This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8ylr6_jIMHKg9vOHWZF_crdawU.roa File: I8ylr6_jIMHKg9vOHWZF_crdawU.roa (raw, json) Hash identifier: LIwU2H6KqKCLWGJ1wXQctwCfmfHPGFXPcb78y5lANmg= Subject key identifier: 23:CC:A5:AF:AF:E3:20:C1:CA:83:DB:CE:1D:66:45:FD:CA:DD:6B:05 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189977448A1C1B79BE3B715F5A7FDA410D0 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8ylr6_jIMHKg9vOHWZF_crdawU.roa Signing time: Thu 27 Jul 2023 13:05:27 +0000 ROA not before: Thu 27 Jul 2023 13:05:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:189:9773:5bbf/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:97:74:48:a1:c1:b7:9b:e3:b7:15:f5:a7:fd:a4:10:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 27 13:05:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=23cca5afafe320c1ca83dbce1d6645fdcadd6b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:0d:4a:a7:a4:12:f6:98:61:50:0d:18:35: 5f:d6:5e:17:10:43:4b:45:13:50:a3:7c:e3:cd:ad: 09:70:16:27:99:57:24:3f:9d:eb:cb:8e:ad:31:53: c5:98:a6:47:c4:ec:7e:91:a5:8d:12:fb:77:1e:1c: 25:c3:51:b3:18:dc:c2:48:64:27:3e:bd:51:f0:f5: b7:1d:b4:0c:ff:89:a7:f2:2a:b8:a1:4f:73:d0:5c: 4b:38:93:d9:b6:36:d0:38:71:92:35:ab:8d:11:d1: 57:fc:5a:c6:6e:1d:f4:98:af:ca:53:11:51:ec:ea: e8:46:f4:f6:9c:42:2a:63:59:cd:09:2e:74:1b:93: 70:38:55:47:ca:b5:2b:99:9a:0f:98:2e:80:48:75: 16:f4:82:30:e5:71:34:70:d4:b0:d0:c0:53:25:9b: 05:ac:fb:9b:6e:e2:71:91:91:c2:08:5e:45:ea:74: 2b:1c:a8:a6:ef:b6:be:22:92:9f:13:33:91:d3:cb: a5:66:db:25:ef:bb:42:f8:83:d7:f4:1f:51:54:e7: 60:84:08:8d:ef:e9:a1:4b:d7:79:fa:24:18:03:c3: 57:96:ad:02:51:7f:0d:49:d1:58:f2:59:73:a1:98: 66:7a:76:85:88:ff:53:9a:a4:4e:06:2d:85:55:d4: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CC:A5:AF:AF:E3:20:C1:CA:83:DB:CE:1D:66:45:FD:CA:DD:6B:05 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8ylr6_jIMHKg9vOHWZF_crdawU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption b2:8d:a9:22:7e:c5:8c:d7:20:a5:7a:93:ce:1c:10:e7:6c:be: 94:74:e9:64:f5:fb:47:ef:a3:46:3a:5b:06:a4:b4:37:87:9c: e2:6c:4b:61:23:9d:10:fa:fd:5f:c1:28:39:37:7a:65:71:cf: eb:dd:09:52:e2:ec:e7:cb:f6:25:8c:32:e0:ce:0d:4e:a1:7a: b8:0d:ef:8b:c4:8e:2a:a6:cf:01:15:88:02:90:74:6f:de:af: c1:54:1d:8a:80:0c:17:48:6a:e9:62:33:4d:6b:1d:20:be:71: 42:11:5a:18:77:74:ac:15:12:89:5e:76:50:2a:0f:02:dd:21: 9c:6a:a8:58:ef:d8:b3:66:e7:7c:92:c1:bc:72:21:9a:79:fa: a2:dc:df:00:00:bf:5d:37:62:65:a3:3b:98:cb:69:83:1b:f6: 97:31:05:01:f0:4a:5b:b6:33:6b:3d:1b:98:2a:52:aa:29:28: ab:43:21:af:d0:08:1e:49:44:4e:ba:7b:16:19:87:90:6a:75: 75:f7:04:f7:3f:a2:fa:93:3b:a6:a0:57:ae:59:4d:cf:33:c8: 31:ca:ee:39:3c:7e:5b:dd:a0:fc:e1:d5:a2:fd:6a:fc:f4:54: d2:2a:99:45:04:84:8e:d6:90:1d:20:a2:02:c1:25:0a:02:d9: 7c:8f:35:06 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYmXdEihwbeb47cV9af9pBDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNzI3MTMwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2NjYTVhZmFmZTMyMGMxY2E4M2RiY2UxZDY2NDVmZGNhZGQ2YjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKsNSqekEvaYYVANGDVf1l4XEENL RRNQo3zjza0JcBYnmVckP53ry46tMVPFmKZHxOx+kaWNEvt3Hhwlw1GzGNzCSGQn Pr1R8PW3HbQM/4mn8iq4oU9z0FxLOJPZtjbQOHGSNauNEdFX/FrGbh30mK/KUxFR 7OroRvT2nEIqY1nNCS50G5NwOFVHyrUrmZoPmC6ASHUW9IIw5XE0cNSw0MBTJZsF rPubbuJxkZHCCF5F6nQrHKim77a+IpKfEzOR08ulZtsl77tC+IPX9B9RVOdghAiN 7+mhS9d5+iQYA8NXlq0CUX8NSdFY8llzoZhmenaFiP9TmqROBi2FVdShJwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCPMpa+v4yDByoPbzh1mRf3K3WsFMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvSTh5bHI2X2pJTUhLZzl2T0hXWkZfY3JkYXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALKNqSJ+xYzXIKV6k84c EOdsvpR06WT1+0fvo0Y6WwaktDeHnOJsS2EjnRD6/V/BKDk3emVxz+vdCVLi7OfL 9iWMMuDODU6hergN74vEjiqmzwEViAKQdG/er8FUHYqADBdIauliM01rHSC+cUIR Whh3dKwVEoledlAqDwLdIZxqqFjv2LNm53ySwbxyIZp5+qLc3wAAv103YmWjO5jL aYMb9pcxBQHwSlu2M2s9G5gqUqopKKtDIa/QCB5JRE66exYZh5BqdXX3BPc/ovqT O6agV65ZTc8zyDHK7jk8flvdoPzh1aL9avz0VNIqmUUEhI7WkB0gogLBJQoC2XyP NQY= -----END CERTIFICATE-----Generated at Tue Dec 23 06:40:02 2025 by rpki-client