This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frNS3yi6h1bNqny1SU6zeuXQXk8.roa File: frNS3yi6h1bNqny1SU6zeuXQXk8.roa (raw, json) Hash identifier: 4+6iCXWLUAQLdVtnkF/NrjS9iHYAGLwlWQpsoev7hQY= Subject key identifier: 7E:B3:52:DF:28:BA:87:56:CD:AA:7C:B5:49:4E:B3:7A:E5:D0:5E:4F Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01867CE8809D9800BB2494026DA2EA60DF54 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frNS3yi6h1bNqny1SU6zeuXQXk8.roa Signing time: Thu 23 Feb 2023 06:14:17 +0000 ROA not before: Thu 23 Feb 2023 06:14:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:7c:e8:80:9d:98:00:bb:24:94:02:6d:a2:ea:60:df:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 23 06:14:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=7eb352df28ba8756cdaa7cb5494eb37ae5d05e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a4:4d:d7:bc:56:a1:b8:cd:db:d5:30:9f:9c: 3c:b0:8f:7a:40:f0:0a:eb:1d:80:89:cc:f2:c1:7d: b2:bc:6e:3d:01:0d:b5:26:12:9a:77:3c:2e:c3:cc: 07:cd:0f:4c:78:e0:db:7c:48:49:c7:11:77:76:7b: c7:87:8d:8f:9c:7e:dc:a0:d8:68:a1:3d:a6:36:10: a4:06:d6:33:54:bc:f0:85:b7:97:b1:e9:22:45:ae: 07:10:f0:fa:28:17:a4:50:7f:90:93:c6:50:61:24: 97:9e:7f:81:1a:32:ed:c4:2b:0a:75:c3:eb:b9:e1: 3f:41:90:ac:0b:7c:41:64:c3:85:14:d6:17:b1:c4: 63:29:77:e5:25:09:97:37:4e:c2:a0:a3:c7:a1:58: 91:a7:d8:12:3e:11:a0:04:c0:a9:a4:74:2b:0a:7e: e7:a4:e5:24:cc:05:e7:1c:fc:be:68:88:d0:52:d9: ee:77:d9:52:0b:fe:31:05:82:b8:fa:7c:70:c9:e8: 0c:b6:d9:de:52:a4:63:7a:7b:c2:fc:9a:09:27:82: fe:24:6d:9d:16:ee:57:bf:c1:08:3b:bd:ec:a1:2a: d8:22:20:f1:96:24:f6:59:22:ad:18:8f:41:c0:2c: 06:ec:f2:f4:f1:22:e0:69:4f:b2:4b:84:d9:ad:e4: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:52:DF:28:BA:87:56:CD:AA:7C:B5:49:4E:B3:7A:E5:D0:5E:4F X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frNS3yi6h1bNqny1SU6zeuXQXk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 0a:4b:cb:22:62:11:84:92:a8:36:da:01:15:10:41:92:d4:f2: d0:07:41:ea:06:93:45:54:9c:26:05:05:87:86:25:93:96:4e: 9c:6b:61:12:51:71:c8:f1:7b:6b:05:dc:12:20:e9:ea:cf:0b: 74:6b:b5:7d:ab:e3:5a:70:5e:20:07:94:fc:6e:31:dd:f7:cf: 83:28:8c:c4:95:06:63:00:cf:b1:3c:c2:d2:5a:53:7f:d6:6a: 15:14:78:c2:ae:61:d4:29:b2:48:1e:1a:72:cc:47:de:1e:e3: 28:87:15:63:bf:c2:ee:fc:23:b2:fd:5b:54:3d:ed:87:3e:67: 91:ba:20:4d:83:e0:80:6b:10:58:8c:be:7d:18:89:e3:a2:bf: 27:12:d0:c7:de:c7:b5:58:83:2a:25:1d:55:c7:ce:96:19:ac: 99:de:c5:2f:28:f3:d7:f1:7f:f0:0b:33:82:32:b7:de:ce:56: 81:b6:15:da:1c:9f:70:ae:bf:56:64:56:31:d3:1e:1e:63:ac: c4:cd:8a:76:9f:fc:bd:92:66:68:fc:2e:4f:ad:95:26:8d:2e: 03:34:2f:61:c6:a3:6c:38:a0:66:b1:86:5c:58:5e:3a:f0:a7: 85:1e:ba:63:5c:6f:95:c4:d8:1f:4d:f0:9b:a7:9c:aa:86:c8: 4e:0c:5e:b9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZ86ICdmAC7JJQCbaLqYN9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjIzMDYxNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWIzNTJkZjI4YmE4NzU2Y2RhYTdjYjU0OTRlYjM3YWU1ZDA1ZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKRN17xWobjN29Uwn5w8sI96QPAK 6x2AiczywX2yvG49AQ21JhKadzwuw8wHzQ9MeODbfEhJxxF3dnvHh42PnH7coNho oT2mNhCkBtYzVLzwhbeXsekiRa4HEPD6KBekUH+Qk8ZQYSSXnn+BGjLtxCsKdcPr ueE/QZCsC3xBZMOFFNYXscRjKXflJQmXN07CoKPHoViRp9gSPhGgBMCppHQrCn7n pOUkzAXnHPy+aIjQUtnud9lSC/4xBYK4+nxwyegMttneUqRjenvC/JoJJ4L+JG2d Fu5Xv8EIO73soSrYIiDxliT2WSKtGI9BwCwG7PL08SLgaU+yS4TZreTUXQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFH6zUt8ouodWzap8tUlOs3rl0F5PMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvZnJOUzN5aTZoMWJOcW55MVNVNnpldVhRWGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAApLyyJiEYSSqDbaARUQ QZLU8tAHQeoGk0VUnCYFBYeGJZOWTpxrYRJRccjxe2sF3BIg6erPC3RrtX2r41pw XiAHlPxuMd33z4MojMSVBmMAz7E8wtJaU3/WahUUeMKuYdQpskgeGnLMR94e4yiH FWO/wu78I7L9W1Q97Yc+Z5G6IE2D4IBrEFiMvn0YieOivycS0Mfex7VYgyolHVXH zpYZrJnexS8o89fxf/ALM4Iyt97OVoG2Fdocn3Cuv1ZkVjHTHh5jrMTNinaf/L2S Zmj8Lk+tlSaNLgM0L2HGo2w4oGaxhlxYXjrwp4UeumNcb5XE2B9N8JunnKqGyE4M Xrk= -----END CERTIFICATE-----Generated at Tue Dec 23 06:53:52 2025 by rpki-client