This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mX7QRNUItPbYjJhhesTa76VcC3c.roa File: mX7QRNUItPbYjJhhesTa76VcC3c.roa (raw, json) Hash identifier: Zcu/GEdHI7jmDKO+sXWHWm+RLkPMBNkhnxoF8VLJggA= Subject key identifier: 99:7E:D0:44:D5:08:B4:F6:D8:8C:98:61:7A:C4:DA:EF:A5:5C:0B:77 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01849DF9FB3958ECF79A02997D0FE7B083C8 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mX7QRNUItPbYjJhhesTa76VcC3c.roa Signing time: Tue 22 Nov 2022 06:15:16 +0000 ROA not before: Tue 22 Nov 2022 06:15:16 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:84:9d:f9:fb:39:58:ec:f7:9a:02:99:7d:0f:e7:b0:83:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Nov 22 06:15:16 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=997ed044d508b4f6d88c98617ac4daefa55c0b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:20:58:82:84:77:13:e3:d7:dd:1f:42:73:49: bc:98:90:b8:04:3b:60:25:3e:f0:72:75:29:2d:82: 7d:88:b3:2b:c0:2d:74:b1:d3:55:46:9d:46:57:65: b8:bd:05:8e:cb:63:ba:58:59:3e:ac:dd:e6:11:cd: c9:5c:8a:a2:12:8e:b5:3d:68:c9:fc:fd:7f:36:b1: 19:6e:82:78:c1:19:ab:cc:ec:87:e0:d0:23:05:5a: 1c:ba:90:55:63:59:6a:6b:d8:9f:bd:0a:95:af:82: 80:89:67:33:a4:b5:9f:68:57:01:e8:b5:7e:5b:6f: b2:46:68:a3:d8:47:c2:82:f4:b6:d8:0a:75:01:6e: ed:82:b1:3b:89:67:79:c5:8c:01:dd:d1:ed:f4:41: 66:b7:46:77:28:c2:db:da:f9:35:a1:d8:40:41:2f: 5b:6c:88:37:b3:1f:31:51:bf:20:37:52:99:07:7b: 34:96:c8:5b:8d:44:9e:b7:18:51:db:01:4f:bb:de: 22:61:74:43:d6:25:95:ec:8a:b2:63:37:2d:eb:89: 4e:a8:68:36:d6:c7:72:1d:09:c0:81:62:21:5e:63: 50:5e:20:38:48:97:16:13:20:b5:ef:57:e7:a8:26: ad:c0:4e:0a:bb:ed:dd:d3:2c:39:b8:14:c4:cf:bd: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7E:D0:44:D5:08:B4:F6:D8:8C:98:61:7A:C4:DA:EF:A5:5C:0B:77 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mX7QRNUItPbYjJhhesTa76VcC3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 99:ac:a9:80:82:d6:ba:1c:e2:69:f5:f5:f8:07:31:bb:47:24: 03:63:28:b0:2e:f2:c8:09:6b:0b:00:37:29:ef:60:53:d3:0d: 00:15:7f:6c:55:c9:d7:81:40:42:00:a6:3f:19:27:37:a9:00: 81:42:bf:9b:df:2a:58:68:c7:67:8a:ff:2d:7a:ef:d9:88:49: bb:76:82:25:e9:f9:58:48:7c:71:c9:f3:a2:67:bc:b2:8c:9b: 40:92:2e:6f:8e:3a:31:45:ec:88:93:49:21:15:da:e7:74:c6: b0:70:4b:1f:51:05:db:64:95:50:8d:04:6e:3b:11:49:9f:bd: d5:f8:78:51:3d:0a:7b:89:16:56:c9:59:6e:32:39:16:42:23: f4:37:57:fe:4f:27:45:64:cf:0a:eb:1d:38:7a:64:51:8f:93: 2d:b3:16:f5:d0:49:cb:3b:66:31:6d:4e:70:de:d7:5f:f9:5c: 79:5e:bb:60:47:6e:3d:e4:bf:e4:53:cb:c7:26:25:f1:c6:a7: 4c:89:41:8a:fd:64:22:13:59:44:03:6f:f4:68:37:38:7d:dd: ea:f5:89:f6:1c:6b:e5:1b:47:04:a7:9e:02:50:ef:53:f1:22: 6c:00:7f:39:43:03:5e:d9:dd:b4:81:11:44:0f:7a:b7:55:f3: b6:29:38:51 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYSd+fs5WOz3mgKZfQ/nsIPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMTIyMDYxNTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTdlZDA0NGQ1MDhiNGY2ZDg4Yzk4NjE3YWM0ZGFlZmE1NWMwYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSBYgoR3E+PX3R9Cc0m8mJC4BDtg JT7wcnUpLYJ9iLMrwC10sdNVRp1GV2W4vQWOy2O6WFk+rN3mEc3JXIqiEo61PWjJ /P1/NrEZboJ4wRmrzOyH4NAjBVocupBVY1lqa9ifvQqVr4KAiWczpLWfaFcB6LV+ W2+yRmij2EfCgvS22Ap1AW7tgrE7iWd5xYwB3dHt9EFmt0Z3KMLb2vk1odhAQS9b bIg3sx8xUb8gN1KZB3s0lshbjUSetxhR2wFPu94iYXRD1iWV7IqyYzct64lOqGg2 1sdyHQnAgWIhXmNQXiA4SJcWEyC171fnqCatwE4Ku+3d0yw5uBTEz71cQwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJl+0ETVCLT22IyYYXrE2u+lXAt3MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvbVg3UVJOVUl0UGJZakpoaGVzVGE3NlZjQzNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJmsqYCC1roc4mn19fgH MbtHJANjKLAu8sgJawsANynvYFPTDQAVf2xVydeBQEIApj8ZJzepAIFCv5vfKlho x2eK/y1679mISbt2giXp+VhIfHHJ86JnvLKMm0CSLm+OOjFF7IiTSSEV2ud0xrBw Sx9RBdtklVCNBG47EUmfvdX4eFE9CnuJFlbJWW4yORZCI/Q3V/5PJ0VkzwrrHTh6 ZFGPky2zFvXQScs7ZjFtTnDe11/5XHleu2BHbj3kv+RTy8cmJfHGp0yJQYr9ZCIT WUQDb/RoNzh93er1ifYca+UbRwSnngJQ71PxImwAfzlDA17Z3bSBEUQPerdV87Yp OFE= -----END CERTIFICATE-----Generated at Sat Dec 20 18:14:57 2025 by rpki-client