This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJQvTGMaSLpbXEiPrFoqxmCAA2Q.roa File: UJQvTGMaSLpbXEiPrFoqxmCAA2Q.roa (raw, json) Hash identifier: A9NzrSVamfZn13tBWhds/CZd43K+UrHuRTWZad639jA= Subject key identifier: 50:94:2F:4C:63:1A:48:BA:5B:5C:48:8F:AC:5A:2A:C6:60:80:03:64 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01866628D688FF2698F251520E252B97360F Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJQvTGMaSLpbXEiPrFoqxmCAA2Q.roa Signing time: Sat 18 Feb 2023 20:13:17 +0000 ROA not before: Sat 18 Feb 2023 20:13:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:66:28:d6:88:ff:26:98:f2:51:52:0e:25:2b:97:36:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 18 20:13:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=50942f4c631a48ba5b5c488fac5a2ac660800364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bd:fc:5d:bd:06:f1:ff:64:17:d3:7e:46:cf: 14:46:72:72:1c:ba:ee:fd:9d:25:16:1a:a1:65:ca: c3:9c:3d:ea:af:3f:4a:15:62:d2:c6:ce:f9:d0:f1: 1f:ce:cd:b2:60:b4:d1:a0:b3:86:56:6a:fa:df:1f: 13:18:9a:45:b6:82:42:28:7a:cb:7b:d0:35:eb:f6: f5:87:00:c8:ff:19:bd:ba:fd:4d:14:d6:f8:4a:6a: f8:f7:03:a3:40:eb:61:fc:04:e0:05:e1:49:d1:ac: 74:34:5e:bd:86:27:74:40:88:4b:c7:41:67:e7:a2: 41:19:6b:54:6b:db:4f:41:3a:07:88:6c:d0:5d:8e: 54:98:8f:14:57:0c:f6:cf:cf:38:6e:82:2f:f8:79: c8:45:32:82:be:90:ec:2b:17:63:96:a8:e0:a1:37: cb:9d:77:27:9b:97:c7:95:30:54:1f:17:3f:11:b7: e9:52:68:93:1f:6c:7c:e9:53:05:d7:e3:6c:93:30: f3:37:93:e8:f9:e6:e6:a8:83:ef:ce:49:3c:5c:5c: ad:39:56:ed:ad:63:af:ac:4e:27:d9:0f:53:9d:f7: 20:de:ea:fb:1b:0e:2a:96:78:6b:b0:91:92:fc:02: c0:53:d9:ef:78:08:c1:aa:91:e9:1b:47:33:56:5a: 71:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:94:2F:4C:63:1A:48:BA:5B:5C:48:8F:AC:5A:2A:C6:60:80:03:64 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJQvTGMaSLpbXEiPrFoqxmCAA2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption a5:12:5b:43:f8:7d:75:89:f4:01:ab:b7:e6:a9:a8:f3:13:ae: bb:33:c8:17:29:92:43:bd:0c:22:0f:d8:cf:fe:c0:35:2f:e1: b3:5b:10:eb:11:89:58:35:47:5f:4a:6f:e4:d8:01:de:90:d2: e4:f6:f1:a1:0c:bd:b3:ca:88:58:b3:1d:03:f0:34:f2:e7:3d: 7b:14:ed:46:7d:d5:51:86:ef:0e:f0:e4:d7:2d:1b:0b:ab:c7: e5:46:d3:54:f8:e5:6a:51:7e:63:45:1d:a0:8f:d2:90:9f:56: 48:ef:94:5a:21:ad:9f:e6:f2:f8:6c:bd:4a:b3:d4:34:95:bd: 8d:58:7e:f8:44:77:74:a7:5b:72:21:ec:95:a6:29:b7:de:3c: 00:83:69:ea:d5:7a:f3:a1:86:cd:67:a3:5c:70:4d:71:a4:10: cc:8a:e6:e4:47:e1:49:c3:7c:35:ae:f9:03:19:4f:30:1c:ed: 0a:d9:82:00:3f:4c:fc:75:ed:8a:7b:7a:20:a4:33:15:a0:af: 26:17:4f:81:20:81:b4:ee:d0:f1:27:da:62:14:c0:53:50:6e: ef:55:e8:ca:30:37:0e:58:4a:c9:bd:6a:a5:3d:01:4e:8c:e4: da:f7:29:4f:60:9c:a3:b4:76:79:f5:6a:b3:38:3e:e5:5d:8c: 23:52:a6:28 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZmKNaI/yaY8lFSDiUrlzYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjE4MjAxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDk0MmY0YzYzMWE0OGJhNWI1YzQ4OGZhYzVhMmFjNjYwODAwMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh738Xb0G8f9kF9N+Rs8URnJyHLru /Z0lFhqhZcrDnD3qrz9KFWLSxs750PEfzs2yYLTRoLOGVmr63x8TGJpFtoJCKHrL e9A16/b1hwDI/xm9uv1NFNb4Smr49wOjQOth/ATgBeFJ0ax0NF69hid0QIhLx0Fn 56JBGWtUa9tPQToHiGzQXY5UmI8UVwz2z884boIv+HnIRTKCvpDsKxdjlqjgoTfL nXcnm5fHlTBUHxc/EbfpUmiTH2x86VMF1+NskzDzN5Po+ebmqIPvzkk8XFytOVbt rWOvrE4n2Q9Tnfcg3ur7Gw4qlnhrsJGS/ALAU9nveAjBqpHpG0czVlpxZQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFCUL0xjGki6W1xIj6xaKsZggANkMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvVUpRdlRHTWFTTHBiWEVpUHJGb3F4bUNBQTJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKUSW0P4fXWJ9AGrt+ap qPMTrrszyBcpkkO9DCIP2M/+wDUv4bNbEOsRiVg1R19Kb+TYAd6Q0uT28aEMvbPK iFizHQPwNPLnPXsU7UZ91VGG7w7w5NctGwurx+VG01T45WpRfmNFHaCP0pCfVkjv lFohrZ/m8vhsvUqz1DSVvY1YfvhEd3SnW3Ih7JWmKbfePACDaerVevOhhs1no1xw TXGkEMyK5uRH4UnDfDWu+QMZTzAc7QrZggA/TPx17Yp7eiCkMxWgryYXT4EggbTu 0PEn2mIUwFNQbu9V6MowNw5YSsm9aqU9AU6M5Nr3KU9gnKO0dnn1arM4PuVdjCNS pig= -----END CERTIFICATE-----Generated at Fri Dec 19 13:16:45 2025 by rpki-client