This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqRgiVjRVzft9jr7LP3r67IyDw8.roa File: PqRgiVjRVzft9jr7LP3r67IyDw8.roa (raw, json) Hash identifier: CLvHcm3Jvft4lVaCuFqy+Y/Kaxb93B+e/CiHgqbo+v8= Subject key identifier: 3E:A4:60:89:58:D1:57:37:ED:F6:3A:FB:2C:FD:EB:EB:B2:32:0F:0F Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 8E4682E6 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqRgiVjRVzft9jr7LP3r67IyDw8.roa Signing time: Mon 20 Jun 2022 03:09:44 +0000 ROA not before: Mon 20 Jun 2022 03:09:44 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128 2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128 2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2386985702 (0x8e4682e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jun 20 03:09:44 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=3ea4608958d15737edf63afb2cfdebebb2320f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:df:28:ec:99:cd:94:a0:e9:49:95:ec:0c: 6d:d3:67:78:c7:b5:09:37:a4:38:84:39:73:02:a2: c3:73:6a:93:5f:4e:fc:5b:03:58:80:ff:96:bd:d9: 71:11:e2:ca:09:bf:a5:01:9e:e3:3f:61:4d:ee:08: 5b:e2:70:62:e7:60:0b:78:68:b4:96:0d:1c:49:04: 5c:06:d6:54:3b:fc:bc:e4:f6:f8:21:c8:ac:7b:d5: 0e:a5:bd:e5:fa:4a:79:c5:16:5a:05:f6:cf:f5:a7: de:fe:b2:d7:a9:25:0a:71:bd:c3:59:e5:65:68:1d: f6:2c:aa:16:51:c3:bf:a9:cb:3e:ed:db:98:12:a4: 04:bd:32:85:57:56:5c:02:c4:3c:5c:3a:08:1f:38: b9:b2:49:eb:29:af:04:d1:bc:c1:8b:2b:e5:8c:c0: b6:2d:f7:8d:ae:7d:e2:aa:0d:60:16:99:02:b0:6c: 6a:39:e3:d6:4e:a4:27:4c:23:eb:b7:b6:d7:77:f7: 95:16:17:75:b8:23:af:18:83:3c:7c:bf:47:1d:cc: bf:22:2f:90:42:f1:a8:76:40:1f:db:6e:8a:19:d8: aa:b3:e7:d4:41:0b:09:50:b1:6b:95:52:39:51:b8: e2:72:7e:b0:bd:6e:f1:17:7c:93:57:64:41:9c:18: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:60:89:58:D1:57:37:ED:F6:3A:FB:2C:FD:EB:EB:B2:32:0F:0F X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PqRgiVjRVzft9jr7LP3r67IyDw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 76:64:32:d7:9f:c1:e8:6f:eb:04:19:d6:d3:87:0c:a6:81:04: 50:61:be:8f:5d:74:a6:ab:d6:9b:8e:57:38:6d:5e:52:59:5e: 8e:67:45:fb:1f:d6:99:82:67:72:79:78:d7:f7:4a:69:32:35: 64:65:04:08:99:7f:76:c3:48:73:28:3b:d4:7c:e2:56:e4:bf: 23:75:85:b9:03:da:35:f2:1f:b1:e0:b6:9d:d3:89:90:97:0b: 47:c7:78:06:3b:fa:b2:19:13:b8:3d:f6:90:32:c8:33:28:9e: b3:78:75:b5:be:84:3d:b2:bf:25:c9:74:da:25:6e:49:ce:72: d2:9c:87:0c:14:15:a3:c9:a1:05:d5:c4:85:c3:2a:59:36:b4: b5:af:e1:71:50:68:be:f3:e7:76:5c:7c:e8:a2:95:3b:08:3f: 03:2b:9d:e7:4e:87:7c:0b:5a:bb:12:bf:cd:52:a9:ff:0a:53: a2:a2:2e:91:fc:3b:dc:6e:a4:7e:48:86:42:92:74:82:46:6d: 57:2a:33:9b:d8:e6:6a:ef:6a:26:b5:dd:60:17:4f:a7:84:c3: 4a:09:68:bc:b4:58:db:20:e8:77:c8:7d:5f:4d:b1:1a:a5:00: 40:06:b2:02:81:f4:dd:8c:cb:7e:65:6a:0c:cf:7d:5b:0f:45: 2f:b9:57:89 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIFAI5GguYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2 MjAwMzA5NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDNlYTQ2MDg5NThk MTU3MzdlZGY2M2FmYjJjZmRlYmViYjIzMjBmMGYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo1d8o7JnNlKDpSZXsDG3TZ3jHtQk3pDiEOXMCosNzapNf TvxbA1iA/5a92XER4soJv6UBnuM/YU3uCFvicGLnYAt4aLSWDRxJBFwG1lQ7/Lzk 9vghyKx71Q6lveX6SnnFFloF9s/1p97+stepJQpxvcNZ5WVoHfYsqhZRw7+pyz7t 25gSpAS9MoVXVlwCxDxcOggfOLmySesprwTRvMGLK+WMwLYt942ufeKqDWAWmQKw bGo549ZOpCdMI+u3ttd395UWF3W4I68Ygzx8v0cdzL8iL5BC8ah2QB/bbooZ2Kqz 59RBCwlQsWuVUjlRuOJyfrC9bvEXfJNXZEGcGAmJAgMBAAGjggIaMIICFjAdBgNV HQ4EFgQUPqRgiVjRVzft9jr7LP3r67IyDw8wHwYDVR0jBBgwFoAUcgR74VsnWQLc 9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv MS9QcVJnaVZqUlZ6ZnQ5anI3TFAzcjY3SXlEdzgucm9hMIGBBgNVHR8EejB4MHag dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA ZDANBgkqhkiG9w0BAQsFAAOCAQEAdmQy15/B6G/rBBnW04cMpoEEUGG+j110pqvW m45XOG1eUllejmdF+x/WmYJncnl41/dKaTI1ZGUECJl/dsNIcyg71HziVuS/I3WF uQPaNfIfseC2ndOJkJcLR8d4Bjv6shkTuD32kDLIMyies3h1tb6EPbK/Jcl02iVu Sc5y0pyHDBQVo8mhBdXEhcMqWTa0ta/hcVBovvPndlx86KKVOwg/Ayud506HfAta uxK/zVKp/wpToqIukfw73G6kfkiGQpJ0gkZtVyozm9jmau9qJrXdYBdPp4TDSglo vLRY2yDod8h9X02xGqUAQAayAoH03YzLfmVqDM99Ww9FL7lXiQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:06 2025 by rpki-client