This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iWBjr64ieaOSqsLw_W857j8Ojtg.roa File: iWBjr64ieaOSqsLw_W857j8Ojtg.roa (raw, json) Hash identifier: D1eYos76TgeEdBuI8LHMnVkolxQDywxyNduueK/mVcc= Subject key identifier: 89:60:63:AF:AE:22:79:A3:92:AA:C2:F0:FD:6F:39:EE:3F:0E:8E:D8 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01867D2059BB7FADB653828386257C73DC4B Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iWBjr64ieaOSqsLw_W857j8Ojtg.roa Signing time: Thu 23 Feb 2023 07:15:17 +0000 ROA not before: Thu 23 Feb 2023 07:15:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:7d:20:59:bb:7f:ad:b6:53:82:83:86:25:7c:73:dc:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 23 07:15:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=896063afae2279a392aac2f0fd6f39ee3f0e8ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:72:b1:0f:35:db:08:cc:79:9e:99:59:66: e5:cb:fb:18:53:bb:90:b3:ff:f3:7b:4f:69:14:c1: c7:46:57:57:19:d4:00:91:fb:82:eb:a7:c5:24:c3: 85:ad:18:ce:53:33:13:ec:fe:06:99:79:a6:b4:b2: f0:f1:da:f5:22:5c:67:06:b1:cf:da:9d:8a:0d:ae: 46:1f:c3:9c:62:02:fb:ef:2e:21:cf:cc:2f:ca:0b: fc:8c:f0:28:c6:69:c2:fc:a2:0e:90:d0:47:b2:9c: 9f:68:c3:43:50:91:b7:b3:1c:ef:af:77:24:48:dd: f2:d5:e4:d5:1c:b4:bd:c2:25:ee:5e:cb:7e:8f:39: fb:60:f9:bf:6a:6e:f5:62:58:7a:97:f1:91:ae:dc: 13:2f:65:59:78:c4:cf:a0:5d:fd:20:bd:86:b7:8b: 69:d5:4a:64:a1:73:43:1e:56:51:56:61:f5:39:d1: 3d:bd:f9:8e:8b:1e:58:cc:0b:d9:dc:d2:27:f0:b4: 05:c6:70:6e:34:f1:35:26:f1:5b:db:12:29:29:12: 4f:49:ae:8b:e1:3e:a9:3a:43:0c:36:b7:e0:71:7e: c3:9e:d6:43:ef:79:96:a5:dc:29:5e:09:96:b3:90: ef:6b:17:43:b8:c6:ed:1c:a8:49:8e:b5:7c:62:c6: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:60:63:AF:AE:22:79:A3:92:AA:C2:F0:FD:6F:39:EE:3F:0E:8E:D8 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iWBjr64ieaOSqsLw_W857j8Ojtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption ae:d3:1c:2f:da:fe:3b:05:a4:3a:62:c5:51:97:7d:ad:8e:34: 79:b4:ab:a8:df:84:de:79:da:f4:3c:ed:e9:af:3b:98:f6:d4: 6a:68:03:f2:9a:54:80:4a:53:cf:6a:ca:0c:89:5b:41:29:79: 9d:f3:75:13:df:c0:f6:d7:a2:b9:e6:ed:8d:cf:d8:5a:0b:a4: 1c:ea:38:ca:30:99:fe:35:6f:43:7b:24:a4:73:f2:0a:a6:0f: 50:28:ff:91:f5:d0:83:71:ae:a6:b7:b1:a7:19:c3:2f:7b:2d: 9f:37:db:ad:12:8b:2e:d1:5f:f2:b6:76:2f:07:bc:e2:a8:2e: a3:4a:07:cb:3c:17:5a:2e:b6:68:ee:9c:f6:fc:d0:ac:0c:4e: 4b:8f:55:92:7f:ba:0a:5a:e0:41:45:59:6a:cd:35:29:33:19: 6b:24:b8:b0:56:aa:19:d1:7d:22:12:54:6a:9a:33:53:d7:e6: 4f:aa:86:a2:07:c8:0a:ec:18:77:d3:65:30:42:c6:30:87:41: 03:c8:7b:82:25:c0:63:6e:31:fd:75:37:92:c0:02:8c:fa:61: 14:dc:27:de:aa:07:f5:42:af:ed:f4:55:c6:a3:f9:a8:49:cd: 05:e5:0f:a2:9b:c2:52:4a:c3:a8:9c:5e:9f:a2:84:a1:ed:d6: 7e:07:45:72 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZ9IFm7f622U4KDhiV8c9xLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjIzMDcxNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTYwNjNhZmFlMjI3OWEzOTJhYWMyZjBmZDZmMzllZTNmMGU4ZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW5ysQ812wjMeZ6ZWWbly/sYU7uQ s//ze09pFMHHRldXGdQAkfuC66fFJMOFrRjOUzMT7P4GmXmmtLLw8dr1IlxnBrHP 2p2KDa5GH8OcYgL77y4hz8wvygv8jPAoxmnC/KIOkNBHspyfaMNDUJG3sxzvr3ck SN3y1eTVHLS9wiXuXst+jzn7YPm/am71Ylh6l/GRrtwTL2VZeMTPoF39IL2Gt4tp 1UpkoXNDHlZRVmH1OdE9vfmOix5YzAvZ3NIn8LQFxnBuNPE1JvFb2xIpKRJPSa6L 4T6pOkMMNrfgcX7DntZD73mWpdwpXgmWs5DvaxdDuMbtHKhJjrV8YsbzaQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIlgY6+uInmjkqrC8P1vOe4/Do7YMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvaVdCanI2NGllYU9TcXNMd19XODU3ajhPanRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK7THC/a/jsFpDpixVGX fa2ONHm0q6jfhN552vQ87emvO5j21GpoA/KaVIBKU89qygyJW0EpeZ3zdRPfwPbX ornm7Y3P2FoLpBzqOMowmf41b0N7JKRz8gqmD1Ao/5H10INxrqa3sacZwy97LZ83 260Siy7RX/K2di8HvOKoLqNKB8s8F1outmjunPb80KwMTkuPVZJ/ugpa4EFFWWrN NSkzGWskuLBWqhnRfSISVGqaM1PX5k+qhqIHyArsGHfTZTBCxjCHQQPIe4IlwGNu Mf11N5LAAoz6YRTcJ96qB/VCr+30Vcaj+ahJzQXlD6KbwlJKw6icXp+ihKHt1n4H RXI= -----END CERTIFICATE-----Generated at Sat Dec 20 14:00:01 2025 by rpki-client