This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPLt4QE9qkwWyDCeUlnqdumdcLI.roa File: CPLt4QE9qkwWyDCeUlnqdumdcLI.roa (raw, json) Hash identifier: 8s/hprrQHitt0PAhhsxSDmkHyp4KmEf8kvp0/tbyYJI= Subject key identifier: 08:F2:ED:E1:01:3D:AA:4C:16:C8:30:9E:52:59:EA:76:E9:9D:70:B2 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0182933AD235BDE0476DB968C30B5EB4459C Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPLt4QE9qkwWyDCeUlnqdumdcLI.roa Signing time: Fri 12 Aug 2022 18:04:41 +0000 ROA not before: Fri 12 Aug 2022 18:04:41 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128 2001:67c:64:ffff:0:182:933a:c4bc/128 maxlen: 128 2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:82:93:3a:d2:35:bd:e0:47:6d:b9:68:c3:0b:5e:b4:45:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 12 18:04:41 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=08f2ede1013daa4c16c8309e5259ea76e99d70b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:29:ec:33:72:8c:3d:12:1d:07:cd:5e:7a: 76:2d:78:b8:e9:b5:3e:cf:db:6c:0b:e2:a5:52:6f: 87:bc:23:3c:b5:8a:86:d2:cf:b2:fb:3c:a7:bf:fa: 3a:e0:35:ff:31:d0:e8:e9:c7:1c:2b:32:19:72:bb: d7:46:8f:47:82:de:67:a0:b6:63:32:23:83:cd:5a: b6:b7:04:15:27:7f:6e:ee:4d:ef:b8:81:37:eb:91: 8b:09:ce:37:06:2c:c4:bf:6b:82:ab:59:99:9b:f6: 96:29:c8:60:15:1b:f5:4a:af:27:aa:e9:e0:ed:3d: b4:bb:1f:b8:00:3e:af:86:0a:e8:37:ec:46:12:55: 82:ef:e2:d3:19:20:df:f3:8c:23:3a:3c:73:17:b6: 01:dd:c0:8c:c6:45:08:aa:fa:37:57:97:2d:cb:c9: 4c:7c:09:cf:6e:74:07:4e:d4:c7:62:a2:6c:51:0e: 42:06:a5:e3:8a:e2:6d:e0:eb:75:29:2f:08:26:2d: 70:97:cd:b9:96:a6:08:a8:58:7c:2e:26:da:98:46: e9:3e:b6:0b:e1:93:9d:d2:67:48:d4:3a:55:b1:f9: bf:02:6f:23:a0:0c:c3:9c:04:15:cf:d6:0b:f1:97: c8:3a:20:eb:d1:6e:93:5e:08:73:a5:d7:98:a8:f9: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F2:ED:E1:01:3D:AA:4C:16:C8:30:9E:52:59:EA:76:E9:9D:70:B2 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPLt4QE9qkwWyDCeUlnqdumdcLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 52:df:55:b8:f6:7d:d1:65:da:a2:f9:09:83:b8:f2:27:b4:02: 52:cc:8f:7f:f7:98:de:10:ac:41:2f:c4:55:7a:b5:87:2d:75: 88:33:d5:9d:17:4d:17:87:4a:48:bf:57:34:d3:18:41:b1:95: f6:62:2e:c9:86:15:e3:80:54:2a:ae:5f:cb:3c:8e:70:d2:d1: a3:06:d6:0a:c5:ce:c6:e6:97:3e:23:b2:10:c7:8c:55:a6:01: e8:cf:19:ad:35:49:9e:79:9a:92:ee:bd:3c:f5:05:af:b3:86: c8:3c:e0:cd:20:60:b9:ba:23:bf:15:81:48:2e:61:57:2e:88: 61:15:7d:48:90:57:0f:b0:6d:99:37:cf:04:df:be:5a:79:78: df:63:cd:5a:d4:34:65:eb:46:a0:f7:7e:db:b7:2a:89:75:6f: 55:7b:14:9f:1d:b9:b0:81:ca:d5:47:6c:d1:08:eb:ab:18:c6: 3b:fc:f1:01:00:06:d0:d8:88:cf:43:75:4c:1b:f9:84:0e:2a: bb:b7:6c:82:40:b0:1b:10:d0:0d:3b:36:f3:72:55:56:db:b2: 64:8a:6c:36:21:68:a7:e7:68:83:d8:3d:1d:cf:51:44:64:39: 41:13:fe:dd:bb:94:d7:d0:15:88:d0:2c:4a:af:d0:5f:2a:24: 3f:25:14:e0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYKTOtI1veBHbblowwtetEWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIwODEyMTgwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGYyZWRlMTAxM2RhYTRjMTZjODMwOWU1MjU5ZWE3NmU5OWQ3MGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5sp7DNyjD0SHQfNXnp2LXi46bU+ z9tsC+KlUm+HvCM8tYqG0s+y+zynv/o64DX/MdDo6cccKzIZcrvXRo9Hgt5noLZj MiODzVq2twQVJ39u7k3vuIE365GLCc43BizEv2uCq1mZm/aWKchgFRv1Sq8nqung 7T20ux+4AD6vhgroN+xGElWC7+LTGSDf84wjOjxzF7YB3cCMxkUIqvo3V5cty8lM fAnPbnQHTtTHYqJsUQ5CBqXjiuJt4Ot1KS8IJi1wl825lqYIqFh8LibamEbpPrYL 4ZOd0mdI1DpVsfm/Am8joAzDnAQVz9YL8ZfIOiDr0W6TXghzpdeYqPnGoQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAjy7eEBPapMFsgwnlJZ6nbpnXCyMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvQ1BMdDRRRTlxa3dXeURDZVVsbnFkdW1kY0xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFLfVbj2fdFl2qL5CYO4 8ie0AlLMj3/3mN4QrEEvxFV6tYctdYgz1Z0XTReHSki/VzTTGEGxlfZiLsmGFeOA VCquX8s8jnDS0aMG1grFzsbmlz4jshDHjFWmAejPGa01SZ55mpLuvTz1Ba+zhsg8 4M0gYLm6I78VgUguYVcuiGEVfUiQVw+wbZk3zwTfvlp5eN9jzVrUNGXrRqD3ftu3 Kol1b1V7FJ8dubCBytVHbNEI66sYxjv88QEABtDYiM9DdUwb+YQOKru3bIJAsBsQ 0A07NvNyVVbbsmSKbDYhaKfnaIPYPR3PUURkOUET/t27lNfQFYjQLEqv0F8qJD8l FOA= -----END CERTIFICATE-----Generated at Sat Dec 20 23:12:19 2025 by rpki-client