This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YVfxHaqB8ZvYFbluSathTNCiYPM.roa File: YVfxHaqB8ZvYFbluSathTNCiYPM.roa (raw, json) Hash identifier: Mv6FaKWW/UzZPd3+TNo+zuAEdkamZ5No9JvhNqucVLs= Subject key identifier: 61:57:F1:1D:AA:81:F1:9B:D8:15:B9:6E:49:AB:61:4C:D0:A2:60:F3 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018558A27D74BCBE6DEE9F600E1C07A1F728 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YVfxHaqB8ZvYFbluSathTNCiYPM.roa Signing time: Wed 28 Dec 2022 12:08:41 +0000 ROA not before: Wed 28 Dec 2022 12:08:41 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:58:a2:7d:74:bc:be:6d:ee:9f:60:0e:1c:07:a1:f7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 28 12:08:41 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=6157f11daa81f19bd815b96e49ab614cd0a260f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:8e:eb:da:8a:0b:b7:37:a1:20:37:fc:13: bb:9f:07:88:19:dd:a4:83:11:a1:33:c0:a7:e8:5b: b5:ed:b6:2e:b3:28:2d:1d:8f:04:3e:04:fb:27:29: cd:a3:fb:fd:4f:ae:40:bc:8a:bd:f4:e1:86:7e:36: 73:7a:31:c2:33:1e:e9:77:2f:bf:e4:68:be:6b:f6: ab:cf:b1:9a:f9:7d:07:f8:33:a8:1d:73:72:97:ad: 66:f6:80:07:d8:f3:99:01:f9:a8:fd:ae:e4:5e:71: 58:1a:4f:a2:a9:ab:4b:ec:df:89:a4:6d:da:ca:eb: f5:97:be:87:4a:1c:95:46:39:bc:d2:3d:ee:21:4a: 72:76:ee:4f:0e:e4:4c:46:99:b7:ed:4a:11:c5:97: 61:b5:c5:34:98:cd:3c:1d:7a:05:e5:f6:2f:5e:ef: 4c:71:68:95:5b:5a:bf:c0:e9:3b:6c:ee:2a:5d:12: fe:66:05:f0:b8:21:9d:41:c4:9a:01:48:06:68:d6: 56:01:48:ec:53:e6:cc:cc:9a:10:69:e7:c7:3b:5c: e0:35:96:84:83:2c:5e:13:ec:2a:44:f8:21:b8:35: 64:37:7b:54:de:d9:a7:c1:5c:7d:6f:fe:13:15:6a: 96:4a:93:9a:6e:20:27:0b:33:a0:37:9e:7a:c9:7c: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:57:F1:1D:AA:81:F1:9B:D8:15:B9:6E:49:AB:61:4C:D0:A2:60:F3 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YVfxHaqB8ZvYFbluSathTNCiYPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 99:3b:99:29:ae:98:e2:90:68:2c:62:9e:ad:a1:22:63:9a:c6: d0:8c:1a:55:65:72:50:3d:41:05:17:15:41:b9:83:dd:d1:14: b8:52:ab:33:75:89:51:b1:21:3a:72:74:25:48:ec:75:d1:18: be:f3:47:85:0d:95:4f:8b:59:41:4e:8f:36:07:5e:08:5e:71: 74:c6:48:48:84:e3:8d:30:3a:27:ca:f4:ac:69:21:b8:9c:26: ef:66:28:3a:19:06:c5:6a:10:92:7f:a1:df:72:02:ed:90:87: 7a:9f:70:5d:00:02:f6:e6:a1:db:03:af:af:58:35:e2:52:3d: 27:48:51:7d:d5:8f:13:3c:df:3e:02:e8:3a:48:8f:c7:f0:5f: 94:56:cf:f4:2b:be:ff:60:5e:e4:5c:d2:b3:cb:ea:a6:df:6c: 9c:f4:6a:68:7d:f5:08:02:00:67:f5:22:99:14:df:cc:9c:c2: bb:bd:9d:45:ab:88:71:e5:84:5a:1d:3b:52:23:81:10:9b:0c: 4c:d8:ec:45:dd:41:78:c3:4d:a8:c2:1a:fb:29:c1:b6:7a:80: ed:b4:c2:89:95:f6:78:a5:ac:4c:80:73:ac:b1:c3:af:ea:41: 13:19:99:81:36:e9:cc:07:32:05:6c:0a:ad:01:82:b1:65:d1: b5:bb:ef:84 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYVYon10vL5t7p9gDhwHofcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjI4MTIwODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTU3ZjExZGFhODFmMTliZDgxNWI5NmU0OWFiNjE0Y2QwYTI2MGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOiO69qKC7c3oSA3/BO7nweIGd2k gxGhM8Cn6Fu17bYusygtHY8EPgT7JynNo/v9T65AvIq99OGGfjZzejHCMx7pdy+/ 5Gi+a/arz7Ga+X0H+DOoHXNyl61m9oAH2POZAfmo/a7kXnFYGk+iqatL7N+JpG3a yuv1l76HShyVRjm80j3uIUpydu5PDuRMRpm37UoRxZdhtcU0mM08HXoF5fYvXu9M cWiVW1q/wOk7bO4qXRL+ZgXwuCGdQcSaAUgGaNZWAUjsU+bMzJoQaefHO1zgNZaE gyxeE+wqRPghuDVkN3tU3tmnwVx9b/4TFWqWSpOabiAnCzOgN556yXwRcwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGFX8R2qgfGb2BW5bkmrYUzQomDzMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvWVZmeEhhcUI4WnZZRmJsdVNhdGhUTkNpWVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJk7mSmumOKQaCxinq2h ImOaxtCMGlVlclA9QQUXFUG5g93RFLhSqzN1iVGxITpydCVI7HXRGL7zR4UNlU+L WUFOjzYHXghecXTGSEiE440wOifK9KxpIbicJu9mKDoZBsVqEJJ/od9yAu2Qh3qf cF0AAvbmodsDr69YNeJSPSdIUX3VjxM83z4C6DpIj8fwX5RWz/Qrvv9gXuRc0rPL 6qbfbJz0amh99QgCAGf1IpkU38ycwru9nUWriHHlhFodO1IjgRCbDEzY7EXdQXjD TajCGvspwbZ6gO20womV9nilrEyAc6yxw6/qQRMZmYE26cwHMgVsCq0BgrFl0bW7 74Q= -----END CERTIFICATE-----Generated at Sat Dec 20 14:05:23 2025 by rpki-client