This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ul6MrKUcb8H31FnJ-RkCVDQxQ6E.roa File: Ul6MrKUcb8H31FnJ-RkCVDQxQ6E.roa (raw, json) Hash identifier: JcRVmPihJV9TE9UX6xrMZFpUJOMh6yhd8OMSdnM2xBo= Subject key identifier: 52:5E:8C:AC:A5:1C:6F:C1:F7:D4:59:C9:F9:19:02:54:34:31:43:A1 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01851C89DD3463271E486A76410F8E3726B5 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ul6MrKUcb8H31FnJ-RkCVDQxQ6E.roa Signing time: Fri 16 Dec 2022 20:04:35 +0000 ROA not before: Fri 16 Dec 2022 20:04:35 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:185:1c89:7915/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:1c:89:dd:34:63:27:1e:48:6a:76:41:0f:8e:37:26:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 16 20:04:35 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=525e8caca51c6fc1f7d459c9f9190254343143a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:63:b6:9e:02:be:96:a3:a7:2e:04:53:45:fc: e1:e1:a4:10:20:e0:91:ad:14:b9:8a:e3:51:89:80: 37:9d:e7:aa:df:4a:53:53:6a:9b:e2:46:2c:61:16: f9:55:a2:68:c2:7e:58:27:b2:7e:64:0c:13:91:7c: b2:cc:cb:53:64:1b:50:6b:39:a7:ec:12:e3:94:bc: c7:33:58:af:04:3b:d3:ba:4b:1f:8f:df:90:52:c2: 9e:39:a2:d5:16:56:63:f4:c6:5f:8e:6a:27:8d:00: e2:eb:03:47:4c:04:fa:b7:d5:51:d4:77:b1:01:25: 75:b7:1b:81:a1:20:d5:6f:3d:48:1c:27:70:52:a0: 63:94:92:ec:1c:f3:27:71:92:d5:10:63:3d:a4:21: 5d:4c:6d:a0:7b:02:1a:93:eb:64:ed:f9:38:22:8d: 19:ab:49:48:ef:e9:53:ed:4b:d2:32:99:e4:c3:e7: 7a:8f:6d:d4:77:2d:96:9b:68:0e:13:6d:c0:cc:3c: 66:c5:4c:de:eb:e3:a6:71:b6:ce:cb:2d:a1:4e:44: 52:7f:60:86:d6:c5:86:e3:00:9a:3a:a1:e3:d3:a2: 18:63:da:e2:44:ad:d3:1c:17:69:a4:92:b9:c1:80: 45:e2:98:2d:60:c5:21:9e:56:57:e8:f7:7b:5c:ab: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:8C:AC:A5:1C:6F:C1:F7:D4:59:C9:F9:19:02:54:34:31:43:A1 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ul6MrKUcb8H31FnJ-RkCVDQxQ6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption ab:c6:b2:ab:11:e3:dc:19:d7:9e:bf:b0:ef:db:a9:03:37:01: b8:fc:7b:73:05:2c:f5:a7:95:bb:19:5e:39:ff:57:8b:89:06: 4e:a4:17:90:38:bc:88:9f:cb:76:30:fd:19:84:bd:db:22:68: 1e:b6:5c:5a:a0:b7:bd:39:68:00:ef:3f:7b:36:b8:8b:c9:b1: 35:e9:a6:52:b6:59:48:66:8f:b2:21:cc:41:c6:9a:99:9e:ac: 83:c6:14:ca:bf:87:d2:a9:4d:c2:95:d7:da:cc:4a:f5:3e:1f: 32:4d:3c:ce:ca:ea:86:dc:15:98:5e:76:4e:62:fe:81:58:4c: 60:05:b7:d0:13:a9:32:4e:78:40:a0:7f:6d:8f:42:a0:b9:55: 43:48:8d:22:53:1f:49:c1:90:1b:00:55:84:ad:76:3a:ef:73: b5:e3:1d:b2:70:2d:f8:4d:c1:da:c0:56:14:06:45:68:48:1f: 91:87:0b:80:2c:14:fd:d3:b8:31:d0:7e:2e:05:e1:e1:4e:66: 5d:fa:9a:90:2e:1f:2e:f5:a9:bb:20:9d:e5:a0:e7:21:7b:98: a6:aa:51:06:38:46:63:4c:3e:6d:bc:c4:a5:4b:bf:9f:91:f8: 8b:7a:16:a1:c1:74:70:b5:49:fd:64:3a:b1:76:83:0c:16:9a: 9b:51:7b:70 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYUcid00YyceSGp2QQ+ONya1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjE2MjAwNDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjVlOGNhY2E1MWM2ZmMxZjdkNDU5YzlmOTE5MDI1NDM0MzE0M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWO2ngK+lqOnLgRTRfzh4aQQIOCR rRS5iuNRiYA3neeq30pTU2qb4kYsYRb5VaJown5YJ7J+ZAwTkXyyzMtTZBtQazmn 7BLjlLzHM1ivBDvTuksfj9+QUsKeOaLVFlZj9MZfjmonjQDi6wNHTAT6t9VR1Hex ASV1txuBoSDVbz1IHCdwUqBjlJLsHPMncZLVEGM9pCFdTG2gewIak+tk7fk4Io0Z q0lI7+lT7UvSMpnkw+d6j23Udy2Wm2gOE23AzDxmxUze6+OmcbbOyy2hTkRSf2CG 1sWG4wCaOqHj06IYY9riRK3THBdppJK5wYBF4pgtYMUhnlZX6Pd7XKv2HQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFJejKylHG/B99RZyfkZAlQ0MUOhMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvVWw2TXJLVWNiOEgzMUZuSi1Sa0NWRFF4UTZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKvGsqsR49wZ156/sO/b qQM3Abj8e3MFLPWnlbsZXjn/V4uJBk6kF5A4vIify3Yw/RmEvdsiaB62XFqgt705 aADvP3s2uIvJsTXpplK2WUhmj7IhzEHGmpmerIPGFMq/h9KpTcKV19rMSvU+HzJN PM7K6obcFZhedk5i/oFYTGAFt9ATqTJOeECgf22PQqC5VUNIjSJTH0nBkBsAVYSt djrvc7XjHbJwLfhNwdrAVhQGRWhIH5GHC4AsFP3TuDHQfi4F4eFOZl36mpAuHy71 qbsgneWg5yF7mKaqUQY4RmNMPm28xKVLv5+R+It6FqHBdHC1Sf1kOrF2gwwWmptR e3A= -----END CERTIFICATE-----Generated at Fri Dec 19 23:48:15 2025 by rpki-client