This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkBSo6Z5dtxe0SR1m46QPfvBNSk.roa File: IkBSo6Z5dtxe0SR1m46QPfvBNSk.roa (raw, json) Hash identifier: prtPpF+Bu5FrjP9mcyvYzlZ0WpKge+3kqD05guY0+UQ= Subject key identifier: 22:40:52:A3:A6:79:76:DC:5E:D1:24:75:9B:8E:90:3D:FB:C1:35:29 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0186A12E441F74B85C8FFDDF4155FA5289B0 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkBSo6Z5dtxe0SR1m46QPfvBNSk.roa Signing time: Thu 02 Mar 2023 07:16:49 +0000 ROA not before: Thu 02 Mar 2023 07:16:49 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:a1:2e:44:1f:74:b8:5c:8f:fd:df:41:55:fa:52:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Mar 2 07:16:49 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=224052a3a67976dc5ed124759b8e903dfbc13529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:a4:32:f9:df:33:57:1b:07:e7:4c:b2:8c: 02:03:aa:e0:47:fe:2c:b2:b6:53:42:1d:c8:21:ce: 68:09:6f:79:6a:06:86:99:57:85:3a:f0:49:79:06: 32:73:8c:69:30:4b:88:17:eb:4f:db:00:4c:d2:99: 12:c1:c0:4e:f4:44:54:54:e5:c6:d5:5e:93:a9:db: 88:38:c6:3d:f6:bd:71:a5:02:fe:26:11:3a:ed:57: 96:6c:e3:81:2c:ec:01:89:f9:28:66:56:6d:1c:f1: d0:9d:51:02:bd:87:0d:cb:30:de:44:b2:53:c4:34: 86:a9:4b:2e:04:27:34:72:e3:c3:17:0e:56:f9:4c: c2:cb:33:e5:b5:20:36:98:97:72:0f:60:ad:6d:ed: b4:fa:5e:11:3e:e9:7d:28:97:47:46:c3:de:81:a5: a6:cb:33:ce:de:a6:eb:f5:6f:57:b0:2c:75:8c:f1: 3f:b5:8e:86:f6:23:d2:33:7e:13:ed:f9:b5:96:fc: e3:53:fe:9c:e4:2a:7f:c5:ce:2d:43:93:78:fa:18: 1b:a2:39:9c:51:d4:d4:e5:b8:73:c2:e7:75:2d:43: f6:79:41:fc:c0:b6:15:db:17:72:2b:a5:43:92:34: a2:3b:f4:61:ec:54:e5:14:a2:88:72:c5:df:b6:2b: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:40:52:A3:A6:79:76:DC:5E:D1:24:75:9B:8E:90:3D:FB:C1:35:29 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkBSo6Z5dtxe0SR1m46QPfvBNSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 68:2d:6e:2c:6a:09:96:93:16:29:e5:51:8c:ba:71:df:02:59: 39:66:70:1f:28:ee:1f:e7:60:1c:01:2f:a2:c8:3f:43:13:53: b9:c9:43:dc:71:29:db:44:1c:95:8e:5e:02:c1:cf:55:5a:13: dc:1d:df:1a:2b:77:10:09:d3:64:ce:47:4b:e1:6e:dd:ac:66: 6c:86:4d:0d:0a:23:e9:e0:e6:50:53:e9:db:7c:ee:f3:5d:7d: db:48:ae:3f:45:30:18:f6:ac:5b:03:a9:26:3d:d9:6d:ea:3f: 32:bf:76:99:bc:ab:90:e1:ed:34:3e:02:42:cd:b4:d1:88:37: 79:4b:70:80:75:56:23:99:3a:e1:b4:c4:2b:42:31:56:49:5c: 14:cb:fc:89:3f:73:5c:06:d8:22:d1:44:15:83:cd:be:13:a1: 7e:1b:91:0b:78:62:7b:32:c3:93:5d:a9:95:68:5c:88:70:0d: 9f:8d:2b:78:9e:fd:83:81:b0:87:e3:4d:7c:28:69:f0:79:e2: ca:98:0d:73:9e:e6:b7:32:3d:d7:25:71:14:78:a1:69:f6:9d: 03:27:74:a6:fd:83:91:ff:c2:01:aa:c6:6f:0e:02:a2:6e:8c: a0:92:99:bd:3a:2f:e1:b0:08:e7:67:35:d8:e1:df:de:53:f8: 4c:8e:ef:1d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYahLkQfdLhcj/3fQVX6UomwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMzAyMDcxNjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQwNTJhM2E2Nzk3NmRjNWVkMTI0NzU5YjhlOTAzZGZiYzEzNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHKkMvnfM1cbB+dMsowCA6rgR/4s srZTQh3IIc5oCW95agaGmVeFOvBJeQYyc4xpMEuIF+tP2wBM0pkSwcBO9ERUVOXG 1V6TqduIOMY99r1xpQL+JhE67VeWbOOBLOwBifkoZlZtHPHQnVECvYcNyzDeRLJT xDSGqUsuBCc0cuPDFw5W+UzCyzPltSA2mJdyD2Ctbe20+l4RPul9KJdHRsPegaWm yzPO3qbr9W9XsCx1jPE/tY6G9iPSM34T7fm1lvzjU/6c5Cp/xc4tQ5N4+hgbojmc UdTU5bhzwud1LUP2eUH8wLYV2xdyK6VDkjSiO/Rh7FTlFKKIcsXftiuCRQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCJAUqOmeXbcXtEkdZuOkD37wTUpMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvSWtCU282WjVkdHhlMFNSMW00NlFQZnZCTlNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGgtbixqCZaTFinlUYy6 cd8CWTlmcB8o7h/nYBwBL6LIP0MTU7nJQ9xxKdtEHJWOXgLBz1VaE9wd3xordxAJ 02TOR0vhbt2sZmyGTQ0KI+ng5lBT6dt87vNdfdtIrj9FMBj2rFsDqSY92W3qPzK/ dpm8q5Dh7TQ+AkLNtNGIN3lLcIB1ViOZOuG0xCtCMVZJXBTL/Ik/c1wG2CLRRBWD zb4ToX4bkQt4Ynsyw5NdqZVoXIhwDZ+NK3ie/YOBsIfjTXwoafB54sqYDXOe5rcy PdclcRR4oWn2nQMndKb9g5H/wgGqxm8OAqJujKCSmb06L+GwCOdnNdjh395T+EyO 7x0= -----END CERTIFICATE-----Generated at Mon Dec 22 20:32:42 2025 by rpki-client