This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gfIo_GMcexGa6qoxdG74ytdlU_Q.roa File: gfIo_GMcexGa6qoxdG74ytdlU_Q.roa (raw, json) Hash identifier: 5lREZH06ACNnSYneBRCTNude85beU2TCmEdJBhBA4Wc= Subject key identifier: 81:F2:28:FC:63:1C:7B:11:9A:EA:AA:31:74:6E:F8:CA:D7:65:53:F4 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0185B9DAE44B11421F689CC947D2FDCA7254 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gfIo_GMcexGa6qoxdG74ytdlU_Q.roa Signing time: Mon 16 Jan 2023 09:13:28 +0000 ROA not before: Mon 16 Jan 2023 09:13:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:b9:da:e4:4b:11:42:1f:68:9c:c9:47:d2:fd:ca:72:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jan 16 09:13:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=81f228fc631c7b119aeaaa31746ef8cad76553f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f7:5c:4f:ed:5c:8c:8b:43:35:3b:df:70:47: d9:fc:f8:8e:07:3a:79:6d:19:5a:fe:05:4a:fa:3f: d1:8e:c6:23:a0:4a:1d:39:55:10:a5:f5:3a:64:9e: 64:bd:5c:6b:a2:2c:51:32:90:da:0a:73:b7:c1:6d: 94:82:db:f3:b5:fc:b1:58:4d:d4:68:b0:92:a1:10: 1b:48:df:9a:95:15:e5:05:96:e3:02:54:6e:ca:f0: 7d:3a:fb:d8:a9:c4:1d:75:f5:33:eb:0b:76:dc:42: 26:4f:ca:39:fa:6e:66:1a:0a:c8:06:ef:8d:0c:ba: a5:6c:8d:ac:b7:39:8f:73:8e:57:17:f4:1a:9d:c2: a9:dd:bf:52:ac:62:1f:93:62:ff:0f:ba:33:c0:a0: 77:44:fc:b1:d6:66:c5:f5:67:ce:77:e6:6a:7a:0a: a3:ec:d2:db:99:d7:4f:17:94:9b:24:31:8b:4a:95: 93:c5:79:3f:c4:5b:84:a0:17:b2:b9:e5:0b:10:16: b7:18:04:fb:9a:8a:79:da:19:c9:04:70:fd:ca:82: aa:a4:5a:34:18:9d:f2:87:ad:e3:cd:3d:80:ac:7b: 77:f9:ba:45:b1:44:14:9a:7b:49:7a:78:bd:6c:da: bf:3c:1e:c6:a0:3b:21:5c:6c:53:56:9b:fd:cf:46: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F2:28:FC:63:1C:7B:11:9A:EA:AA:31:74:6E:F8:CA:D7:65:53:F4 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gfIo_GMcexGa6qoxdG74ytdlU_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 8e:e3:67:40:a9:2e:e5:63:14:ed:b0:fb:3a:23:af:63:88:87: 21:20:a5:d3:ad:84:fe:39:99:c9:b3:e3:7b:21:4f:76:e9:2a: ee:c2:76:74:d9:47:8d:5c:d4:d4:8a:a1:2e:dc:c3:b2:59:f5: ba:34:44:24:4e:28:76:aa:a6:88:34:b8:75:91:b5:ab:fa:98: 01:db:65:24:30:f0:32:1d:82:7d:b3:30:2d:b5:ec:56:69:2f: 19:45:49:98:54:ee:31:1f:6c:af:ae:c1:0f:1f:06:af:0e:b7: d2:9c:93:8f:a5:68:fb:72:13:8a:13:60:1e:02:d0:a0:8d:68: c1:ed:51:07:47:9c:9e:67:2e:34:51:6f:6c:f5:d4:fe:cb:57: 15:c8:2e:11:6b:b4:6e:cf:dc:6b:40:56:34:a2:0c:96:98:45: c7:b7:27:e9:3c:1a:0c:2f:18:1f:cc:d7:ab:23:3c:54:61:1c: 7c:f8:16:a0:80:d0:e0:d3:42:ed:6b:14:80:79:75:d3:bc:51: 06:7a:c5:d9:44:0e:b0:1a:22:89:60:68:5c:fc:50:6c:d4:90: 45:d8:48:bd:46:c3:4c:ca:a5:96:af:06:9d:a2:3c:26:34:af: 0a:29:2c:c5:e2:e0:23:07:a1:ec:36:5a:ea:67:1a:a4:8e:26: 0e:fa:0b:4a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYW52uRLEUIfaJzJR9L9ynJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMTE2MDkxMzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWYyMjhmYzYzMWM3YjExOWFlYWFhMzE3NDZlZjhjYWQ3NjU1M2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PdcT+1cjItDNTvfcEfZ/PiOBzp5 bRla/gVK+j/RjsYjoEodOVUQpfU6ZJ5kvVxroixRMpDaCnO3wW2UgtvztfyxWE3U aLCSoRAbSN+alRXlBZbjAlRuyvB9OvvYqcQddfUz6wt23EImT8o5+m5mGgrIBu+N DLqlbI2stzmPc45XF/QancKp3b9SrGIfk2L/D7ozwKB3RPyx1mbF9WfOd+Zqegqj 7NLbmddPF5SbJDGLSpWTxXk/xFuEoBeyueULEBa3GAT7mop52hnJBHD9yoKqpFo0 GJ3yh63jzT2ArHt3+bpFsUQUmntJeni9bNq/PB7GoDshXGxTVpv9z0aXxwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIHyKPxjHHsRmuqqMXRu+MrXZVP0MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvZ2ZJb19HTWNleEdhNnFveGRHNzR5dGRsVV9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI7jZ0CpLuVjFO2w+zoj r2OIhyEgpdOthP45mcmz43shT3bpKu7CdnTZR41c1NSKoS7cw7JZ9bo0RCROKHaq pog0uHWRtav6mAHbZSQw8DIdgn2zMC217FZpLxlFSZhU7jEfbK+uwQ8fBq8Ot9Kc k4+laPtyE4oTYB4C0KCNaMHtUQdHnJ5nLjRRb2z11P7LVxXILhFrtG7P3GtAVjSi DJaYRce3J+k8GgwvGB/M16sjPFRhHHz4FqCA0ODTQu1rFIB5ddO8UQZ6xdlEDrAa IolgaFz8UGzUkEXYSL1Gw0zKpZavBp2iPCY0rwopLMXi4CMHoew2WupnGqSOJg76 C0o= -----END CERTIFICATE-----Generated at Sat Dec 20 07:39:10 2025 by rpki-client