This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oxKPNFJtUzRpiI255xpvHQW7Ukg.roa File: oxKPNFJtUzRpiI255xpvHQW7Ukg.roa (raw, json) Hash identifier: HyXQB9l1DC/LUOBF5LfSIBHz9W/5HhTwfJe8JRnQiyE= Subject key identifier: A3:12:8F:34:52:6D:53:34:69:88:8D:B9:E7:1A:6F:1D:05:BB:52:48 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018202D8AA9A38201794757095A0B4BA53CC Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oxKPNFJtUzRpiI255xpvHQW7Ukg.roa Signing time: Fri 15 Jul 2022 17:12:09 +0000 ROA not before: Fri 15 Jul 2022 17:12:09 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:82:02:d8:aa:9a:38:20:17:94:75:70:95:a0:b4:ba:53:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 15 17:12:09 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=a3128f34526d533469888db9e71a6f1d05bb5248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:57:b6:e4:31:7b:3f:dc:1c:8f:f9:06:08: 99:7c:52:0f:a8:92:c6:0b:75:9f:bc:1a:d4:5e:ff: f2:b8:23:fa:39:fa:e6:a5:f9:f1:13:92:c5:56:23: ae:ab:3f:df:d5:bd:ff:a4:8e:ab:29:99:90:c2:78: 9e:d9:4e:82:1b:76:29:f4:d7:16:f9:1e:c2:e8:a2: 52:48:c5:1a:dc:ab:45:70:3f:09:9b:5d:e8:5d:52: 55:50:cd:a0:cd:3e:60:94:f5:02:b0:96:2f:60:ed: 30:00:16:7e:8f:d0:92:dc:83:45:74:80:25:82:ab: e2:5e:61:14:bb:84:b3:b1:a1:d3:5d:99:be:4d:22: ca:af:45:cf:c0:88:7e:8f:2f:f7:66:7e:31:74:4f: 7f:26:13:6c:61:43:3a:7f:f3:4f:5f:4c:3c:92:25: 55:86:c9:17:5d:14:a5:85:4e:d0:75:7b:a4:aa:2e: 41:be:ed:70:c6:73:8c:72:88:23:72:8d:5f:cf:02: 0d:30:09:c8:1b:2d:8a:e2:cb:30:4a:2d:4f:b9:91: 5b:a3:cf:e1:85:ac:26:7f:09:0d:ef:23:d1:da:f3: 5d:55:9f:34:a3:98:44:68:0a:f9:8c:7d:37:ee:c9: 1e:88:13:69:9d:34:60:87:f2:db:74:8c:f9:0e:e1: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:12:8F:34:52:6D:53:34:69:88:8D:B9:E7:1A:6F:1D:05:BB:52:48 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oxKPNFJtUzRpiI255xpvHQW7Ukg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 68:4e:3b:da:4d:c2:b8:50:70:3d:ed:64:47:14:69:ac:d0:ae: 15:ef:d0:27:ff:fc:4b:d4:94:55:6e:3d:dc:22:e6:1a:ae:9c: 49:23:6d:ca:78:11:85:86:9d:4b:bb:1f:16:5e:a6:7f:02:a1: 02:eb:41:bd:18:4f:b8:ba:8c:f7:a9:ff:a3:44:6c:98:16:8a: 1f:4f:32:a8:e8:20:27:5c:74:ec:30:c7:8e:14:f5:bd:ad:6b: e6:f7:f7:6f:6d:d8:a1:42:e5:fe:82:78:db:3a:e9:7c:25:a5: aa:bd:aa:be:2d:6c:a8:d9:ce:45:99:eb:42:5a:e5:27:f3:33: 14:24:6e:0e:81:19:79:53:59:b6:73:87:f2:65:6f:bf:ef:d0: 4c:43:f5:56:a9:6f:0d:90:71:b6:87:25:35:96:97:ec:56:2d: 37:99:b6:e5:e3:79:09:c0:86:85:77:7d:2e:c9:29:c1:3c:56: 18:db:71:ca:11:89:d9:b0:24:d8:13:dc:70:8f:82:94:5c:78: 10:66:0a:75:b7:61:01:7a:03:da:5d:f9:c1:48:3e:02:30:5c: ca:46:0c:b6:63:7f:d1:2e:ed:ed:4d:f9:8f:69:26:e6:c1:e2: 85:44:84:18:93:91:cc:9a:a2:20:72:28:72:60:28:07:1e:27: 51:7c:92:d2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYIC2KqaOCAXlHVwlaC0ulPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIwNzE1MTcxMjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzEyOGYzNDUyNmQ1MzM0Njk4ODhkYjllNzFhNmYxZDA1YmI1MjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly9XtuQxez/cHI/5BgiZfFIPqJLG C3WfvBrUXv/yuCP6OfrmpfnxE5LFViOuqz/f1b3/pI6rKZmQwnie2U6CG3Yp9NcW +R7C6KJSSMUa3KtFcD8Jm13oXVJVUM2gzT5glPUCsJYvYO0wABZ+j9CS3INFdIAl gqviXmEUu4SzsaHTXZm+TSLKr0XPwIh+jy/3Zn4xdE9/JhNsYUM6f/NPX0w8kiVV hskXXRSlhU7QdXukqi5Bvu1wxnOMcogjco1fzwINMAnIGy2K4sswSi1PuZFbo8/h hawmfwkN7yPR2vNdVZ80o5hEaAr5jH037skeiBNpnTRgh/LbdIz5DuEVnQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKMSjzRSbVM0aYiNuecabx0Fu1JIMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvb3hLUE5GSnRVelJwaUkyNTV4cHZIUVc3VWtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGhOO9pNwrhQcD3tZEcU aazQrhXv0Cf//EvUlFVuPdwi5hqunEkjbcp4EYWGnUu7HxZepn8CoQLrQb0YT7i6 jPep/6NEbJgWih9PMqjoICdcdOwwx44U9b2ta+b3929t2KFC5f6CeNs66Xwlpaq9 qr4tbKjZzkWZ60Ja5SfzMxQkbg6BGXlTWbZzh/Jlb7/v0ExD9Vapbw2QcbaHJTWW l+xWLTeZtuXjeQnAhoV3fS7JKcE8VhjbccoRidmwJNgT3HCPgpRceBBmCnW3YQF6 A9pd+cFIPgIwXMpGDLZjf9Eu7e1N+Y9pJubB4oVEhBiTkcyaoiByKHJgKAceJ1F8 ktI= -----END CERTIFICATE-----Generated at Sun Dec 21 18:06:24 2025 by rpki-client