This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gXbuU3pUkqqQy-G_RFepKKNiTFM.roa File: gXbuU3pUkqqQy-G_RFepKKNiTFM.roa (raw, json) Hash identifier: IEzE2QnLPcC91usqPPqH7casSZNj7Jpo9YUKerDcmjk= Subject key identifier: 81:76:EE:53:7A:54:92:AA:90:CB:E1:BF:44:57:A9:28:A3:62:4C:53 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0182918B9C70E7762C2A9ED01FF3FE8C99DF Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gXbuU3pUkqqQy-G_RFepKKNiTFM.roa Signing time: Fri 12 Aug 2022 10:13:41 +0000 ROA not before: Fri 12 Aug 2022 10:13:41 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128 2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:82:91:8b:9c:70:e7:76:2c:2a:9e:d0:1f:f3:fe:8c:99:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 12 10:13:41 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=8176ee537a5492aa90cbe1bf4457a928a3624c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:8b:43:7a:da:f0:25:07:91:c6:45:29:2e: 18:e9:fc:78:46:0e:d2:76:ca:0f:68:03:c7:72:fe: 2c:05:1b:d9:5d:40:34:88:13:29:ac:8c:13:28:4f: fd:8e:6b:fc:25:b9:3a:e6:9f:90:1b:31:89:f2:6d: b0:ba:e6:cc:e0:71:8b:1b:4d:52:c3:eb:95:3b:df: 34:1d:be:6e:83:22:9b:d3:ef:2f:00:74:cb:f6:5a: 3f:57:5d:cb:a2:40:e3:71:bf:a5:7a:a3:4f:41:52: 83:79:e3:3d:0b:e6:33:5e:50:e5:08:48:75:7c:70: 39:a5:f8:4a:27:2f:c4:80:65:b7:92:7d:18:37:ac: 60:24:aa:52:d6:77:eb:6e:31:18:e7:17:70:f3:25: 12:fb:a6:a2:ae:1a:8d:8c:c2:6e:dc:79:0b:15:50: 0c:ec:2b:f3:6b:44:5d:ea:f7:f5:69:69:02:0a:c2: b4:db:ae:89:e3:29:fd:39:55:8d:ac:29:79:80:a0: 4e:e5:86:0e:e4:c5:c5:20:10:5b:34:52:b3:94:67: fe:dc:ef:d4:7a:e3:13:bf:52:be:9e:3d:bf:96:de: d9:a6:4d:7f:38:c4:1a:50:c5:17:81:de:e5:a1:1a: 06:8c:cf:44:e7:1a:6b:0a:c5:23:66:54:21:4f:13: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:76:EE:53:7A:54:92:AA:90:CB:E1:BF:44:57:A9:28:A3:62:4C:53 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gXbuU3pUkqqQy-G_RFepKKNiTFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 4c:41:7e:42:f7:fe:d7:76:06:62:09:c9:a6:ad:bc:f7:d6:ec: 17:d2:fc:de:bb:10:71:99:d2:9b:cf:61:51:d5:fd:d9:a7:a8: af:ed:2c:f0:c8:00:d7:fe:69:28:92:66:b6:51:23:58:2d:9c: 7a:eb:b5:e5:24:29:1e:ce:4b:67:f7:20:10:c2:0b:92:3b:ce: 2c:79:c8:c3:06:9d:bb:d1:c1:8d:57:a7:b4:f0:e0:bd:fc:d4: 67:a5:7c:b9:7a:b2:9e:0a:f3:d7:1c:50:80:09:b0:2f:d0:35: a9:32:45:32:69:e5:d7:54:cc:eb:d6:57:c7:ac:2c:ce:54:c9: d6:84:c6:e6:d5:ca:e0:b1:0b:68:b4:ea:ee:7f:96:e0:f6:ec: 2b:d6:8a:ba:06:d6:93:32:ef:91:1a:8f:c2:10:d4:45:d4:ed: ad:34:69:f7:10:2c:6b:c8:cc:d1:5c:f0:92:f9:ea:7e:44:af: a8:24:58:1f:f9:a7:b0:03:58:c0:ac:c0:1d:16:b9:ff:a7:2f: 61:f4:e3:9b:9b:e8:10:94:97:10:7a:5d:46:12:78:ef:74:1b: 82:cd:aa:a8:16:3f:be:74:c1:22:d1:7a:94:67:7f:14:45:2a: 1f:26:10:3e:0b:cc:52:04:08:58:93:2c:20:51:4d:d9:a7:80: 0d:5e:44:e7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYKRi5xw53YsKp7QH/P+jJnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIwODEyMTAxMzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTc2ZWU1MzdhNTQ5MmFhOTBjYmUxYmY0NDU3YTkyOGEzNjI0YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfSLQ3ra8CUHkcZFKS4Y6fx4Rg7S dsoPaAPHcv4sBRvZXUA0iBMprIwTKE/9jmv8Jbk65p+QGzGJ8m2wuubM4HGLG01S w+uVO980Hb5ugyKb0+8vAHTL9lo/V13LokDjcb+leqNPQVKDeeM9C+YzXlDlCEh1 fHA5pfhKJy/EgGW3kn0YN6xgJKpS1nfrbjEY5xdw8yUS+6airhqNjMJu3HkLFVAM 7Cvza0Rd6vf1aWkCCsK0266J4yn9OVWNrCl5gKBO5YYO5MXFIBBbNFKzlGf+3O/U euMTv1K+nj2/lt7Zpk1/OMQaUMUXgd7loRoGjM9E5xprCsUjZlQhTxNjjQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIF27lN6VJKqkMvhv0RXqSijYkxTMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvZ1hidVUzcFVrcXFReS1HX1JGZXBLS05pVEZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAExBfkL3/td2BmIJyaat vPfW7BfS/N67EHGZ0pvPYVHV/dmnqK/tLPDIANf+aSiSZrZRI1gtnHrrteUkKR7O S2f3IBDCC5I7zix5yMMGnbvRwY1Xp7Tw4L381GelfLl6sp4K89ccUIAJsC/QNaky RTJp5ddUzOvWV8esLM5UydaExubVyuCxC2i06u5/luD27CvWiroG1pMy75Eaj8IQ 1EXU7a00afcQLGvIzNFc8JL56n5Er6gkWB/5p7ADWMCswB0Wuf+nL2H045ub6BCU lxB6XUYSeO90G4LNqqgWP750wSLRepRnfxRFKh8mED4LzFIECFiTLCBRTdmngA1e ROc= -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:34 2025 by rpki-client