This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf1ZRBsw9TQ_y8Gky3i7OONTfwc.roa File: lf1ZRBsw9TQ_y8Gky3i7OONTfwc.roa (raw, json) Hash identifier: oDMEEnyC31m/9JO5L+ROy1cwwbA1TKXBuu0RmPF6E9s= Subject key identifier: 95:FD:59:44:1B:30:F5:34:3F:CB:C1:A4:CB:78:BB:38:E3:53:7F:07 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0187FC8E7D8AC543378D26861EC9CF2CCE64 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf1ZRBsw9TQ_y8Gky3i7OONTfwc.roa Signing time: Mon 08 May 2023 18:10:09 +0000 ROA not before: Mon 08 May 2023 18:10:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:87:fc:8e:7d:8a:c5:43:37:8d:26:86:1e:c9:cf:2c:ce:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: May 8 18:10:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=95fd59441b30f5343fcbc1a4cb78bb38e3537f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:41:02:f7:97:02:a9:f7:95:86:21:39:c0: fc:e8:25:18:ed:3b:bb:49:7c:bd:51:f3:7e:76:a1: f8:64:a7:e2:73:05:95:58:db:71:34:98:eb:4d:f0: ce:d4:bf:1c:17:2a:32:c1:cf:60:9e:e4:20:89:cb: 6f:15:92:e9:ad:9a:ec:d1:b8:10:a5:f5:ef:a9:e9: 6c:be:37:22:49:9c:23:f5:ac:af:79:d4:42:62:24: dd:aa:a8:ee:da:f2:47:ce:dc:34:14:f1:59:8d:14: 25:13:f1:74:9f:1f:70:d3:fd:7d:0c:48:d3:bc:ae: f0:67:22:f1:d4:7d:4d:c0:b3:12:ac:f6:80:e1:00: f9:ef:4d:f5:ed:17:2e:2c:64:bb:8b:f0:3d:70:43: 79:f2:69:65:63:29:c7:8d:8a:bb:68:76:24:4b:41: 99:88:86:26:2d:d3:15:a8:b2:05:0f:9b:52:29:90: 28:16:c5:89:3b:80:7a:5e:10:1c:96:a0:a5:f1:97: f0:e1:43:4b:7a:65:5b:01:06:11:c4:79:25:35:32: e5:79:ac:9f:84:ab:72:11:a4:64:e0:90:6c:13:ac: 52:4c:b1:ad:d6:a5:e4:c8:14:f2:42:19:0a:10:bf: b2:f8:4a:c8:47:cd:97:2f:b1:96:b2:61:b8:b7:38: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FD:59:44:1B:30:F5:34:3F:CB:C1:A4:CB:78:BB:38:E3:53:7F:07 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf1ZRBsw9TQ_y8Gky3i7OONTfwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 01:d7:42:f2:f8:67:8c:33:0e:3e:83:6b:53:2d:30:9a:0a:38: 9c:d7:47:e4:14:d9:17:e3:45:27:18:a6:d9:00:e3:de:c6:20: 00:92:d8:8f:25:ef:8f:d1:12:68:cd:23:fe:86:74:d6:43:af: a5:a0:af:99:e8:36:72:d3:a5:ea:4c:4c:6a:a5:d3:83:12:d3: d4:16:6f:7b:b8:47:fa:35:3d:0c:ae:db:ef:15:37:d9:07:9f: 52:68:00:a3:f5:b1:5a:09:4b:c9:f3:10:97:db:59:6b:f7:37: 60:e4:9e:b9:ca:c4:49:b0:d6:a4:5f:68:0d:7b:c8:1a:a1:14: b7:4f:58:e1:db:77:9d:37:ab:77:07:28:1a:c0:6e:bd:85:5e: 1a:8c:59:35:70:3b:28:9f:e1:77:e1:f8:c6:b3:eb:4b:49:a0: fd:24:a3:ab:12:96:a3:43:55:54:b5:33:8d:f6:e9:84:24:48: ac:06:c0:2e:bb:43:97:2b:11:2e:3d:28:e0:b4:c9:85:de:7c: 9e:31:ca:94:79:7b:11:1b:eb:25:35:de:ef:60:5c:2c:c9:e4: 4c:d4:f1:37:5e:a6:47:e6:a6:fd:11:42:76:cc:ca:43:5f:36: 78:37:05:16:eb:56:2a:84:2c:6f:6e:cc:7c:a3:1d:62:7d:d7: 67:6d:b0:98 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYf8jn2KxUM3jSaGHsnPLM5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNTA4MTgxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWZkNTk0NDFiMzBmNTM0M2ZjYmMxYTRjYjc4YmIzOGUzNTM3ZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2lBAveXAqn3lYYhOcD86CUY7Tu7 SXy9UfN+dqH4ZKficwWVWNtxNJjrTfDO1L8cFyoywc9gnuQgictvFZLprZrs0bgQ pfXvqelsvjciSZwj9ayvedRCYiTdqqju2vJHztw0FPFZjRQlE/F0nx9w0/19DEjT vK7wZyLx1H1NwLMSrPaA4QD570317RcuLGS7i/A9cEN58mllYynHjYq7aHYkS0GZ iIYmLdMVqLIFD5tSKZAoFsWJO4B6XhAclqCl8Zfw4UNLemVbAQYRxHklNTLleayf hKtyEaRk4JBsE6xSTLGt1qXkyBTyQhkKEL+y+ErIR82XL7GWsmG4tzjXQwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJX9WUQbMPU0P8vBpMt4uzjjU38HMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvbGYxWlJCc3c5VFFfeThHa3kzaTdPT05UZndjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAHXQvL4Z4wzDj6Da1Mt MJoKOJzXR+QU2RfjRScYptkA497GIACS2I8l74/REmjNI/6GdNZDr6Wgr5noNnLT pepMTGql04MS09QWb3u4R/o1PQyu2+8VN9kHn1JoAKP1sVoJS8nzEJfbWWv3N2Dk nrnKxEmw1qRfaA17yBqhFLdPWOHbd503q3cHKBrAbr2FXhqMWTVwOyif4Xfh+Maz 60tJoP0ko6sSlqNDVVS1M4326YQkSKwGwC67Q5crES49KOC0yYXefJ4xypR5exEb 6yU13u9gXCzJ5EzU8Tdepkfmpv0RQnbMykNfNng3BRbrViqELG9uzHyjHWJ912dt sJg= -----END CERTIFICATE-----Generated at Tue Dec 23 18:57:28 2025 by rpki-client