This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mwfCkTE-QblEtY_vfRJPWRslGkQ.roa File: mwfCkTE-QblEtY_vfRJPWRslGkQ.roa (raw, json) Hash identifier: IiIuNq4/sOspdiNFG9FtKA4IVSFNqXABFRdxtpokYRQ= Subject key identifier: 9B:07:C2:91:31:3E:41:B9:44:B5:8F:EF:7D:12:4F:59:1B:25:1A:44 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018509E5317DB5B31A5F411852C16B59C39E Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mwfCkTE-QblEtY_vfRJPWRslGkQ.roa Signing time: Tue 13 Dec 2022 05:11:33 +0000 ROA not before: Tue 13 Dec 2022 05:11:33 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:09:e5:31:7d:b5:b3:1a:5f:41:18:52:c1:6b:59:c3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 13 05:11:33 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=9b07c291313e41b944b58fef7d124f591b251a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:64:b0:36:f1:5f:4a:de:22:a0:8d:23:31:7d: a0:ca:05:28:28:60:b4:d4:15:b2:78:68:f0:55:b0: 47:fa:9d:fb:63:f9:74:2f:cd:d9:87:a6:6f:d4:c1: bc:f2:50:e9:1e:97:a3:40:33:00:2d:58:7e:9c:6f: c1:b3:a2:cd:f2:c6:d5:14:89:98:66:fc:dc:e5:97: c8:71:3b:c4:5d:cc:f3:54:de:d3:44:ec:71:e5:18: 36:13:4a:eb:e5:0d:c1:19:b8:2a:8f:c8:dd:3d:c2: 6f:57:b4:26:1d:4c:d9:29:69:29:a9:e6:a5:0b:c9: 25:f3:16:f1:23:22:74:f1:25:3c:db:ea:d6:98:95: 49:5b:cc:1e:f0:42:14:93:ce:cf:1a:f6:63:3b:2a: 46:8e:f9:90:11:8a:f1:da:9f:1d:65:39:66:78:b1: 4b:7d:d7:ac:bb:65:3e:a2:92:10:64:b2:31:49:f5: 12:8c:75:57:53:54:82:31:7d:73:1a:79:ae:c1:77: 6b:de:4b:a9:14:88:12:b3:d9:12:2d:4f:ce:fd:3b: fe:14:65:94:5e:6e:04:e4:1d:5b:23:78:68:f1:f2: 86:e8:56:ed:23:6e:b5:d1:a6:4a:69:b1:9d:3f:4c: 56:c2:e4:ce:35:50:2d:08:1a:2f:14:32:dc:e2:d4: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:07:C2:91:31:3E:41:B9:44:B5:8F:EF:7D:12:4F:59:1B:25:1A:44 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mwfCkTE-QblEtY_vfRJPWRslGkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 8e:c7:3b:e7:84:1d:3a:84:32:34:8e:14:61:85:b5:dc:0d:d0: 16:7f:a8:fa:8a:bb:36:10:29:6b:2c:47:f2:99:aa:94:93:62: 84:09:8a:b3:57:25:e3:a9:1c:5e:1e:1a:65:c5:6f:b5:a9:c9: 57:68:24:8c:ef:88:ba:c0:15:1d:08:54:c0:05:fe:4f:69:22: eb:67:4e:5a:19:15:c0:4a:98:44:07:ec:b9:6a:5c:3e:c1:4b: a6:a1:b9:1d:6a:f1:fd:eb:8a:75:e1:89:4f:d2:87:de:5c:f2: 6e:18:9f:22:d6:ca:ce:a3:8b:94:7c:a0:b4:fa:b8:a8:5e:14: f2:5f:d7:d6:d9:5d:e0:b8:2b:a6:67:4e:9a:01:78:8a:79:48: 0f:12:34:c8:27:46:79:c1:36:dd:29:65:5d:aa:79:fc:10:ba: 2d:06:5a:56:54:b5:38:df:86:98:00:03:5c:36:a4:80:41:2e: 6d:ce:a8:a4:38:72:1e:48:a4:e6:16:86:d9:2b:d3:d1:21:d3: fd:f2:29:1a:8b:35:16:1d:7b:29:df:48:33:23:a7:fc:9b:e5: 67:fd:09:16:d3:83:26:25:d2:21:6f:bc:4e:7b:44:b0:95:f3: 37:18:21:82:69:51:27:b8:de:b3:fa:fc:8c:ce:ed:04:81:e6: 94:df:7c:2a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYUJ5TF9tbMaX0EYUsFrWcOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjEzMDUxMTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjA3YzI5MTMxM2U0MWI5NDRiNThmZWY3ZDEyNGY1OTFiMjUxYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimSwNvFfSt4ioI0jMX2gygUoKGC0 1BWyeGjwVbBH+p37Y/l0L83Zh6Zv1MG88lDpHpejQDMALVh+nG/Bs6LN8sbVFImY Zvzc5ZfIcTvEXczzVN7TROxx5Rg2E0rr5Q3BGbgqj8jdPcJvV7QmHUzZKWkpqeal C8kl8xbxIyJ08SU82+rWmJVJW8we8EIUk87PGvZjOypGjvmQEYrx2p8dZTlmeLFL fdesu2U+opIQZLIxSfUSjHVXU1SCMX1zGnmuwXdr3kupFIgSs9kSLU/O/Tv+FGWU Xm4E5B1bI3ho8fKG6FbtI2610aZKabGdP0xWwuTONVAtCBovFDLc4tRDtQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJsHwpExPkG5RLWP730ST1kbJRpEMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvbXdmQ2tURS1RYmxFdFlfdmZSSlBXUnNsR2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI7HO+eEHTqEMjSOFGGF tdwN0BZ/qPqKuzYQKWssR/KZqpSTYoQJirNXJeOpHF4eGmXFb7WpyVdoJIzviLrA FR0IVMAF/k9pIutnTloZFcBKmEQH7LlqXD7BS6ahuR1q8f3rinXhiU/Sh95c8m4Y nyLWys6ji5R8oLT6uKheFPJf19bZXeC4K6ZnTpoBeIp5SA8SNMgnRnnBNt0pZV2q efwQui0GWlZUtTjfhpgAA1w2pIBBLm3OqKQ4ch5IpOYWhtkr09Eh0/3yKRqLNRYd eynfSDMjp/yb5Wf9CRbTgyYl0iFvvE57RLCV8zcYIYJpUSe43rP6/IzO7QSB5pTf fCo= -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:22 2025 by rpki-client