This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XsG5i7RFseA4ScAlr1koUWzHfgI.roa File: XsG5i7RFseA4ScAlr1koUWzHfgI.roa (raw, json) Hash identifier: rHAG54w751WijNYelEeoyFGH/o4Y0zw7kBAJSayLmg4= Subject key identifier: 5E:C1:B9:8B:B4:45:B1:E0:38:49:C0:25:AF:59:28:51:6C:C7:7E:02 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0182FDA98FE8FEDFD1C9204879C431B54E40 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XsG5i7RFseA4ScAlr1koUWzHfgI.roa Signing time: Fri 02 Sep 2022 10:05:24 +0000 ROA not before: Fri 02 Sep 2022 10:05:24 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:182:fda9:f37/128 maxlen: 128 2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128 2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:82:fd:a9:8f:e8:fe:df:d1:c9:20:48:79:c4:31:b5:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Sep 2 10:05:24 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=5ec1b98bb445b1e03849c025af5928516cc77e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:ed:e8:95:f7:b6:53:f6:4d:72:3f:d3:34: e4:08:7a:af:78:35:39:91:fa:e3:bb:3d:c5:86:dd: 37:6f:ad:8f:58:bb:e6:c8:56:fc:4e:d2:4c:dc:5e: 5b:44:1a:0d:f7:79:3a:f3:07:3f:e5:dc:01:9c:66: bc:5f:11:8d:d4:1e:79:9c:9a:3c:f2:ef:32:fc:e2: 4b:eb:b1:07:85:dd:62:1c:93:93:e5:c9:c9:88:cb: 46:c2:72:dc:7b:82:fd:d5:6b:e3:2e:69:e6:ba:c5: 4d:3d:f5:58:aa:24:2e:cc:e2:91:5f:56:82:1f:96: 3c:00:29:4e:d7:71:75:a3:fd:19:75:fc:49:f7:19: 32:06:5f:c7:6f:e2:5f:92:f9:e9:5c:45:d4:3f:dd: 76:ab:be:6c:a1:e9:c7:ca:fc:38:a2:f2:9b:69:77: e4:1a:65:30:12:76:ca:f1:d7:ab:0d:90:78:51:3f: f5:5b:08:7b:2b:4e:b9:d2:fc:0a:76:56:2d:88:b9: 4a:2b:0a:f6:2c:44:6a:c6:29:6c:cf:31:d0:ad:97: 8d:d0:ee:f2:2e:12:3a:30:2f:74:50:60:e5:4c:f8: 2d:14:43:f9:0c:7f:9f:0e:18:40:a4:7f:fc:b0:2a: 67:72:a1:6b:17:a3:05:2b:e1:ec:0b:31:44:36:5e: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:B9:8B:B4:45:B1:E0:38:49:C0:25:AF:59:28:51:6C:C7:7E:02 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XsG5i7RFseA4ScAlr1koUWzHfgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 59:3a:d3:d3:bb:8b:f5:b1:21:08:f3:0a:76:c1:ef:7f:de:d3: c1:45:cd:2a:4c:9f:fd:a7:e5:cd:08:13:60:4a:1c:eb:6b:38: 98:ef:34:03:63:55:ad:af:4d:3d:a8:36:3a:5b:0b:d3:fa:d7: bb:03:a8:4d:4b:ad:44:79:cd:da:b5:c2:2a:ea:a7:b3:6a:75: 61:6e:8b:90:db:62:d5:40:e9:b1:d1:13:56:29:97:76:a5:0f: 09:74:f5:d7:81:c9:e1:e0:7c:86:0d:f6:16:b3:3c:65:35:49: b9:cb:90:4b:84:2e:93:0c:4e:d8:0c:a6:e2:18:2f:04:3c:00: 76:93:e6:cd:fc:35:ac:91:e7:b9:1b:6a:57:a3:55:6c:fe:3b: 3b:0f:c7:ea:46:62:65:fb:3a:00:c3:81:93:84:6c:12:9e:d0: 9b:a2:32:b9:b9:a1:b5:ad:f7:8a:d2:8b:18:ad:92:dd:26:04: 44:cd:27:6d:30:d7:7a:d5:fa:74:dd:47:17:ed:bb:b4:92:ac: fc:07:01:92:e5:59:ad:ca:55:e1:a3:9c:2b:a4:ec:5d:34:dc: c7:a1:2b:a2:70:f2:66:16:e7:e1:e8:4c:4b:33:bc:91:1f:d3: e4:41:84:16:ed:8c:f6:9f:c5:e9:58:51:5c:c3:ec:b0:19:5c: 94:9a:27:1f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYL9qY/o/t/RySBIecQxtU5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIwOTAyMTAwNTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWMxYjk4YmI0NDViMWUwMzg0OWMwMjVhZjU5Mjg1MTZjYzc3ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdnt6JX3tlP2TXI/0zTkCHqveDU5 kfrjuz3Fht03b62PWLvmyFb8TtJM3F5bRBoN93k68wc/5dwBnGa8XxGN1B55nJo8 8u8y/OJL67EHhd1iHJOT5cnJiMtGwnLce4L91WvjLmnmusVNPfVYqiQuzOKRX1aC H5Y8AClO13F1o/0ZdfxJ9xkyBl/Hb+JfkvnpXEXUP912q75soenHyvw4ovKbaXfk GmUwEnbK8derDZB4UT/1Wwh7K0650vwKdlYtiLlKKwr2LERqxilszzHQrZeN0O7y LhI6MC90UGDlTPgtFEP5DH+fDhhApH/8sCpncqFrF6MFK+HsCzFENl54xwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF7BuYu0RbHgOEnAJa9ZKFFsx34CMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvWHNHNWk3UkZzZUE0U2NBbHIxa29VV3pIZmdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFk609O7i/WxIQjzCnbB 73/e08FFzSpMn/2n5c0IE2BKHOtrOJjvNANjVa2vTT2oNjpbC9P617sDqE1LrUR5 zdq1wirqp7NqdWFui5DbYtVA6bHRE1Ypl3alDwl09deByeHgfIYN9hazPGU1SbnL kEuELpMMTtgMpuIYLwQ8AHaT5s38NayR57kbalejVWz+OzsPx+pGYmX7OgDDgZOE bBKe0JuiMrm5obWt94rSixitkt0mBETNJ20w13rV+nTdRxftu7SSrPwHAZLlWa3K VeGjnCuk7F003MehK6Jw8mYW5+HoTEszvJEf0+RBhBbtjPafxelYUVzD7LAZXJSa Jx8= -----END CERTIFICATE-----Generated at Sat Dec 20 00:20:06 2025 by rpki-client