This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmfN4rilAJ36WCAYJOHZ6IOxYQo.roa File: mmfN4rilAJ36WCAYJOHZ6IOxYQo.roa (raw, json) Hash identifier: gyMeBC7aCFhf+0Nz2FoN/+/Qk574Dylm/ObgF5QGm4w= Subject key identifier: 9A:67:CD:E2:B8:A5:00:9D:FA:58:20:18:24:E1:D9:E8:83:B1:61:0A Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018527B24E4506E7901787EDC63FFE0EEE72 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmfN4rilAJ36WCAYJOHZ6IOxYQo.roa Signing time: Mon 19 Dec 2022 00:04:34 +0000 ROA not before: Mon 19 Dec 2022 00:04:34 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:185:27b2:132c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:27:b2:4e:45:06:e7:90:17:87:ed:c6:3f:fe:0e:ee:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 19 00:04:34 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=9a67cde2b8a5009dfa58201824e1d9e883b1610a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:61:99:0b:f9:7d:6e:6a:cc:3b:d7:f8:99: 1f:3e:0a:83:2f:80:c7:fd:fb:9e:da:3f:4a:c4:af: fc:d8:48:34:d9:35:84:cc:2e:79:18:9a:d6:8c:44: 1e:ee:f0:5a:72:cc:20:68:22:cc:40:cc:57:b5:13: 8a:e7:22:75:38:c5:32:af:05:40:1e:42:26:a9:ad: d3:76:47:a9:6d:ce:fb:84:4e:9c:7a:6d:a0:1d:0b: 17:2b:96:26:a9:59:a9:2f:a0:82:88:03:72:18:f6: 30:f7:07:e3:bf:b6:76:47:cc:de:2b:ee:e0:66:9a: df:74:c3:18:4c:65:75:97:ca:71:02:b4:2f:5c:da: f4:c3:7c:90:d3:e7:d5:4e:9e:17:95:cc:43:76:b6: e2:80:41:f1:c4:a8:84:8f:be:65:16:c8:3f:fa:47: 0e:4f:ea:5a:44:20:93:19:70:a9:34:b0:41:c0:f9: 20:4f:cd:c7:d9:13:19:b7:e7:83:24:71:1e:1d:97: 83:34:7b:20:08:0c:76:89:4a:30:3d:5b:96:4b:00: 8b:c7:87:86:75:cc:93:a4:ff:85:df:cf:f4:0c:e6: be:0a:40:ab:57:bd:2d:11:cc:e1:9f:7b:85:61:af: 45:1b:be:55:70:07:ff:cf:0e:49:3c:2e:15:a8:6d: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:67:CD:E2:B8:A5:00:9D:FA:58:20:18:24:E1:D9:E8:83:B1:61:0A X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmfN4rilAJ36WCAYJOHZ6IOxYQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption a7:97:e5:a5:e8:d0:d8:9d:70:24:15:4a:9d:f8:79:03:ab:ab: a6:97:6d:79:91:fd:ea:22:8e:f5:e8:95:c1:c4:d2:9d:31:97: 91:8a:76:01:f9:02:ec:6b:74:90:b2:31:8d:ce:db:27:2d:59: b3:8a:36:21:81:87:34:b1:37:2f:56:58:87:bf:6d:11:29:dc: 14:2e:cb:f5:4e:e4:a0:f3:c7:e1:30:71:02:0d:a1:5c:a2:64: a4:43:6a:5f:23:61:a4:92:1a:7f:36:bb:c4:b2:75:81:87:8d: 37:09:43:aa:33:ba:c8:2e:fd:a2:23:b6:3c:2b:41:8c:47:c3: f7:05:d1:6e:3e:66:37:fc:21:57:4d:23:96:e7:0e:6e:a9:91: f0:8f:b6:2d:b1:6b:7f:35:6f:16:d2:c7:dd:2a:2c:55:88:13: 1a:c5:8a:c6:34:1e:b3:2a:de:17:7b:0e:34:85:63:c7:c8:84: 18:70:d7:e4:22:df:b0:73:06:80:7d:e0:42:52:53:8f:73:d2: 19:4d:5b:bb:8e:07:50:7f:01:aa:3b:fa:fe:25:17:eb:27:ec: be:b6:04:d0:da:72:9d:5d:39:57:f4:8f:94:c0:7b:15:39:55: 71:87:79:4d:30:b6:25:51:39:27:86:58:06:f1:e6:1f:75:50: 64:6c:b6:32 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYUnsk5FBueQF4ftxj/+Du5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjE5MDAwNDM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTY3Y2RlMmI4YTUwMDlkZmE1ODIwMTgyNGUxZDllODgzYjE2MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz9hmQv5fW5qzDvX+JkfPgqDL4DH /fue2j9KxK/82Eg02TWEzC55GJrWjEQe7vBacswgaCLMQMxXtROK5yJ1OMUyrwVA HkImqa3Tdkepbc77hE6cem2gHQsXK5YmqVmpL6CCiANyGPYw9wfjv7Z2R8zeK+7g ZprfdMMYTGV1l8pxArQvXNr0w3yQ0+fVTp4XlcxDdrbigEHxxKiEj75lFsg/+kcO T+paRCCTGXCpNLBBwPkgT83H2RMZt+eDJHEeHZeDNHsgCAx2iUowPVuWSwCLx4eG dcyTpP+F38/0DOa+CkCrV70tEczhn3uFYa9FG75VcAf/zw5JPC4VqG0Z6wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJpnzeK4pQCd+lggGCTh2eiDsWEKMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvbW1mTjRyaWxBSjM2V0NBWUpPSFo2SU94WVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKeX5aXo0NidcCQVSp34 eQOrq6aXbXmR/eoijvXolcHE0p0xl5GKdgH5AuxrdJCyMY3O2yctWbOKNiGBhzSx Ny9WWIe/bREp3BQuy/VO5KDzx+EwcQINoVyiZKRDal8jYaSSGn82u8SydYGHjTcJ Q6ozusgu/aIjtjwrQYxHw/cF0W4+Zjf8IVdNI5bnDm6pkfCPti2xa381bxbSx90q LFWIExrFisY0HrMq3hd7DjSFY8fIhBhw1+Qi37BzBoB94EJSU49z0hlNW7uOB1B/ Aao7+v4lF+sn7L62BNDacp1dOVf0j5TAexU5VXGHeU0wtiVROSeGWAbx5h91UGRs tjI= -----END CERTIFICATE-----Generated at Fri Dec 19 23:07:41 2025 by rpki-client