This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLw8Y3N4YF1Px_156_jQmgty6wc.roa File: NLw8Y3N4YF1Px_156_jQmgty6wc.roa (raw, json) Hash identifier: DhuN1+Y4xJY0t0Z0yGA+4/e/DWVO1kcKimGemBCixgE= Subject key identifier: 34:BC:3C:63:73:78:60:5D:4F:C7:FD:79:EB:F8:D0:9A:0B:72:EB:07 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189BB496AEEF4D9190A79CE0960D8060A0C Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLw8Y3N4YF1Px_156_jQmgty6wc.roa Signing time: Thu 03 Aug 2023 12:04:58 +0000 ROA not before: Thu 03 Aug 2023 12:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:bb48:b89d/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:bb:49:6a:ee:f4:d9:19:0a:79:ce:09:60:d8:06:0a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 3 12:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=34bc3c637378605d4fc7fd79ebf8d09a0b72eb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:90:0e:02:11:8e:21:c8:47:ac:6f:a0:93:6c: b4:a5:0b:e9:d0:49:f3:78:2b:ba:5a:5d:a4:53:33: b1:88:df:11:cd:6d:f9:85:2b:c2:34:77:c2:82:d3: ba:f3:4c:f7:ef:e9:35:00:32:73:5a:1d:d3:49:a7: fd:47:3f:0b:5d:d7:18:d3:2f:6b:b0:e9:f8:69:f1: ac:fe:ec:29:78:b9:3a:69:c6:3c:0d:24:81:4b:87: 1f:95:1c:c7:d5:57:95:d8:74:e2:8b:64:87:96:1c: 25:72:4e:83:5f:69:d2:61:d0:c3:11:7c:5b:2a:99: b6:da:92:59:42:4c:d9:d2:a9:2f:70:03:4a:bf:37: 90:96:5e:35:44:70:e9:07:68:10:97:8f:b4:33:7f: 42:43:17:78:85:af:ff:ce:99:3f:b8:d2:56:68:77: e3:5c:ec:9d:8d:0d:33:42:24:60:2b:7b:41:71:0a: 9a:7c:09:a1:f8:fa:71:74:e0:44:7d:94:01:94:7b: 3d:63:ee:57:c7:f3:58:fb:67:c0:42:de:46:68:2c: 31:8a:7d:00:a0:35:b3:ec:ff:8a:52:1d:93:b9:03: d2:e5:5d:a8:c1:13:26:15:6a:e2:1a:6c:f1:24:53: ae:51:89:5c:34:dd:25:15:71:2a:0b:a0:7e:a2:e2: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BC:3C:63:73:78:60:5D:4F:C7:FD:79:EB:F8:D0:9A:0B:72:EB:07 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLw8Y3N4YF1Px_156_jQmgty6wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 61:dd:ae:bc:22:4c:88:dd:9c:44:8e:37:56:4e:18:3c:44:1e: ce:df:91:6c:74:cd:c9:88:62:1c:01:fb:25:ad:91:e0:de:c4: 72:9f:18:2e:f9:a9:f6:e8:87:6c:bc:78:44:b9:13:46:c9:86: 5e:32:d3:73:89:27:e6:5c:e1:2e:a9:ae:2e:8f:73:34:d4:4b: 27:7d:cd:31:3f:94:b5:bb:d3:a8:2d:4b:33:d9:95:3a:fe:a7: 97:03:52:b4:a6:7d:4e:be:aa:bf:43:f6:62:65:dd:6d:dd:4d: b5:60:6e:37:72:b0:d1:1d:33:9e:f1:28:b6:ad:f8:80:06:63: 14:a7:85:2e:93:a0:c4:98:78:13:4e:12:ac:5e:10:aa:c0:b7: f4:9b:5c:16:e0:f0:5c:37:1a:de:11:49:8d:69:09:2a:06:e9: 84:31:d5:f5:6d:e8:30:e3:86:4d:8e:88:8d:af:72:40:65:c2: c9:0c:12:58:e8:65:ea:b8:69:39:98:f6:15:63:b7:eb:ca:ea: 40:21:2a:3a:f8:91:8c:b9:e1:d5:13:e2:b3:bb:7c:28:c9:28: a7:07:16:49:fd:c6:e6:ba:14:cf:9f:65:4c:42:c2:84:50:b1: 91:6b:41:f4:fe:bd:5e:2c:d1:a7:08:79:f2:db:68:3a:3c:4b: 84:3f:72:ec -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYm7SWru9NkZCnnOCWDYBgoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODAzMTIwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGJjM2M2MzczNzg2MDVkNGZjN2ZkNzllYmY4ZDA5YTBiNzJlYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZAOAhGOIchHrG+gk2y0pQvp0Enz eCu6Wl2kUzOxiN8RzW35hSvCNHfCgtO680z37+k1ADJzWh3TSaf9Rz8LXdcY0y9r sOn4afGs/uwpeLk6acY8DSSBS4cflRzH1VeV2HTii2SHlhwlck6DX2nSYdDDEXxb Kpm22pJZQkzZ0qkvcANKvzeQll41RHDpB2gQl4+0M39CQxd4ha//zpk/uNJWaHfj XOydjQ0zQiRgK3tBcQqafAmh+PpxdOBEfZQBlHs9Y+5Xx/NY+2fAQt5GaCwxin0A oDWz7P+KUh2TuQPS5V2owRMmFWriGmzxJFOuUYlcNN0lFXEqC6B+ouLSKQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDS8PGNzeGBdT8f9eev40JoLcusHMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvTkx3OFkzTjRZRjFQeF8xNTZfalFtZ3R5NndjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGHdrrwiTIjdnESON1ZO GDxEHs7fkWx0zcmIYhwB+yWtkeDexHKfGC75qfboh2y8eES5E0bJhl4y03OJJ+Zc 4S6pri6PczTUSyd9zTE/lLW706gtSzPZlTr+p5cDUrSmfU6+qr9D9mJl3W3dTbVg bjdysNEdM57xKLat+IAGYxSnhS6ToMSYeBNOEqxeEKrAt/SbXBbg8Fw3Gt4RSY1p CSoG6YQx1fVt6DDjhk2OiI2vckBlwskMEljoZeq4aTmY9hVjt+vK6kAhKjr4kYy5 4dUT4rO7fCjJKKcHFkn9xua6FM+fZUxCwoRQsZFrQfT+vV4s0acIefLbaDo8S4Q/ cuw= -----END CERTIFICATE-----Generated at Fri Dec 19 21:12:18 2025 by rpki-client