This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aEtY2gwjbRVKE8u8-05jU5CeFmE.roa File: aEtY2gwjbRVKE8u8-05jU5CeFmE.roa (raw, json) Hash identifier: C9fWy/F8LpJjMWQvmqEpGIaEp5e7UCKtkOvjiE2CbAA= Subject key identifier: 68:4B:58:DA:0C:23:6D:15:4A:13:CB:BC:FB:4E:63:53:90:9E:16:61 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018303EBB60CD2D8137450FC964699DC8921 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aEtY2gwjbRVKE8u8-05jU5CeFmE.roa Signing time: Sat 03 Sep 2022 15:15:22 +0000 ROA not before: Sat 03 Sep 2022 15:15:22 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128 2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:83:03:eb:b6:0c:d2:d8:13:74:50:fc:96:46:99:dc:89:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Sep 3 15:15:22 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=684b58da0c236d154a13cbbcfb4e6353909e1661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:fc:40:8f:7a:dc:b0:ac:c2:20:e4:9a:40: 6d:5b:58:2a:cd:8d:18:b7:8e:ae:42:13:ff:5d:56: c8:23:00:e5:d5:b2:e8:f5:80:bf:df:33:6a:95:6a: 02:86:6f:f6:dd:78:cd:27:d2:89:5c:83:f7:97:bb: 1a:b2:8f:53:9c:c2:e2:af:c4:d7:36:dc:1e:65:a5: 71:a4:9d:b0:0a:4b:34:cc:f8:cd:f6:76:ae:f4:e6: 26:a2:d1:f1:a2:61:bb:54:54:4b:67:54:44:5c:c6: 68:5d:7d:1b:73:08:61:ae:f2:66:49:5b:5e:fc:3c: 37:59:57:e0:a3:0d:db:ef:e7:d2:70:7a:52:29:40: ec:d4:f1:4e:54:53:ab:61:7b:00:55:81:8b:38:55: 98:b8:bb:d7:5e:48:b1:f9:d2:5d:2e:f1:0d:30:50: 6a:34:c5:3c:ef:16:55:8c:88:73:be:a7:7e:57:8d: 08:6b:dd:d5:a9:6b:8f:b1:56:c2:41:8f:f8:c7:ed: 99:56:17:eb:1d:2e:94:8c:c1:98:9c:40:ce:80:43: 16:ee:bc:f7:4f:e5:90:dd:fa:69:74:59:fb:69:86: 20:c5:60:2f:b0:d3:c5:49:6b:16:96:dd:82:47:4f: 74:e1:45:96:ec:35:54:23:a1:f0:ca:85:f5:fc:08: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4B:58:DA:0C:23:6D:15:4A:13:CB:BC:FB:4E:63:53:90:9E:16:61 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aEtY2gwjbRVKE8u8-05jU5CeFmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 89:4d:40:ba:57:22:4c:12:95:40:3c:4f:d7:c1:ef:5d:e9:ca: 7c:da:0c:c0:0a:c9:0e:13:6b:dd:8d:7b:e5:d8:36:e3:d2:dd: 6c:67:0a:7e:e2:ed:8d:57:a1:9d:3f:34:2f:c3:9f:44:1b:64: 74:63:39:9c:68:11:ee:39:e8:c4:15:2d:4a:c4:13:b3:dd:7b: be:94:36:25:ad:07:94:a9:89:80:4f:8a:fd:7b:55:5a:30:bf: c9:51:c2:c0:d4:15:3d:1f:cc:03:d2:8c:64:2e:e5:6c:6e:81: e3:c0:fc:d8:63:0b:c3:48:5c:2d:ef:7c:4b:01:36:95:2f:c2: 4c:1b:ba:80:8a:47:52:49:24:3b:6d:89:f4:30:46:fe:c7:c3: 57:25:e7:df:f9:55:75:cf:69:c1:6b:15:21:d1:36:b1:3a:7b: 29:25:d1:ec:69:de:4e:cf:b8:c2:bd:ed:49:48:13:57:76:47: 73:b0:da:6b:04:29:fe:ff:d8:48:a8:fa:78:2a:aa:fc:d1:24: e2:5a:3f:dc:72:86:a1:cb:0b:42:ca:b8:ef:2a:b3:c6:53:38: 62:b7:14:b0:a9:9c:2a:4e:63:1b:7b:16:b3:77:01:bc:27:ac: c8:8b:80:f6:64:01:53:d3:be:d3:c8:dd:fa:fd:c6:03:1c:45: 2a:58:40:c2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYMD67YM0tgTdFD8lkaZ3IkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIwOTAzMTUxNTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODRiNThkYTBjMjM2ZDE1NGExM2NiYmNmYjRlNjM1MzkwOWUxNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBn8QI963LCswiDkmkBtW1gqzY0Y t46uQhP/XVbIIwDl1bLo9YC/3zNqlWoChm/23XjNJ9KJXIP3l7saso9TnMLir8TX NtweZaVxpJ2wCks0zPjN9nau9OYmotHxomG7VFRLZ1REXMZoXX0bcwhhrvJmSVte /Dw3WVfgow3b7+fScHpSKUDs1PFOVFOrYXsAVYGLOFWYuLvXXkix+dJdLvENMFBq NMU87xZVjIhzvqd+V40Ia93VqWuPsVbCQY/4x+2ZVhfrHS6UjMGYnEDOgEMW7rz3 T+WQ3fppdFn7aYYgxWAvsNPFSWsWlt2CR0904UWW7DVUI6HwyoX1/AiVMQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGhLWNoMI20VShPLvPtOY1OQnhZhMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvYUV0WTJnd2piUlZLRTh1OC0wNWpVNUNlRm1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIlNQLpXIkwSlUA8T9fB 713pynzaDMAKyQ4Ta92Ne+XYNuPS3WxnCn7i7Y1XoZ0/NC/Dn0QbZHRjOZxoEe45 6MQVLUrEE7Pde76UNiWtB5SpiYBPiv17VVowv8lRwsDUFT0fzAPSjGQu5WxugePA /NhjC8NIXC3vfEsBNpUvwkwbuoCKR1JJJDttifQwRv7Hw1cl59/5VXXPacFrFSHR NrE6eykl0exp3k7PuMK97UlIE1d2R3Ow2msEKf7/2Eio+ngqqvzRJOJaP9xyhqHL C0LKuO8qs8ZTOGK3FLCpnCpOYxt7FrN3AbwnrMiLgPZkAVPTvtPI3fr9xgMcRSpY QMI= -----END CERTIFICATE-----Generated at Sat Dec 20 07:39:16 2025 by rpki-client