This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OFHmOqDZ4nWxMKOTAP3j6GwQl7o.roa File: OFHmOqDZ4nWxMKOTAP3j6GwQl7o.roa (raw, json) Hash identifier: CvDfS+C5WzJlTFjJ3PIn+iVcCshJ7Dolc8SQGpm14JQ= Subject key identifier: 38:51:E6:3A:A0:D9:E2:75:B1:30:A3:93:00:FD:E3:E8:6C:10:97:BA Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 69C66F6A Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OFHmOqDZ4nWxMKOTAP3j6GwQl7o.roa Signing time: Fri 11 Feb 2022 18:17:32 +0000 ROA not before: Fri 11 Feb 2022 18:17:32 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1774612330 (0x69c66f6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 11 18:17:32 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=3851e63aa0d9e275b130a39300fde3e86c1097ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:77:c0:a4:5c:2a:8c:5a:83:20:04:2e:21: 5b:2e:07:1c:8b:4b:29:84:60:76:06:3f:f2:72:0f: ca:ce:d6:95:0c:57:9b:94:85:f5:aa:57:94:ff:39: 86:09:4d:ab:dc:10:de:04:d1:d1:f3:62:61:a4:38: 19:33:21:95:63:5b:80:53:20:15:9b:1e:0a:3a:92: f8:48:ce:a1:c3:96:2e:6c:91:66:6a:ae:ca:d4:45: 2f:48:0a:5d:d4:6b:d5:88:2b:07:8a:39:b6:5b:23: 8f:06:80:38:6d:04:fb:e4:7d:9f:1d:9e:66:2f:e7: 50:76:8f:93:9f:87:78:51:66:b2:5a:d0:ce:28:f8: 9e:c5:3e:77:fb:0c:e2:98:3c:35:f6:0a:d2:a0:9b: c4:8d:c1:d3:d4:e4:27:06:df:8f:37:a2:3c:9b:15: 4f:fc:78:91:6d:d8:81:0f:b8:67:75:71:7e:b2:98: fb:de:02:63:63:a8:81:81:d3:3e:37:cc:fe:37:d3: 51:7c:34:5e:60:a1:15:ed:c3:e7:9d:da:f5:d1:6b: 56:0f:fc:b6:bf:08:68:77:ad:7c:10:eb:08:74:59: 46:d9:c9:fc:f1:d1:3b:a4:4c:5b:00:74:ed:ae:41: ed:29:a1:7b:98:62:42:b3:87:16:6d:f1:28:04:5b: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:E6:3A:A0:D9:E2:75:B1:30:A3:93:00:FD:E3:E8:6C:10:97:BA X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OFHmOqDZ4nWxMKOTAP3j6GwQl7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 1c:c5:35:39:39:5b:69:0c:7b:76:d8:a5:40:97:ee:5f:b1:a0: 8a:a5:23:9d:fe:a2:83:01:c2:96:aa:79:ab:fc:83:7e:1c:62: 78:31:39:03:4a:8c:24:81:59:30:c1:97:73:78:cd:27:50:96: 87:69:10:ce:81:b1:04:39:86:37:c4:d5:82:bf:df:b7:04:b7: af:0a:a6:e0:a6:fa:85:5f:1b:2f:6a:fd:0c:6f:31:95:aa:71: 89:5c:d5:d6:f9:7a:86:f9:d6:8f:d5:eb:f3:75:eb:8c:7b:73: 0b:bb:23:9e:3a:e2:b6:52:f7:8d:02:24:58:9b:1e:5e:59:e3: d2:54:c8:b1:a0:4f:88:b9:3b:55:6b:db:95:2c:dc:a1:1e:ac: 81:83:9e:50:89:51:20:67:cc:f8:c0:96:61:1d:91:b7:16:db: e3:f0:e5:9d:1e:65:2d:96:5f:e3:4e:3e:97:28:3a:7d:4b:45: 03:b8:91:0c:ef:70:fb:21:5e:2a:21:db:31:5a:13:65:65:3f: 6a:8f:33:76:70:0b:ee:a2:03:d2:f4:5e:c8:4c:a2:0f:22:dc: 0c:45:b5:a7:23:dd:65:8d:92:5f:ef:d5:4d:70:71:db:37:90: d8:e8:c3:fd:33:fb:ff:b4:68:ea:d8:3c:d2:2a:f4:ff:c3:95: 20:8f:a1:0c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIEacZvajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3 MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx MTE4MTczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzg1MWU2M2FhMGQ5 ZTI3NWIxMzBhMzkzMDBmZGUzZTg2YzEwOTdiYTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOoSd8CkXCqMWoMgBC4hWy4HHItLKYRgdgY/8nIPys7WlQxX m5SF9apXlP85hglNq9wQ3gTR0fNiYaQ4GTMhlWNbgFMgFZseCjqS+EjOocOWLmyR ZmquytRFL0gKXdRr1YgrB4o5tlsjjwaAOG0E++R9nx2eZi/nUHaPk5+HeFFmslrQ zij4nsU+d/sM4pg8NfYK0qCbxI3B09TkJwbfjzeiPJsVT/x4kW3YgQ+4Z3VxfrKY +94CY2OogYHTPjfM/jfTUXw0XmChFe3D553a9dFrVg/8tr8IaHetfBDrCHRZRtnJ /PHRO6RMWwB07a5B7Smhe5hiQrOHFm3xKARbCMECAwEAAaOCAhowggIWMB0GA1Ud DgQWBBQ4UeY6oNnidbEwo5MA/ePobBCXujAfBgNVHSMEGDAWgBRyBHvhWydZAtz2 F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x L09GSG1PcURaNG5XeE1LT1RBUDNqNkd3UWw3by5yb2EwgYEGA1UdHwR6MHgwdqB0 oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk MA0GCSqGSIb3DQEBCwUAA4IBAQAcxTU5OVtpDHt22KVAl+5fsaCKpSOd/qKDAcKW qnmr/IN+HGJ4MTkDSowkgVkwwZdzeM0nUJaHaRDOgbEEOYY3xNWCv9+3BLevCqbg pvqFXxsvav0MbzGVqnGJXNXW+XqG+daP1evzdeuMe3MLuyOeOuK2UveNAiRYmx5e WePSVMixoE+IuTtVa9uVLNyhHqyBg55QiVEgZ8z4wJZhHZG3Ftvj8OWdHmUtll/j Tj6XKDp9S0UDuJEM73D7IV4qIdsxWhNlZT9qjzN2cAvuogPS9F7ITKIPItwMRbWn I91ljZJf79VNcHHbN5DY6MP9M/v/tGjq2DzSKvT/w5Ugj6EM -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:26 2025 by rpki-client