This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MFRBDl9Ox4maclTAzICpKJIiQHQ.roa File: MFRBDl9Ox4maclTAzICpKJIiQHQ.roa (raw, json) Hash identifier: abfANTnoflndkuMHIZWvVpyQM97xs4KPPqwAAqpE514= Subject key identifier: 30:54:41:0E:5F:4E:C7:89:9A:72:54:C0:CC:80:A9:28:92:22:40:74 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018366D5C37AEAA14037D7C463A576A61F31 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MFRBDl9Ox4maclTAzICpKJIiQHQ.roa Signing time: Thu 22 Sep 2022 20:13:48 +0000 ROA not before: Thu 22 Sep 2022 20:13:48 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128 2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128 2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128 2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128 2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:83:66:d5:c3:7a:ea:a1:40:37:d7:c4:63:a5:76:a6:1f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Sep 22 20:13:48 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=3054410e5f4ec7899a7254c0cc80a92892224074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5e:aa:bd:03:0b:6f:37:37:79:5a:e1:16:37: c4:6e:16:61:ec:30:f7:70:b9:b5:8a:e5:15:c6:4e: 01:51:80:03:8d:b0:ae:b4:42:b4:87:af:73:c7:99: d3:20:a0:63:3b:e8:50:c1:f0:16:ff:62:4c:8d:4c: 39:cd:8c:10:79:35:dc:46:f8:48:c5:40:19:11:36: dc:38:7f:d7:cb:71:50:d7:91:1e:a4:d8:a2:68:24: 0f:6c:c5:e4:25:2b:ed:42:e6:b9:53:c2:22:8f:2c: 08:b3:84:65:ea:a7:f7:83:2b:f3:c9:9f:20:a7:0f: 0e:83:56:e9:61:ef:b7:69:27:cf:2b:a9:b2:99:2e: 91:23:d2:dc:48:fd:be:97:aa:0f:90:51:81:57:b0: 4c:01:8a:c0:20:bc:3f:a4:81:d9:50:f9:74:25:36: 40:9a:b7:93:b0:0b:a3:b5:a5:db:4f:9e:13:f7:b6: 1f:cb:d4:d5:91:2c:37:30:cf:08:75:a9:59:95:57: 7f:f7:1e:13:3d:c3:ec:f9:a2:cf:82:bd:90:d4:cd: b8:22:e0:29:60:98:e4:9f:6d:d9:6f:fb:8c:bd:44: b5:7f:0f:73:10:e5:7f:6d:76:75:85:78:78:40:f3: e8:42:29:36:10:1a:58:71:91:c3:3f:4b:a6:cd:85: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:54:41:0E:5F:4E:C7:89:9A:72:54:C0:CC:80:A9:28:92:22:40:74 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MFRBDl9Ox4maclTAzICpKJIiQHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 0a:62:8e:23:a1:e6:9d:28:49:2d:e6:f0:67:df:5c:f4:24:2e: f1:4d:98:a0:f3:89:26:90:0e:7c:f4:db:ae:d9:99:43:0f:19: 3c:da:4a:10:c4:3e:b5:e9:d8:21:9f:e7:e4:90:28:3a:8f:a1: 26:bc:85:fc:b9:25:dc:a9:7b:4a:9f:8c:d0:d9:02:83:5d:d8: 05:f5:bc:8e:96:f0:bc:cd:f2:a0:41:2a:91:35:d7:68:5c:e2: 21:bf:be:08:6b:05:2f:4e:f4:60:7b:7c:b3:d3:63:32:c8:90: ed:78:26:ad:27:d3:f6:e6:65:a9:78:6b:42:e4:c4:51:7e:5b: fa:ed:75:4b:24:67:1f:28:bd:03:2a:90:32:f1:46:2b:e7:22: d8:79:ff:a2:15:b8:f0:8f:4c:1b:51:9c:4e:3b:24:0f:64:73: 77:59:b3:00:bc:06:ed:77:51:01:9d:57:12:33:82:33:60:f4: 3c:4e:46:7d:0a:09:b5:6c:29:b7:31:ea:ac:81:8b:e6:80:1d: 29:9d:65:f7:52:c3:9d:9e:6d:af:e1:ca:91:f0:56:48:7e:e4: 1e:75:3f:42:2a:76:a4:9b:63:41:ef:cc:4d:1c:1d:5a:ff:20: a1:b2:44:29:bc:b7:d8:ea:ee:a6:d2:6a:f9:5a:74:a2:bc:a0: 0f:77:cb:ec -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYNm1cN66qFAN9fEY6V2ph8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIwOTIyMjAxMzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDU0NDEwZTVmNGVjNzg5OWE3MjU0YzBjYzgwYTkyODkyMjI0MDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl6qvQMLbzc3eVrhFjfEbhZh7DD3 cLm1iuUVxk4BUYADjbCutEK0h69zx5nTIKBjO+hQwfAW/2JMjUw5zYwQeTXcRvhI xUAZETbcOH/Xy3FQ15EepNiiaCQPbMXkJSvtQua5U8IijywIs4Rl6qf3gyvzyZ8g pw8Og1bpYe+3aSfPK6mymS6RI9LcSP2+l6oPkFGBV7BMAYrAILw/pIHZUPl0JTZA mreTsAujtaXbT54T97Yfy9TVkSw3MM8IdalZlVd/9x4TPcPs+aLPgr2Q1M24IuAp YJjkn23Zb/uMvUS1fw9zEOV/bXZ1hXh4QPPoQik2EBpYcZHDP0umzYW9CwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDBUQQ5fTseJmnJUwMyAqSiSIkB0MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvTUZSQkRsOU94NG1hY2xUQXpJQ3BLSklpUUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAApijiOh5p0oSS3m8Gff XPQkLvFNmKDziSaQDnz0267ZmUMPGTzaShDEPrXp2CGf5+SQKDqPoSa8hfy5Jdyp e0qfjNDZAoNd2AX1vI6W8LzN8qBBKpE112hc4iG/vghrBS9O9GB7fLPTYzLIkO14 Jq0n0/bmZal4a0LkxFF+W/rtdUskZx8ovQMqkDLxRivnIth5/6IVuPCPTBtRnE47 JA9kc3dZswC8Bu13UQGdVxIzgjNg9DxORn0KCbVsKbcx6qyBi+aAHSmdZfdSw52e ba/hypHwVkh+5B51P0IqdqSbY0HvzE0cHVr/IKGyRCm8t9jq7qbSavladKK8oA93 y+w= -----END CERTIFICATE-----Generated at Tue Dec 23 06:09:20 2025 by rpki-client