This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QGiMss0obBbR-y6C21lXCQ2Aw_Y.roa File: QGiMss0obBbR-y6C21lXCQ2Aw_Y.roa (raw, json) Hash identifier: 9eURStVUrnRxfCvRg5LPxyYjv+zavB+36AHJFsxFbrk= Subject key identifier: 40:68:8C:B2:CD:28:6C:16:D1:FB:2E:82:DB:59:57:09:0D:80:C3:F6 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0185824425406504A19150B64D46EE0AF6E3 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QGiMss0obBbR-y6C21lXCQ2Aw_Y.roa Signing time: Thu 05 Jan 2023 14:09:42 +0000 ROA not before: Thu 05 Jan 2023 14:09:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:82:44:25:40:65:04:a1:91:50:b6:4d:46:ee:0a:f6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jan 5 14:09:42 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=40688cb2cd286c16d1fb2e82db5957090d80c3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:14:02:1f:85:6c:57:8e:a7:07:87:42:99:fc: 06:61:62:d9:47:17:29:13:3c:38:33:76:02:e7:b3: 01:84:82:b7:2f:2b:12:6b:41:64:a0:35:b7:37:04: 6f:02:e9:18:22:5d:c4:da:98:09:d3:ea:7d:35:0b: d8:cd:55:93:18:89:ec:1a:4a:d5:22:d2:21:c8:75: 37:aa:e7:27:66:69:f2:92:99:ff:d3:7f:24:89:52: 73:4b:54:97:40:c6:d3:b3:52:b1:1a:68:4e:ff:09: 23:87:0b:bb:3a:45:92:88:87:42:0e:f4:b5:c1:94: a1:0b:4e:a0:f6:3c:84:73:91:9e:14:41:4e:5c:87: 48:64:c4:fd:b2:04:b9:1b:a0:92:ef:08:e9:cf:d8: 9b:d7:71:b8:ee:de:c0:39:b2:41:00:21:88:0e:d6: 8c:93:a3:09:e6:c2:26:41:7a:29:9e:89:78:57:6c: bf:da:58:28:03:0c:f1:d9:21:d8:f0:15:7d:11:1f: ee:35:21:78:9a:22:78:4d:de:a9:a1:78:f4:8c:3f: 56:da:2d:27:03:b5:97:bf:d1:20:21:75:ae:22:af: ae:c3:b7:27:bc:a1:54:a6:b7:82:39:29:25:5e:48: 5e:f2:16:11:b1:d0:80:9c:c9:4d:22:aa:29:1c:75: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:68:8C:B2:CD:28:6C:16:D1:FB:2E:82:DB:59:57:09:0D:80:C3:F6 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QGiMss0obBbR-y6C21lXCQ2Aw_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 2c:c5:3a:06:a6:ef:56:dd:4c:b7:35:fb:bb:3a:ba:09:b7:78: 12:dd:a6:f9:5d:2f:9d:32:08:c4:90:2f:a3:87:67:60:cd:73: 52:f0:8d:61:1a:e3:69:ce:8b:63:09:53:96:94:56:3d:15:77: 54:26:b7:a7:aa:50:b2:a5:93:93:e5:ea:82:22:0b:78:20:b5: d2:9c:20:ae:ed:18:d4:7c:95:6e:f9:8c:3e:00:e8:5e:7f:61: 32:dd:cc:0a:6d:a8:4d:fa:df:c1:7d:26:0f:8d:e4:ff:f6:0b: be:42:98:2d:07:b3:7f:8c:85:be:59:5b:7b:72:5e:14:28:fb: 99:e5:40:f4:bb:b7:10:ac:f0:41:c2:8a:67:3d:cc:2c:1b:89: 04:b9:6d:86:8e:82:81:fa:14:f1:1d:5b:b5:76:e1:29:54:14: 3b:a3:5a:45:6d:68:93:3e:a1:3e:a8:22:b0:de:0c:40:69:06: 4c:72:1d:77:6f:5f:69:49:e5:75:10:1c:51:61:92:03:10:cd: 06:77:b6:bd:b2:a7:23:1d:2f:6a:6a:64:39:40:d3:f2:eb:8a: 0d:51:50:1f:27:94:25:03:da:d4:ad:d6:0f:28:63:86:04:a2: 77:56:50:be:3c:89:8f:95:3f:50:3b:52:6f:0b:c8:54:5d:a1: 0a:1b:92:6b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYWCRCVAZQShkVC2TUbuCvbjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMTA1MTQwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDY4OGNiMmNkMjg2YzE2ZDFmYjJlODJkYjU5NTcwOTBkODBjM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhQCH4VsV46nB4dCmfwGYWLZRxcp Ezw4M3YC57MBhIK3LysSa0FkoDW3NwRvAukYIl3E2pgJ0+p9NQvYzVWTGInsGkrV ItIhyHU3qucnZmnykpn/038kiVJzS1SXQMbTs1KxGmhO/wkjhwu7OkWSiIdCDvS1 wZShC06g9jyEc5GeFEFOXIdIZMT9sgS5G6CS7wjpz9ib13G47t7AObJBACGIDtaM k6MJ5sImQXopnol4V2y/2lgoAwzx2SHY8BV9ER/uNSF4miJ4Td6poXj0jD9W2i0n A7WXv9EgIXWuIq+uw7cnvKFUpreCOSklXkhe8hYRsdCAnMlNIqopHHWzFQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEBojLLNKGwW0fsugttZVwkNgMP2MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvUUdpTXNzMG9iQmJSLXk2QzIxbFhDUTJBd19ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACzFOgam71bdTLc1+7s6 ugm3eBLdpvldL50yCMSQL6OHZ2DNc1LwjWEa42nOi2MJU5aUVj0Vd1Qmt6eqULKl k5Pl6oIiC3ggtdKcIK7tGNR8lW75jD4A6F5/YTLdzAptqE3638F9Jg+N5P/2C75C mC0Hs3+Mhb5ZW3tyXhQo+5nlQPS7txCs8EHCimc9zCwbiQS5bYaOgoH6FPEdW7V2 4SlUFDujWkVtaJM+oT6oIrDeDEBpBkxyHXdvX2lJ5XUQHFFhkgMQzQZ3tr2ypyMd L2pqZDlA0/Lrig1RUB8nlCUD2tSt1g8oY4YEondWUL48iY+VP1A7Um8LyFRdoQob kms= -----END CERTIFICATE-----Generated at Sun Dec 21 00:58:39 2025 by rpki-client