This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNKQSohipsk9fTxBy_9X39HW44s.roa File: NNKQSohipsk9fTxBy_9X39HW44s.roa (raw, json) Hash identifier: 8GP/0iIKXYfRpY0D+Lx/ctxq1Wxaj5vc45YcUBPDXP0= Subject key identifier: 34:D2:90:4A:88:62:A6:C9:3D:7D:3C:41:CB:FF:57:DF:D1:D6:E3:8B Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0184DB8DBABCE46565D1B195EDB32DE6DAB0 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNKQSohipsk9fTxBy_9X39HW44s.roa Signing time: Sun 04 Dec 2022 05:13:29 +0000 ROA not before: Sun 04 Dec 2022 05:13:29 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:84:db:8d:ba:bc:e4:65:65:d1:b1:95:ed:b3:2d:e6:da:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 4 05:13:29 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=34d2904a8862a6c93d7d3c41cbff57dfd1d6e38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:55:16:29:d7:65:09:2e:80:99:13:94:22: fd:a2:c9:64:b7:70:df:de:de:2d:89:5b:6b:e1:8d: 28:23:9c:47:e8:ad:1e:8b:4f:57:8c:05:71:98:03: f4:b4:61:fd:a7:22:7b:3a:54:8b:79:c1:55:d2:72: 82:56:9b:30:9c:45:47:12:26:46:25:c7:48:f4:97: 24:7e:21:c6:ee:31:e8:9f:04:fa:89:0e:e3:b1:94: 09:bd:ed:5a:ea:f9:b0:8a:a4:f5:d2:eb:e6:7e:39: 20:76:a4:cb:89:a3:ee:24:af:5a:93:53:7c:c7:f2: 5b:1b:28:d2:63:ad:34:c9:1b:57:52:dd:5a:50:3d: 92:4a:d3:fa:1f:0c:24:a5:c9:cb:a3:31:7c:c6:6a: a2:12:86:e8:cd:71:6a:ef:cf:bf:32:41:ea:25:57: b0:9e:b8:71:3d:62:71:6c:68:e3:98:6f:df:b5:4e: d6:d1:61:25:0b:9e:01:da:bd:ee:b5:86:85:ca:ed: e9:00:38:37:41:3d:2d:d7:eb:81:2d:e0:8a:92:11: d3:7f:cf:89:9a:df:67:68:ac:9b:82:77:06:24:cf: 28:5b:92:01:53:44:75:c8:92:2a:2c:7f:44:af:74: bd:ee:0a:d2:bf:e8:be:bd:fc:b5:73:97:0c:04:01: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D2:90:4A:88:62:A6:C9:3D:7D:3C:41:CB:FF:57:DF:D1:D6:E3:8B X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNKQSohipsk9fTxBy_9X39HW44s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 8e:6d:02:61:aa:d2:1d:e6:16:1f:40:0e:cf:57:d2:b5:7b:75: 8e:5e:2c:a0:9f:b5:df:68:1c:93:b4:7c:b2:d4:01:a2:0c:37: 13:c6:3c:5d:37:45:47:05:78:b2:67:13:53:42:3c:2e:af:06: c6:31:f4:41:d9:20:61:d5:e1:72:e6:2f:07:d2:78:81:1a:bc: 13:9c:d1:59:ac:75:23:9b:ad:5b:99:a0:eb:5e:21:91:37:59: 2f:e6:48:46:26:4a:c5:cf:0d:eb:97:16:02:f3:83:8f:9c:4d: 6c:fa:ae:00:dd:7c:6d:67:d7:d2:06:e5:00:5f:9b:9f:12:9e: aa:fa:6b:11:8a:d9:d0:9d:e5:91:68:f6:63:24:0a:cd:44:36: 89:db:8e:ae:86:94:da:35:33:1e:18:11:e9:02:ec:0b:bd:51: 93:66:2c:64:33:e1:33:98:d1:41:df:2b:2d:ae:70:e4:88:08: 92:1a:ad:25:bb:69:a9:0e:64:d7:80:93:e8:51:52:a2:6a:38: a8:f6:a0:0d:8f:75:b4:df:9e:3a:1c:12:4a:e9:5c:97:7e:cb: 2c:fe:91:99:7b:9e:73:3a:df:05:75:ea:8a:72:41:ce:08:47: e2:99:e5:a8:5c:e9:e6:53:98:35:98:be:77:7e:35:67:5e:5a: 09:f9:86:a6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYTbjbq85GVl0bGV7bMt5tqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjA0MDUxMzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGQyOTA0YTg4NjJhNmM5M2Q3ZDNjNDFjYmZmNTdkZmQxZDZlMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq89VFinXZQkugJkTlCL9oslkt3Df 3t4tiVtr4Y0oI5xH6K0ei09XjAVxmAP0tGH9pyJ7OlSLecFV0nKCVpswnEVHEiZG JcdI9JckfiHG7jHonwT6iQ7jsZQJve1a6vmwiqT10uvmfjkgdqTLiaPuJK9ak1N8 x/JbGyjSY600yRtXUt1aUD2SStP6HwwkpcnLozF8xmqiEobozXFq78+/MkHqJVew nrhxPWJxbGjjmG/ftU7W0WElC54B2r3utYaFyu3pADg3QT0t1+uBLeCKkhHTf8+J mt9naKybgncGJM8oW5IBU0R1yJIqLH9Er3S97grSv+i+vfy1c5cMBAF+kQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDTSkEqIYqbJPX08Qcv/V9/R1uOLMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvTk5LUVNvaGlwc2s5ZlR4QnlfOVgzOUhXNDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI5tAmGq0h3mFh9ADs9X 0rV7dY5eLKCftd9oHJO0fLLUAaIMNxPGPF03RUcFeLJnE1NCPC6vBsYx9EHZIGHV 4XLmLwfSeIEavBOc0VmsdSObrVuZoOteIZE3WS/mSEYmSsXPDeuXFgLzg4+cTWz6 rgDdfG1n19IG5QBfm58Snqr6axGK2dCd5ZFo9mMkCs1ENonbjq6GlNo1Mx4YEekC 7Au9UZNmLGQz4TOY0UHfKy2ucOSICJIarSW7aakOZNeAk+hRUqJqOKj2oA2PdbTf njocEkrpXJd+yyz+kZl7nnM63wV16opyQc4IR+KZ5ahc6eZTmDWYvnd+NWdeWgn5 hqY= -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:57 2025 by rpki-client