This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OvhKZCx9OUSXfg3ji5qCfpzNpIk.roa File: OvhKZCx9OUSXfg3ji5qCfpzNpIk.roa (raw, json) Hash identifier: FLyzVw3oM5POv+Ilvw7cpggkI/1jgmS09wctob2mCyo= Subject key identifier: 3A:F8:4A:64:2C:7D:39:44:97:7E:0D:E3:8B:9A:82:7E:9C:CD:A4:89 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A274220FB7CCC81B65068DAD45C2A766F Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OvhKZCx9OUSXfg3ji5qCfpzNpIk.roa Signing time: Thu 24 Aug 2023 11:15:59 +0000 ROA not before: Thu 24 Aug 2023 11:15:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:27:42:20:fb:7c:cc:81:b6:50:68:da:d4:5c:2a:76:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 24 11:15:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=3af84a642c7d3944977e0de38b9a827e9ccda489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:56:cd:fd:99:a9:d9:c4:e4:88:c2:a5:5a: de:fa:b1:ab:7e:28:cd:62:9e:1e:7f:bb:27:f0:b3: 88:52:7f:fc:cb:18:bd:15:b4:a1:c2:8b:55:55:62: ca:27:9d:18:3c:98:64:28:52:44:19:c7:e3:c3:54: fa:7d:06:5b:e0:7c:9f:e6:c2:cf:af:7b:11:43:44: bb:42:89:e5:b7:8f:89:c6:f1:9f:f3:f3:71:61:76: 50:07:08:08:c8:58:d9:89:92:25:16:56:8d:e9:d4: 47:e4:e0:18:f0:0f:69:cd:e8:c1:da:08:9b:36:80: 2b:18:12:9d:81:37:4d:bd:ac:bb:af:0e:df:7e:ec: 18:92:c9:5d:66:3d:c1:fa:6b:c5:8a:b9:b7:b3:30: de:7d:13:96:f7:85:b2:9e:86:57:bb:44:bd:9a:ce: b7:d3:31:20:e1:bc:32:f0:84:5f:42:86:e7:5b:76: 28:e7:dd:69:31:45:44:96:2e:84:fc:7a:e3:d7:40: 29:4b:e5:ac:07:15:9b:42:61:72:c7:4b:8f:fe:0f: 26:cb:43:78:61:89:a9:6a:a3:e8:6f:82:da:a0:ee: 6f:2c:88:7d:16:c3:d1:cd:02:7f:aa:2e:d6:ff:8a: ea:ca:2e:3e:af:d9:f9:98:c9:f9:3a:ea:2f:28:da: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F8:4A:64:2C:7D:39:44:97:7E:0D:E3:8B:9A:82:7E:9C:CD:A4:89 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OvhKZCx9OUSXfg3ji5qCfpzNpIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 37:d0:1f:ba:50:ab:07:b9:45:0e:54:69:b7:6c:e8:23:09:aa: 47:da:17:10:0d:a1:b8:1d:47:24:b9:63:65:37:27:bc:26:c3: ed:64:96:55:45:bf:80:66:9d:03:7f:1c:4d:62:fb:7b:bb:ef: 1a:5e:5e:56:a0:26:43:89:34:1d:af:ed:ac:9a:eb:70:21:82: 45:a3:81:d7:9d:ed:3e:9c:0b:1e:22:44:6b:ff:d2:cb:2f:9d: 23:d9:14:e7:ad:c5:71:c7:2f:65:fb:72:ed:d8:1d:37:0a:7b: d0:54:66:dc:dc:44:07:1b:ff:0f:09:20:96:fd:13:69:34:fa: 75:bd:1e:5e:08:7c:ea:ce:5f:a4:9d:a7:eb:c6:b8:1f:76:f5: b6:d2:2c:2d:56:2d:65:42:92:9e:fb:7e:8d:06:a9:54:c6:c0: b7:61:ec:0a:59:a1:9d:7d:e5:d2:3a:41:c1:9b:4c:0f:b5:59: 14:c9:33:7e:7e:a5:75:f7:b1:ad:8f:c7:b8:b9:9e:17:01:89: 2a:74:13:b3:e5:40:f2:42:e1:12:9c:ec:89:ba:5c:3c:2a:89: 4d:83:f8:53:48:9d:33:88:23:6d:f5:84:21:14:91:04:fb:89: 7c:29:df:f9:c6:4b:9c:80:86:4f:44:52:a4:55:4b:fb:73:a4: 21:13:fa:ad -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYonQiD7fMyBtlBo2tRcKnZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODI0MTExNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWY4NGE2NDJjN2QzOTQ0OTc3ZTBkZTM4YjlhODI3ZTljY2RhNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP5Wzf2ZqdnE5IjCpVre+rGrfijN Yp4ef7sn8LOIUn/8yxi9FbShwotVVWLKJ50YPJhkKFJEGcfjw1T6fQZb4Hyf5sLP r3sRQ0S7Qonlt4+JxvGf8/NxYXZQBwgIyFjZiZIlFlaN6dRH5OAY8A9pzejB2gib NoArGBKdgTdNvay7rw7ffuwYksldZj3B+mvFirm3szDefROW94WynoZXu0S9ms63 0zEg4bwy8IRfQobnW3Yo591pMUVEli6E/Hrj10ApS+WsBxWbQmFyx0uP/g8my0N4 YYmpaqPob4LaoO5vLIh9FsPRzQJ/qi7W/4rqyi4+r9n5mMn5OuovKNoqCwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDr4SmQsfTlEl34N44uagn6czaSJMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvT3ZoS1pDeDlPVVNYZmczamk1cUNmcHpOcElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADfQH7pQqwe5RQ5Uabds 6CMJqkfaFxANobgdRyS5Y2U3J7wmw+1kllVFv4BmnQN/HE1i+3u77xpeXlagJkOJ NB2v7aya63AhgkWjgded7T6cCx4iRGv/0ssvnSPZFOetxXHHL2X7cu3YHTcKe9BU ZtzcRAcb/w8JIJb9E2k0+nW9Hl4IfOrOX6Sdp+vGuB929bbSLC1WLWVCkp77fo0G qVTGwLdh7ApZoZ195dI6QcGbTA+1WRTJM35+pXX3sa2Px7i5nhcBiSp0E7PlQPJC 4RKc7Im6XDwqiU2D+FNInTOII231hCEUkQT7iXwp3/nGS5yAhk9EUqRVS/tzpCET +q0= -----END CERTIFICATE-----Generated at Mon Dec 22 22:23:24 2025 by rpki-client