This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jM9W34KSA-CkcrzqbKSF3h_T7OU.roa File: jM9W34KSA-CkcrzqbKSF3h_T7OU.roa (raw, json) Hash identifier: VWVCCVv5lzLILyBBA+ttH3rN31Fekv8Y+8Fach7rGt8= Subject key identifier: 8C:CF:56:DF:82:92:03:E0:A4:72:BC:EA:6C:A4:85:DE:1F:D3:EC:E5 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0186BFD2AD5D767B26D1ED98809BBC274B10 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jM9W34KSA-CkcrzqbKSF3h_T7OU.roa Signing time: Wed 08 Mar 2023 06:05:00 +0000 ROA not before: Wed 08 Mar 2023 06:05:00 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:bfd1:f637/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:bf:d2:ad:5d:76:7b:26:d1:ed:98:80:9b:bc:27:4b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Mar 8 06:05:00 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=8ccf56df829203e0a472bcea6ca485de1fd3ece5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:34:db:df:07:73:6a:b6:4c:a3:da:5e:7e: b3:b0:ef:52:3c:0c:3c:8e:bf:56:e9:55:0e:44:ce: b2:5e:f7:74:be:83:00:82:ce:df:4b:9b:48:7d:8e: 41:93:6c:91:86:3f:2d:68:bf:e5:c8:08:35:32:89: f9:f3:29:2c:93:02:c4:a5:93:e9:3a:0d:f4:35:f6: 12:0a:65:ac:a8:27:43:03:b6:e4:8e:fb:6a:5b:88: d5:9d:82:76:db:c3:7c:01:60:ab:b7:74:14:32:c8: c3:a8:e7:6a:bd:10:7e:46:f3:bf:fe:1a:85:d9:c4: 97:c8:95:5a:44:ea:4f:63:62:06:95:a2:ec:c9:fa: 34:54:4b:70:f1:4a:88:88:6f:3b:a9:c8:6a:d7:e9: 21:25:31:b5:d0:29:86:d1:b5:d2:33:a7:0e:82:74: 78:05:46:85:6b:d1:93:fb:a7:5b:7e:0a:c6:57:3e: aa:33:a0:62:13:97:5f:55:69:8d:69:af:c1:9d:9d: 2e:0d:db:cf:c3:53:61:61:60:73:7a:19:ea:f4:03: cf:01:cc:72:83:d1:54:1b:33:a8:c9:29:f5:b0:43: a3:2e:97:cc:bc:c3:36:ca:1c:b3:cb:3f:89:74:cb: 50:db:96:36:55:08:61:c5:8d:36:e2:74:aa:ef:86: bd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CF:56:DF:82:92:03:E0:A4:72:BC:EA:6C:A4:85:DE:1F:D3:EC:E5 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jM9W34KSA-CkcrzqbKSF3h_T7OU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 79:ba:47:21:58:ca:ba:ae:01:bb:b4:39:db:63:da:8e:ce:c3: e6:bc:e5:28:6e:ef:33:15:8f:73:5f:aa:d9:79:4d:20:b5:67: cf:49:85:79:91:f4:9b:4c:92:54:7b:d2:d2:4a:b7:31:8c:57: 8d:27:99:e2:b0:ad:d6:ce:03:3d:4e:42:c3:f4:14:3b:56:b7: c4:f9:5d:57:8e:9a:77:fa:d5:ef:a2:53:9e:24:bf:26:26:3a: 1e:36:4f:8d:a5:30:87:d6:fc:9e:bd:6b:6d:62:1b:78:f4:94: b6:79:33:d8:32:44:4c:ef:31:45:98:8a:98:b2:61:aa:76:42: 3d:19:c7:d4:e4:4a:18:40:0e:67:df:1d:9c:c4:1c:49:a9:ae: 09:b6:06:f4:3e:ae:75:bf:de:ad:3e:e3:02:3f:16:55:e6:29: cc:77:53:ba:41:1f:da:d0:73:37:70:fb:77:3a:df:73:2a:bc: 6e:26:52:e3:00:6d:ff:d8:cc:ce:57:de:27:b7:5c:80:24:aa: 68:ff:25:50:92:89:fc:18:46:68:9f:95:53:da:9e:40:bd:1a: 3c:65:50:dd:9e:88:58:39:cd:58:33:77:1d:2f:c4:a2:f5:5b: bc:fc:a1:4d:09:4e:50:60:79:16:59:a8:05:26:01:4c:d0:9e: 94:e2:1d:06 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYa/0q1ddnsm0e2YgJu8J0sQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMzA4MDYwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2NmNTZkZjgyOTIwM2UwYTQ3MmJjZWE2Y2E0ODVkZTFmZDNlY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH40298Hc2q2TKPaXn6zsO9SPAw8 jr9W6VUORM6yXvd0voMAgs7fS5tIfY5Bk2yRhj8taL/lyAg1Mon58ykskwLEpZPp Og30NfYSCmWsqCdDA7bkjvtqW4jVnYJ228N8AWCrt3QUMsjDqOdqvRB+RvO//hqF 2cSXyJVaROpPY2IGlaLsyfo0VEtw8UqIiG87qchq1+khJTG10CmG0bXSM6cOgnR4 BUaFa9GT+6dbfgrGVz6qM6BiE5dfVWmNaa/BnZ0uDdvPw1NhYWBzehnq9APPAcxy g9FUGzOoySn1sEOjLpfMvMM2yhyzyz+JdMtQ25Y2VQhhxY024nSq74a9zQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIzPVt+CkgPgpHK86mykhd4f0+zlMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvak05VzM0S1NBLUNrY3J6cWJLU0YzaF9UN09VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHm6RyFYyrquAbu0Odtj 2o7Ow+a85Shu7zMVj3Nfqtl5TSC1Z89JhXmR9JtMklR70tJKtzGMV40nmeKwrdbO Az1OQsP0FDtWt8T5XVeOmnf61e+iU54kvyYmOh42T42lMIfW/J69a21iG3j0lLZ5 M9gyREzvMUWYipiyYap2Qj0Zx9TkShhADmffHZzEHEmprgm2BvQ+rnW/3q0+4wI/ FlXmKcx3U7pBH9rQczdw+3c633MqvG4mUuMAbf/YzM5X3ie3XIAkqmj/JVCSifwY RmiflVPankC9GjxlUN2eiFg5zVgzdx0vxKL1W7z8oU0JTlBgeRZZqAUmAUzQnpTi HQY= -----END CERTIFICATE-----Generated at Sat Dec 20 09:10:01 2025 by rpki-client