This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eJ2IdC3UHgLV4pYdCPyOz-L2F2E.roa File: eJ2IdC3UHgLV4pYdCPyOz-L2F2E.roa (raw, json) Hash identifier: ahyImbx0+xpnqmQQ0q3YwSerOm7HEABmOB4D5nylhHo= Subject key identifier: 78:9D:88:74:2D:D4:1E:02:D5:E2:96:1D:08:FC:8E:CF:E2:F6:17:61 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018339C538C9E6BCF4AB5AA21A8CEEBCA3A2 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eJ2IdC3UHgLV4pYdCPyOz-L2F2E.roa Signing time: Wed 14 Sep 2022 02:12:49 +0000 ROA not before: Wed 14 Sep 2022 02:12:49 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128 2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128 2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:83:39:c5:38:c9:e6:bc:f4:ab:5a:a2:1a:8c:ee:bc:a3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Sep 14 02:12:49 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=789d88742dd41e02d5e2961d08fc8ecfe2f61761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:00:af:36:9e:d0:8e:9d:66:f0:5d:66:b6:9a: ae:d9:32:f1:23:de:52:71:be:1d:94:e0:8f:13:a2: d8:6c:65:a6:c4:91:8b:ab:ac:fd:8a:bc:a4:8a:f2: 8c:a9:a3:23:c7:63:59:68:d6:70:0a:19:2c:05:27: d5:16:e8:3a:f9:fa:a0:db:24:a6:b1:1c:1e:8e:c1: dd:9b:45:87:66:da:6a:42:3a:a1:28:93:22:27:98: c2:ab:5e:65:c2:b1:30:16:77:0c:ed:86:24:17:89: f7:ac:9c:31:1f:b5:35:dd:f4:b6:e9:c4:f9:17:b1: 9a:f7:fb:a7:70:6b:b7:bc:57:f5:c9:55:6e:fa:9e: 44:3b:1e:e1:b0:ee:ae:3d:a0:da:eb:5b:aa:c3:c0: ad:bc:10:6c:4b:20:b9:ec:ae:8f:0f:4f:73:6b:2d: f6:d5:0d:d3:8e:72:ba:0c:1f:4f:64:e5:d3:5e:3c: bd:ca:f6:fa:28:d6:39:1f:fb:0a:54:d5:99:e7:bd: 04:51:1f:da:2b:bf:d6:e7:8f:6d:dc:74:3b:58:d2: f0:cf:40:65:6f:cb:e8:3e:44:84:21:35:25:17:33: 25:35:15:97:20:87:23:25:c0:02:f8:fb:92:43:a8: f4:57:1c:04:40:fe:d3:b2:82:75:0b:98:da:1e:9e: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9D:88:74:2D:D4:1E:02:D5:E2:96:1D:08:FC:8E:CF:E2:F6:17:61 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eJ2IdC3UHgLV4pYdCPyOz-L2F2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 0d:dd:93:c5:ee:2c:c9:6b:00:57:6d:fd:8a:ca:eb:f4:a4:50: 47:58:ec:b7:af:f3:c0:e5:e8:2e:30:2d:1d:25:b1:5c:5d:13: ca:13:8f:a2:42:32:5d:fb:30:9d:9c:e5:d9:7e:cd:a8:b5:c8: ef:85:c6:88:33:cf:e1:31:63:41:d7:63:dc:f4:db:9b:eb:d8: 80:ff:85:af:a4:93:f6:48:24:0c:f2:99:22:47:f5:e4:85:b8: 81:e8:39:e0:5e:fa:55:78:1c:a5:05:26:49:b9:7f:c0:be:b3: 2e:fc:86:56:b1:67:51:c7:30:df:8c:5a:b1:f4:8f:9c:fa:07: b3:1f:83:e7:57:c7:8e:10:fb:8a:d9:32:25:ad:5f:fa:15:8c: 16:f3:15:3d:01:15:e1:ec:8a:1e:fb:49:eb:14:4f:3f:08:08: 7a:37:f6:a6:ee:e7:0c:f8:f9:04:ab:26:e3:32:9d:88:61:97: 33:59:52:d1:d8:06:53:6d:28:13:53:e2:b2:d0:8c:0f:d5:b6: df:9f:ad:07:9e:17:b1:3a:4f:5c:b8:99:7d:68:04:53:01:aa: 0c:ac:ab:dc:c4:ec:61:b2:92:6f:1d:72:e8:09:8f:83:02:c9: d3:fb:4b:4f:f1:65:a0:0e:3e:c9:1e:19:6f:fc:3f:13:3e:da: 74:4c:c2:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYM5xTjJ5rz0q1qiGozuvKOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIwOTE0MDIxMjQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODlkODg3NDJkZDQxZTAyZDVlMjk2MWQwOGZjOGVjZmUyZjYxNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QCvNp7Qjp1m8F1mtpqu2TLxI95S cb4dlOCPE6LYbGWmxJGLq6z9irykivKMqaMjx2NZaNZwChksBSfVFug6+fqg2ySm sRwejsHdm0WHZtpqQjqhKJMiJ5jCq15lwrEwFncM7YYkF4n3rJwxH7U13fS26cT5 F7Ga9/uncGu3vFf1yVVu+p5EOx7hsO6uPaDa61uqw8CtvBBsSyC57K6PD09zay32 1Q3TjnK6DB9PZOXTXjy9yvb6KNY5H/sKVNWZ570EUR/aK7/W549t3HQ7WNLwz0Bl b8voPkSEITUlFzMlNRWXIIcjJcAC+PuSQ6j0VxwEQP7TsoJ1C5jaHp5wMQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHidiHQt1B4C1eKWHQj8js/i9hdhMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvZUoySWRDM1VIZ0xWNHBZZENQeU96LUwyRjJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA3dk8XuLMlrAFdt/YrK 6/SkUEdY7Lev88Dl6C4wLR0lsVxdE8oTj6JCMl37MJ2c5dl+zai1yO+Fxogzz+Ex Y0HXY9z025vr2ID/ha+kk/ZIJAzymSJH9eSFuIHoOeBe+lV4HKUFJkm5f8C+sy78 hlaxZ1HHMN+MWrH0j5z6B7Mfg+dXx44Q+4rZMiWtX/oVjBbzFT0BFeHsih77SesU Tz8ICHo39qbu5wz4+QSrJuMynYhhlzNZUtHYBlNtKBNT4rLQjA/Vtt+frQeeF7E6 T1y4mX1oBFMBqgysq9zE7GGykm8dcugJj4MCydP7S0/xZaAOPskeGW/8PxM+2nRM wsg= -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:46 2025 by rpki-client