This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehgqAE-eulO2CWA76NgXuKgj-mw.roa File: ehgqAE-eulO2CWA76NgXuKgj-mw.roa (raw, json) Hash identifier: Pt6eTQs6jvkat2kGbYyVsw8A9V+EAfVAp7N5iLBnehk= Subject key identifier: 7A:18:2A:00:4F:9E:BA:53:B6:09:60:3B:E8:D8:17:B8:A8:23:FA:6C Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189F8398DB097C6EE281E6F253D7BB65279 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehgqAE-eulO2CWA76NgXuKgj-mw.roa Signing time: Tue 15 Aug 2023 08:04:28 +0000 ROA not before: Tue 15 Aug 2023 08:04:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:f839:8740/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:f8:39:8d:b0:97:c6:ee:28:1e:6f:25:3d:7b:b6:52:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 15 08:04:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=7a182a004f9eba53b609603be8d817b8a823fa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7c:76:b5:56:ec:7e:62:6e:4e:8c:e1:c5:9d: 8e:53:b6:97:07:6d:5b:91:1b:f2:f8:68:b5:b0:bd: ef:29:91:fd:e4:c6:8a:79:4a:bd:db:e9:d6:ea:95: ab:0f:c5:49:d4:bf:a5:96:e9:33:02:50:07:82:d0: 14:e7:97:fa:14:1b:d3:7e:7e:13:b4:07:42:a8:f5: 54:1d:c0:f7:8e:c1:f6:7b:d6:85:88:55:e3:ab:da: 8a:b7:2f:91:f3:df:6d:93:8e:4e:07:23:e8:3c:e8: 07:f1:d6:c6:3d:d3:30:44:41:98:0c:59:04:01:55: df:34:ab:ce:70:92:4f:5b:f8:03:13:5a:0b:f7:e2: be:ef:34:bd:bd:cd:10:08:7f:97:e8:a9:3c:aa:2a: 70:71:26:24:88:ea:bc:04:6a:78:96:0c:1c:30:d6: e6:f5:fe:15:5f:72:71:ca:cc:b5:29:f2:3e:11:6e: de:14:fa:c1:56:87:0a:00:b3:62:97:1e:ff:7c:e9: 5e:5f:52:f5:91:90:aa:7f:cb:26:51:2f:4f:9e:26: 3a:7c:d9:0e:b7:42:2b:e9:8f:bb:30:a8:51:0a:35: fd:7f:5b:1e:26:56:8d:41:0f:ad:35:55:16:a1:d2: 0e:40:4e:83:16:57:f1:b2:6a:4a:40:95:e4:6a:5c: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:18:2A:00:4F:9E:BA:53:B6:09:60:3B:E8:D8:17:B8:A8:23:FA:6C X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehgqAE-eulO2CWA76NgXuKgj-mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 40:7b:e3:04:33:9d:b7:0e:6e:16:3d:6f:73:09:00:70:48:a0: 57:36:2d:25:dc:af:2d:80:b5:f2:d4:0c:95:e4:ec:29:3c:e0: d5:9e:0a:4c:83:96:a5:8d:c3:b8:04:9c:bf:f5:9d:6c:7e:fa: a5:a3:c6:b1:e1:6f:69:12:49:11:95:5d:53:f3:e2:40:3f:22: 81:f8:10:22:a6:96:ce:67:a2:bb:01:8e:47:99:ce:54:c5:07: f0:21:2a:6c:01:71:80:3e:a1:1c:11:5a:47:d2:55:cc:6f:89: 95:e0:b7:a8:ca:5b:73:bb:02:56:8a:26:62:5f:47:1b:09:a6: f0:0c:e7:e9:dc:ad:7a:f9:0b:05:b6:39:a2:8e:22:f0:ad:8f: a1:4f:01:33:9c:24:4a:33:94:11:dd:27:61:25:3a:95:a2:8b: c0:f2:c9:dd:39:57:4d:78:11:d6:06:33:38:e0:8b:ba:0e:54: 8f:e7:b9:62:9c:2b:4b:a1:40:b0:64:80:c7:f9:e9:30:84:d2: 34:f4:38:f1:c8:94:98:44:9d:5e:9e:32:75:06:2c:7b:94:a7: b4:70:94:2c:6a:0a:6f:db:71:ad:e9:6a:76:54:d1:cd:99:80: 7d:5a:46:cf:5f:9a:8a:ce:3f:b5:db:c2:06:ea:ab:7f:b1:93: 4e:bf:0a:0b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYn4OY2wl8buKB5vJT17tlJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE1MDgwNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTE4MmEwMDRmOWViYTUzYjYwOTYwM2JlOGQ4MTdiOGE4MjNmYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknx2tVbsfmJuTozhxZ2OU7aXB21b kRvy+Gi1sL3vKZH95MaKeUq92+nW6pWrD8VJ1L+llukzAlAHgtAU55f6FBvTfn4T tAdCqPVUHcD3jsH2e9aFiFXjq9qKty+R899tk45OByPoPOgH8dbGPdMwREGYDFkE AVXfNKvOcJJPW/gDE1oL9+K+7zS9vc0QCH+X6Kk8qipwcSYkiOq8BGp4lgwcMNbm 9f4VX3Jxysy1KfI+EW7eFPrBVocKALNilx7/fOleX1L1kZCqf8smUS9PniY6fNkO t0Ir6Y+7MKhRCjX9f1seJlaNQQ+tNVUWodIOQE6DFlfxsmpKQJXkalxGqQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHoYKgBPnrpTtglgO+jYF7ioI/psMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvZWhncUFFLWV1bE8yQ1dBNzZOZ1h1S2dqLW13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEB74wQznbcObhY9b3MJ AHBIoFc2LSXcry2AtfLUDJXk7Ck84NWeCkyDlqWNw7gEnL/1nWx++qWjxrHhb2kS SRGVXVPz4kA/IoH4ECKmls5norsBjkeZzlTFB/AhKmwBcYA+oRwRWkfSVcxviZXg t6jKW3O7AlaKJmJfRxsJpvAM5+ncrXr5CwW2OaKOIvCtj6FPATOcJEozlBHdJ2El OpWii8Dyyd05V014EdYGMzjgi7oOVI/nuWKcK0uhQLBkgMf56TCE0jT0OPHIlJhE nV6eMnUGLHuUp7RwlCxqCm/bca3panZU0c2ZgH1aRs9fmorOP7Xbwgbqq3+xk06/ Cgs= -----END CERTIFICATE-----Generated at Sun Dec 21 21:31:53 2025 by rpki-client