ozNbcX4oU9m CFneqs/+OexUahrUVmXA/oDeK2bjtaVitqIV+1b0v/xD4x73WB7jxtLlqP81wPzs VdyNq9wl6B2V6hTT7y9UcAoxvgO5GfR0eZyM2pqV6BpcvqtOrBGBinv13ul3G8Un PO7MhcyiQ9vyep/HX4L4I5Cwj4MucA0FQIiM4RfUXdMnR5NR1tHpi+PjFaQxI4Us 86bDupkiPk1J0ifSHgxlfXpCZsAlTT0jTBDb/au+sAoS4dHSds+76kJ6Wn/ESl7F Trc= -----END CERTIFICATE-----Generated at Sat Dec 20 09:12:10 2025 by rpki-client