This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpZJsGFESkNBGKtf0u5WiMJ5OOQ.roa File: cpZJsGFESkNBGKtf0u5WiMJ5OOQ.roa (raw, json) Hash identifier: KEhQrDPhkpZ+K7dD5eWch6QJuk787NOsvazYWbmMOUU= Subject key identifier: 72:96:49:B0:61:44:4A:43:41:18:AB:5F:D2:EE:56:88:C2:79:38:E4 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018693A9369F233A7B58EE983A38E90D3895 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpZJsGFESkNBGKtf0u5WiMJ5OOQ.roa Signing time: Mon 27 Feb 2023 16:16:25 +0000 ROA not before: Mon 27 Feb 2023 16:16:25 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:93:a9:36:9f:23:3a:7b:58:ee:98:3a:38:e9:0d:38:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 27 16:16:25 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=729649b061444a434118ab5fd2ee5688c27938e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:79:31:f3:d7:51:8d:3f:15:93:3b:fb:3c: af:84:e4:b1:c4:21:7f:f0:5c:19:09:33:e8:98:0f: d8:a4:61:de:7f:44:79:f7:3d:e5:88:e6:74:90:2e: 30:92:c0:3c:db:c5:47:c2:0c:5e:15:58:96:64:96: 8c:27:46:14:e3:de:5d:84:bd:65:b8:ee:c4:e7:fa: 05:61:10:81:9c:43:e7:27:cd:03:8c:eb:e0:c4:e0: 02:f1:2c:f6:2c:f1:f6:ce:45:b6:42:df:43:a9:77: 7f:33:00:b6:84:f9:80:0f:09:7a:19:e0:ae:1f:af: c8:f7:07:4e:11:64:29:31:c4:f7:77:cf:2d:3c:2d: fe:03:e0:b3:7c:8f:72:b1:70:87:34:4d:3a:f5:a0: 82:d5:ce:c4:73:d3:a9:1f:8d:a6:cf:47:18:3a:3e: 7a:25:b8:b7:84:fa:98:fe:73:76:1b:77:da:13:fa: 7c:ce:f1:ac:d7:5e:ad:14:e2:ec:e0:9d:d4:02:ce: 04:7e:74:cc:d9:93:04:1f:fd:2e:54:c7:7c:1e:c9: c4:94:5b:15:a4:2a:b5:ed:47:57:4d:b6:45:2e:4e: 71:69:ee:fd:78:f3:9e:6e:32:6d:0a:a9:22:39:a9: dd:9e:ae:7e:bf:82:dc:db:29:4e:1d:d2:2d:76:4f: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:49:B0:61:44:4A:43:41:18:AB:5F:D2:EE:56:88:C2:79:38:E4 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpZJsGFESkNBGKtf0u5WiMJ5OOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 7e:91:ec:57:a4:44:14:90:b3:f8:35:0e:0e:94:7f:2a:22:a4: b8:02:32:76:5c:a5:f8:88:db:d0:66:7f:61:17:68:71:8e:d9: b7:1c:b0:fb:f7:3a:fe:ac:10:f3:8b:de:df:8c:0d:6c:ee:a1: 51:3b:69:c2:74:74:d0:8d:d2:27:af:35:dc:47:aa:0f:43:ad: 1f:8a:4b:47:fe:d5:17:1a:80:df:cc:5d:ad:50:5e:7a:28:fa: 68:58:05:86:d0:e3:a2:53:59:70:df:68:74:0c:23:86:26:8a: e8:a2:d0:1d:b7:f2:0b:a3:50:70:26:a9:4e:45:0f:ec:2d:60: 34:c2:4e:df:4a:8c:36:4c:b7:0e:4e:18:94:43:10:b4:6f:13: 29:16:4b:f4:f6:37:dc:44:b1:98:f4:12:c7:9b:d5:16:70:5b: 5f:6e:53:3c:94:b1:5f:24:5f:49:fe:df:fd:fe:29:3c:25:62: d3:d7:9f:d0:2e:cb:34:a3:93:fc:f0:52:a4:df:41:a1:99:86: d4:70:cf:cf:34:3a:b4:9d:a9:de:6b:65:8d:fe:34:f8:e6:5c: 30:22:2a:f6:60:64:c0:c0:db:fb:2a:96:8c:20:dd:55:4d:92: a9:4c:65:87:1b:cf:88:43:18:c6:a5:57:b0:3a:f8:13:23:2a: dd:0e:cf:fb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYaTqTafIzp7WO6YOjjpDTiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjI3MTYxNjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjk2NDliMDYxNDQ0YTQzNDExOGFiNWZkMmVlNTY4OGMyNzkzOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxV5MfPXUY0/FZM7+zyvhOSxxCF/ 8FwZCTPomA/YpGHef0R59z3liOZ0kC4wksA828VHwgxeFViWZJaMJ0YU495dhL1l uO7E5/oFYRCBnEPnJ80DjOvgxOAC8Sz2LPH2zkW2Qt9DqXd/MwC2hPmADwl6GeCu H6/I9wdOEWQpMcT3d88tPC3+A+CzfI9ysXCHNE069aCC1c7Ec9OpH42mz0cYOj56 Jbi3hPqY/nN2G3faE/p8zvGs116tFOLs4J3UAs4EfnTM2ZMEH/0uVMd8HsnElFsV pCq17UdXTbZFLk5xae79ePOebjJtCqkiOandnq5+v4Lc2ylOHdItdk+kAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHKWSbBhREpDQRirX9LuVojCeTjkMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvY3BaSnNHRkVTa05CR0t0ZjB1NVdpTUo1T09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH6R7FekRBSQs/g1Dg6U fyoipLgCMnZcpfiI29Bmf2EXaHGO2bccsPv3Ov6sEPOL3t+MDWzuoVE7acJ0dNCN 0ievNdxHqg9DrR+KS0f+1RcagN/MXa1QXnoo+mhYBYbQ46JTWXDfaHQMI4Ymiuii 0B238gujUHAmqU5FD+wtYDTCTt9KjDZMtw5OGJRDELRvEykWS/T2N9xEsZj0Eseb 1RZwW19uUzyUsV8kX0n+3/3+KTwlYtPXn9AuyzSjk/zwUqTfQaGZhtRwz880OrSd qd5rZY3+NPjmXDAiKvZgZMDA2/sqlowg3VVNkqlMZYcbz4hDGMalV7A6+BMjKt0O z/s= -----END CERTIFICATE-----Generated at Fri Dec 19 22:08:44 2025 by rpki-client