This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TqKClIZxGfxTu_iy0kqRgYyPDeE.roa File: TqKClIZxGfxTu_iy0kqRgYyPDeE.roa (raw, json) Hash identifier: f4aXSrxX2ftIb5sJfQ2WvWhBy5V5zep+/L+DZ0ZhnLw= Subject key identifier: 4E:A2:82:94:86:71:19:FC:53:BB:F8:B2:D2:4A:91:81:8C:8F:0D:E1 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0185A2E0E0795F4D82B5A888D3CB15CAEF4D Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TqKClIZxGfxTu_iy0kqRgYyPDeE.roa Signing time: Wed 11 Jan 2023 22:08:44 +0000 ROA not before: Wed 11 Jan 2023 22:08:44 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:a2:e0:e0:79:5f:4d:82:b5:a8:88:d3:cb:15:ca:ef:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jan 11 22:08:44 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=4ea28294867119fc53bbf8b2d24a91818c8f0de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:db:e3:6b:84:9c:83:76:d4:16:f7:de:1b: 23:b1:23:fe:d1:70:6d:2c:08:c8:a7:b4:31:df:6e: 22:7f:34:b4:75:5b:36:62:21:89:63:0e:3a:e0:ff: cf:9e:0d:6c:17:df:66:95:a5:ba:c1:a2:9f:4d:23: 56:5b:ce:2f:7b:83:73:3e:c3:2b:6a:67:9f:6f:83: b0:17:ed:72:4a:6d:3d:b9:c3:47:e2:95:21:cd:b9: 5f:5b:8b:86:3d:a3:52:bc:83:3a:a1:c8:b0:1c:46: 3d:1e:d2:e0:21:43:37:c1:96:99:cb:e2:bb:b7:ad: 2c:bd:bc:1e:14:b9:ca:c5:76:34:0f:2d:68:e7:a3: ca:fd:1b:3b:1a:0c:02:a3:72:9b:c5:bd:1e:94:0c: 10:fb:9d:80:c6:09:4d:e6:7f:c5:34:c8:53:f9:e1: 50:98:06:96:e3:6b:6b:be:2c:de:91:bd:c9:a8:ab: 38:0b:be:cc:d3:84:08:35:b0:e1:b8:26:ae:9b:87: a6:33:af:5a:f0:f0:89:2e:e8:db:92:60:26:ca:7e: f1:a8:cf:cf:bd:de:a3:31:f3:bb:8e:01:16:93:56: ba:07:6e:1a:8c:ac:27:1e:b9:c4:f7:5e:c4:69:e1: ec:0b:80:a1:65:5b:82:ef:a2:50:59:2b:ae:7b:68: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:82:94:86:71:19:FC:53:BB:F8:B2:D2:4A:91:81:8C:8F:0D:E1 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TqKClIZxGfxTu_iy0kqRgYyPDeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 3c:f1:74:8a:51:9f:b3:f1:8c:bd:42:00:9e:2b:bf:dd:7e:b4: 98:2d:b7:e3:70:ac:f0:8e:46:87:66:94:ee:4e:6f:f3:df:fb: a5:2d:1f:77:86:a5:e5:c2:12:84:e3:8f:b6:1d:63:69:5d:38: 69:21:53:88:0e:a9:a4:2d:65:4a:2f:cb:d9:53:27:c1:4b:dd: 6d:a5:db:d9:ea:8f:ff:d1:d5:e1:b0:21:34:15:5a:c9:7d:82: 47:4b:4a:b6:16:4a:63:10:ef:20:16:3f:0d:61:d2:d8:f1:e0: 96:52:20:27:3a:80:f1:84:d5:a7:4e:00:8f:c3:87:2f:c3:4e: f2:03:5c:c0:a4:2f:f0:8c:5d:a3:f1:8c:81:3b:49:0d:eb:01: 6e:87:c4:30:3a:c9:3f:d3:11:21:2b:f4:0b:e2:24:1e:24:3b: 65:31:e9:54:61:2e:d6:52:ca:57:e3:ab:2e:4a:cd:de:21:46: bf:d7:84:9d:1f:7e:e7:48:d8:4e:ae:c0:94:f4:31:dd:1b:f8: 29:70:61:91:8b:1d:96:ad:24:51:b8:e5:10:af:5f:39:15:76: ee:72:68:59:48:35:ad:4e:b9:7e:ee:68:b7:68:d8:5b:ca:41: 63:32:a7:0d:8f:bf:8f:45:c0:66:68:a9:05:81:8f:f6:1d:3d: 91:4e:5a:02 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYWi4OB5X02CtaiI08sVyu9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMTExMjIwODQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWEyODI5NDg2NzExOWZjNTNiYmY4YjJkMjRhOTE4MThjOGYwZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbTb42uEnIN21Bb33hsjsSP+0XBt LAjIp7Qx324ifzS0dVs2YiGJYw464P/Png1sF99mlaW6waKfTSNWW84ve4NzPsMr amefb4OwF+1ySm09ucNH4pUhzblfW4uGPaNSvIM6ociwHEY9HtLgIUM3wZaZy+K7 t60svbweFLnKxXY0Dy1o56PK/Rs7GgwCo3Kbxb0elAwQ+52AxglN5n/FNMhT+eFQ mAaW42trvizekb3JqKs4C77M04QINbDhuCaum4emM69a8PCJLujbkmAmyn7xqM/P vd6jMfO7jgEWk1a6B24ajKwnHrnE917EaeHsC4ChZVuC76JQWSuue2im5QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE6igpSGcRn8U7v4stJKkYGMjw3hMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvVHFLQ2xJWnhHZnhUdV9peTBrcVJnWXlQRGVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADzxdIpRn7PxjL1CAJ4r v91+tJgtt+NwrPCORodmlO5Ob/Pf+6UtH3eGpeXCEoTjj7YdY2ldOGkhU4gOqaQt ZUovy9lTJ8FL3W2l29nqj//R1eGwITQVWsl9gkdLSrYWSmMQ7yAWPw1h0tjx4JZS ICc6gPGE1adOAI/Dhy/DTvIDXMCkL/CMXaPxjIE7SQ3rAW6HxDA6yT/TESEr9Avi JB4kO2Ux6VRhLtZSylfjqy5Kzd4hRr/XhJ0ffudI2E6uwJT0Md0b+ClwYZGLHZat JFG45RCvXzkVdu5yaFlINa1OuX7uaLdo2FvKQWMypw2Pv49FwGZoqQWBj/YdPZFO WgI= -----END CERTIFICATE-----Generated at Fri Dec 19 10:39:39 2025 by rpki-client