This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9u6DFZGq3xn4kgVkCoGqjX8V0Q.roa File: M9u6DFZGq3xn4kgVkCoGqjX8V0Q.roa (raw, json) Hash identifier: iemD71807QrvGpmI+gFvs4M2jlc64AJrcUbuTMnKhYE= Subject key identifier: 33:DB:BA:0C:56:46:AB:7C:67:E2:48:15:90:2A:06:AA:35:FC:57:44 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189681100AB04FB1BABF8545E5CD8E37210 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9u6DFZGq3xn4kgVkCoGqjX8V0Q.roa Signing time: Tue 18 Jul 2023 08:14:52 +0000 ROA not before: Tue 18 Jul 2023 08:14:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:68:11:00:ab:04:fb:1b:ab:f8:54:5e:5c:d8:e3:72:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 18 08:14:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=33dbba0c5646ab7c67e24815902a06aa35fc5744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:9b:be:ec:51:8c:c3:d1:de:4e:a0:e8:ba: 4a:e5:b8:df:27:a0:f6:6f:f8:81:d1:40:8d:d5:ff: aa:38:5d:35:78:ec:46:0b:99:c0:4e:d7:1d:2e:db: cc:ce:b6:4b:17:d3:3a:ff:7b:1d:ce:af:ca:06:84: aa:81:4e:6a:3d:e0:0d:1d:b9:08:ce:95:7a:fc:ef: a1:a2:25:21:59:af:82:95:90:fb:c1:b7:86:64:9e: e6:c9:5a:88:fb:cd:b3:3d:5c:c2:83:11:07:d3:f3: c9:3f:1c:b0:10:a5:81:54:99:d2:23:30:20:a0:e2: d4:de:6e:72:92:fd:a6:c6:d2:33:1c:5c:b5:6f:fa: ae:b3:93:68:52:b9:e2:e2:e6:bf:82:a1:cd:58:1e: 3e:1a:3f:9d:98:c9:9f:75:4d:62:c4:dd:6a:13:77: da:8f:2f:12:95:96:a5:c6:ae:0c:76:69:25:f2:f2: ee:ff:2c:e5:76:2b:f0:ad:f4:cb:5d:0b:93:bc:84: 04:fd:a1:da:05:f1:c5:be:6a:43:2d:57:0d:66:41: ee:19:c3:ec:61:08:a6:8c:52:d4:24:b9:d2:63:b5: d6:fa:01:f2:7f:7e:04:00:bd:e8:a1:10:76:ea:c3: c1:82:4d:f3:1f:d5:f5:22:55:ad:52:4f:1a:88:fb: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DB:BA:0C:56:46:AB:7C:67:E2:48:15:90:2A:06:AA:35:FC:57:44 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9u6DFZGq3xn4kgVkCoGqjX8V0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 03:88:be:28:bc:8f:0d:00:4e:6d:4b:72:a1:b5:5f:c1:49:52: 78:35:cd:63:8d:8b:54:f7:c4:27:65:ae:00:55:b8:54:3d:e5: 4c:84:b2:d4:0a:8b:26:32:3d:00:77:8a:d5:51:8a:c7:4e:ed: e2:29:78:29:92:05:10:18:88:ea:a0:97:75:b8:a7:ee:d3:e3: 89:53:ed:dd:1c:0f:c1:e6:83:88:cf:c5:6a:4c:a9:ae:3a:6f: 83:de:6c:57:3c:0f:a2:8b:86:14:6d:e6:5c:00:1e:c0:e5:4d: 2c:73:1b:a5:de:91:6a:9d:5c:8a:4a:40:ed:13:a2:24:d5:f0: 47:78:13:1a:f7:28:94:e6:d8:b9:6c:4b:08:88:99:94:06:de: 87:a4:f7:0b:1d:bb:7f:52:8f:3f:0f:6e:23:a4:f0:ea:0e:e6: 11:e0:34:ce:e1:b6:32:4a:2e:bb:79:a0:a6:c0:0d:b4:ff:98: 67:d7:e7:5a:17:fa:3f:a1:0a:10:f1:90:69:fd:7a:80:c0:1c: 98:97:e6:95:b7:2e:b3:39:d3:4a:31:b0:98:bf:4b:26:e5:14: 83:1c:43:a8:f3:ce:ae:65:56:ce:09:bf:ce:e6:e3:3b:0a:d0: 6a:30:fc:78:6b:bc:dc:bf:a8:40:bb:77:df:18:3d:87:69:68: a3:5a:3d:96 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYloEQCrBPsbq/hUXlzY43IQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNzE4MDgxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2RiYmEwYzU2NDZhYjdjNjdlMjQ4MTU5MDJhMDZhYTM1ZmM1NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKObvuxRjMPR3k6g6LpK5bjfJ6D2 b/iB0UCN1f+qOF01eOxGC5nATtcdLtvMzrZLF9M6/3sdzq/KBoSqgU5qPeANHbkI zpV6/O+hoiUhWa+ClZD7wbeGZJ7myVqI+82zPVzCgxEH0/PJPxywEKWBVJnSIzAg oOLU3m5ykv2mxtIzHFy1b/qus5NoUrni4ua/gqHNWB4+Gj+dmMmfdU1ixN1qE3fa jy8SlZalxq4Mdmkl8vLu/yzldivwrfTLXQuTvIQE/aHaBfHFvmpDLVcNZkHuGcPs YQimjFLUJLnSY7XW+gHyf34EAL3ooRB26sPBgk3zH9X1IlWtUk8aiPssCwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDPbugxWRqt8Z+JIFZAqBqo1/FdEMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvTTl1NkRGWkdxM3huNGtnVmtDb0dxalg4VjBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAOIvii8jw0ATm1LcqG1 X8FJUng1zWONi1T3xCdlrgBVuFQ95UyEstQKiyYyPQB3itVRisdO7eIpeCmSBRAY iOqgl3W4p+7T44lT7d0cD8Hmg4jPxWpMqa46b4PebFc8D6KLhhRt5lwAHsDlTSxz G6XekWqdXIpKQO0ToiTV8Ed4Exr3KJTm2LlsSwiImZQG3oek9wsdu39Sjz8PbiOk 8OoO5hHgNM7htjJKLrt5oKbADbT/mGfX51oX+j+hChDxkGn9eoDAHJiX5pW3LrM5 00oxsJi/SyblFIMcQ6jzzq5lVs4Jv87m4zsK0Gow/HhrvNy/qEC7d98YPYdpaKNa PZY= -----END CERTIFICATE-----Generated at Tue Dec 23 03:17:33 2025 by rpki-client