This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aHRUOzWlfpclJl7DucOwFSc11Bg.roa File: aHRUOzWlfpclJl7DucOwFSc11Bg.roa (raw, json) Hash identifier: U2ThfatxECRanXjnOSi+07WCwIOcJXKlO04TuLkEIBc= Subject key identifier: 68:74:54:3B:35:A5:7E:97:25:26:5E:C3:B9:C3:B0:15:27:35:D4:18 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018966506395946819D7252D37D8E994A442 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aHRUOzWlfpclJl7DucOwFSc11Bg.roa Signing time: Tue 18 Jul 2023 00:04:51 +0000 ROA not before: Tue 18 Jul 2023 00:04:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:189:6650:2ceb/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:66:50:63:95:94:68:19:d7:25:2d:37:d8:e9:94:a4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 18 00:04:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6874543b35a57e9725265ec3b9c3b0152735d418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:4f:67:1b:37:42:44:99:fa:ab:00:92:77: 32:64:b8:b2:01:a4:d9:a6:52:54:31:14:8d:ed:3d: 05:df:87:5c:1f:08:10:d8:28:14:ad:15:a1:e2:f4: f4:96:5f:c6:a1:32:20:fe:6f:9f:fc:2c:aa:ef:da: c9:95:50:76:a2:95:28:fb:44:cf:56:5f:e6:e5:d9: 72:23:1d:44:2b:55:64:f3:f1:b5:27:84:9a:8c:02: 13:88:91:27:5c:ed:6e:c9:33:db:5f:5f:4a:39:c6: 10:52:c5:59:a9:c4:85:c3:d5:20:d0:61:4d:20:8c: 61:21:b8:65:4e:4e:46:7b:68:57:75:27:05:aa:89: e9:ce:7d:5c:a3:61:64:ce:12:02:e2:9c:3e:9c:33: f2:0c:15:8e:b4:c6:13:54:11:f5:04:39:1d:52:2b: 92:1f:d7:bf:5d:ac:cf:dd:7d:f9:2a:12:25:ae:17: 4d:66:91:66:7b:97:dc:c0:6f:1c:02:1f:cb:39:a5: 30:f9:8e:d5:74:bf:92:2a:f0:66:4b:42:92:59:4d: 5d:e2:d1:d5:ee:c6:59:a2:9a:d0:eb:59:0f:bf:05: ce:10:17:fb:1f:e8:5d:6f:7d:47:ab:80:18:68:1c: e4:ad:4a:21:7d:4c:98:86:bc:bc:49:9d:e2:19:02: 0b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:74:54:3B:35:A5:7E:97:25:26:5E:C3:B9:C3:B0:15:27:35:D4:18 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aHRUOzWlfpclJl7DucOwFSc11Bg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 93:3a:50:94:a8:a7:d3:42:33:00:d2:1f:b3:0b:b6:98:de:4b: b7:2c:59:4d:42:e6:96:18:26:20:d3:ba:28:8c:73:f5:32:4c: 41:02:97:23:22:09:81:df:7b:e2:08:3b:ba:44:46:90:5b:e5: b8:84:c4:80:61:84:91:0b:6f:13:81:1f:da:b3:e9:10:2a:67: 3d:9f:cf:9f:19:2c:37:db:89:c5:9c:6f:17:39:7e:82:1c:b9: 5f:1e:64:e2:83:c2:11:77:37:f7:de:44:55:80:bd:91:96:6e: f1:ea:c6:2a:6f:b3:e7:2c:63:69:96:08:b2:3d:f7:66:f6:ea: 19:88:14:c7:06:87:5d:e6:f6:29:45:e8:b2:d8:b7:45:07:00: 87:de:a1:fe:b2:5e:a5:68:6c:da:57:49:3f:88:18:26:96:39: 96:ef:bb:01:9d:ce:d1:d5:9f:c8:7b:ba:26:56:d2:94:80:49: 30:5f:17:f6:9f:1b:39:da:60:a8:1c:44:fd:3b:70:58:9a:82: 8e:42:a0:17:49:be:7c:c9:76:9f:4c:ed:87:35:c9:91:c8:77: d2:df:db:73:a4:7f:f8:bf:53:5c:21:ff:42:48:4e:95:2b:b4: 16:02:43:a6:ae:da:ef:ea:74:5d:fa:42:c1:61:84:a9:a6:93: 4a:89:5b:1b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYlmUGOVlGgZ1yUtN9jplKRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNzE4MDAwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODc0NTQzYjM1YTU3ZTk3MjUyNjVlYzNiOWMzYjAxNTI3MzVkNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QVPZxs3QkSZ+qsAkncyZLiyAaTZ plJUMRSN7T0F34dcHwgQ2CgUrRWh4vT0ll/GoTIg/m+f/Cyq79rJlVB2opUo+0TP Vl/m5dlyIx1EK1Vk8/G1J4SajAITiJEnXO1uyTPbX19KOcYQUsVZqcSFw9Ug0GFN IIxhIbhlTk5Ge2hXdScFqonpzn1co2FkzhIC4pw+nDPyDBWOtMYTVBH1BDkdUiuS H9e/XazP3X35KhIlrhdNZpFme5fcwG8cAh/LOaUw+Y7VdL+SKvBmS0KSWU1d4tHV 7sZZoprQ61kPvwXOEBf7H+hdb31Hq4AYaBzkrUohfUyYhry8SZ3iGQILEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGh0VDs1pX6XJSZew7nDsBUnNdQYMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvYUhSVU96V2xmcGNsSmw3RHVjT3dGU2MxMUJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJM6UJSop9NCMwDSH7ML tpjeS7csWU1C5pYYJiDTuiiMc/UyTEEClyMiCYHfe+IIO7pERpBb5biExIBhhJEL bxOBH9qz6RAqZz2fz58ZLDfbicWcbxc5foIcuV8eZOKDwhF3N/feRFWAvZGWbvHq xipvs+csY2mWCLI992b26hmIFMcGh13m9ilF6LLYt0UHAIfeof6yXqVobNpXST+I GCaWOZbvuwGdztHVn8h7uiZW0pSASTBfF/afGznaYKgcRP07cFiago5CoBdJvnzJ dp9M7Yc1yZHId9Lf23Okf/i/U1wh/0JITpUrtBYCQ6au2u/qdF36QsFhhKmmk0qJ Wxs= -----END CERTIFICATE-----Generated at Thu Dec 18 09:29:19 2025 by rpki-client