This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppuMmKvyyPsjwUynp5PKYN2S2mc.roa File: ppuMmKvyyPsjwUynp5PKYN2S2mc.roa (raw, json) Hash identifier: 8kNRcYm4CN2knWuZ7KptUbhyFR6C7KwITeCgKZbTiHg= Subject key identifier: A6:9B:8C:98:AB:F2:C8:FB:23:C1:4C:A7:A7:93:CA:60:DD:92:DA:67 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189AC16DF8924AEF0F5A25F975DE929D856 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppuMmKvyyPsjwUynp5PKYN2S2mc.roa Signing time: Mon 31 Jul 2023 13:15:27 +0000 ROA not before: Mon 31 Jul 2023 13:15:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:ac:16:df:89:24:ae:f0:f5:a2:5f:97:5d:e9:29:d8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 31 13:15:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=a69b8c98abf2c8fb23c14ca7a793ca60dd92da67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:3d:28:97:00:cc:69:2b:65:a0:96:29:43: 88:5d:4f:7d:f9:58:41:db:f2:00:86:c3:c2:da:03: 8d:8e:1c:59:4a:95:ab:93:81:a0:7a:7d:d6:78:d2: 95:23:10:88:64:cc:22:10:fb:f8:bd:b7:2a:43:e2: 58:78:30:95:56:b8:5e:41:3a:29:fa:e8:82:e0:7e: dc:39:3d:93:49:59:57:28:83:f4:ca:72:ea:21:dc: d1:99:30:e8:0c:4f:3f:37:f6:87:57:a6:ae:71:d3: c7:26:0e:d2:cf:35:67:39:c4:0e:6c:1e:07:95:af: 9c:17:d7:00:d6:b8:92:5a:57:47:5a:34:12:f0:e0: fe:06:a5:29:7d:10:fe:e1:5f:7b:15:1f:dd:9d:45: 90:ff:1e:44:c0:65:77:eb:9b:34:08:f4:ee:a4:b2: ba:ec:14:aa:20:ca:ef:10:bc:0e:70:80:58:03:75: ce:e9:c2:b4:52:f0:ca:04:9a:0a:3c:8b:40:5d:65: ed:2c:a3:ca:ec:ca:4e:6f:66:b2:bf:8e:62:36:5d: 16:20:3b:91:1e:c8:40:3e:10:c1:18:18:a6:05:17: b7:97:aa:ad:9d:84:3a:a5:9f:38:f4:ac:1a:8f:be: eb:87:b4:4b:e4:90:cd:8e:b8:7f:7a:f7:1e:b2:e0: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9B:8C:98:AB:F2:C8:FB:23:C1:4C:A7:A7:93:CA:60:DD:92:DA:67 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppuMmKvyyPsjwUynp5PKYN2S2mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 67:69:ac:b5:66:cd:07:28:80:37:a2:ac:1e:03:eb:3d:78:cc: 54:41:3c:1f:e9:d9:26:3e:e4:85:a1:55:c0:c9:19:2f:7a:b9: cd:9c:89:b3:19:72:bd:fb:4c:97:50:c5:87:d3:b6:38:00:18: 87:1f:0e:9c:3c:29:a8:89:07:4a:d0:8f:ca:35:88:b7:36:73: 96:08:f7:62:58:46:b7:e8:99:a4:34:bd:7c:ef:a2:2b:20:4f: 67:db:09:79:a4:e0:a6:af:1e:51:32:86:8e:31:c3:37:06:50: 1b:6c:9f:34:cd:f5:d9:30:84:5f:67:63:ae:1f:ff:da:6f:1f: 72:00:e0:83:ca:18:b3:ee:a2:84:0f:51:4d:09:04:08:04:95: b4:da:78:a0:3b:ad:33:ee:ed:61:8c:f5:6b:8a:1a:da:54:33: 1a:b5:dd:00:aa:88:b3:4e:7e:cb:86:04:72:82:e2:3a:29:7b: 6e:9b:cb:91:50:00:db:90:13:22:68:a9:5b:1b:c6:dc:e3:5d: c1:9c:dd:a4:0e:67:af:e4:82:c4:8e:a3:ff:1a:68:b8:f5:45: 87:ec:b0:1c:fb:4b:1d:7a:26:e8:ca:ce:5f:ae:3e:60:de:a2: 19:50:f6:01:2c:46:ad:d5:93:73:a8:4e:50:80:f6:7e:11:1e: 4e:e7:61:b5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYmsFt+JJK7w9aJfl13pKdhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNzMxMTMxNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjliOGM5OGFiZjJjOGZiMjNjMTRjYTdhNzkzY2E2MGRkOTJkYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVE9KJcAzGkrZaCWKUOIXU99+VhB 2/IAhsPC2gONjhxZSpWrk4Ggen3WeNKVIxCIZMwiEPv4vbcqQ+JYeDCVVrheQTop +uiC4H7cOT2TSVlXKIP0ynLqIdzRmTDoDE8/N/aHV6aucdPHJg7SzzVnOcQObB4H la+cF9cA1riSWldHWjQS8OD+BqUpfRD+4V97FR/dnUWQ/x5EwGV365s0CPTupLK6 7BSqIMrvELwOcIBYA3XO6cK0UvDKBJoKPItAXWXtLKPK7MpOb2ayv45iNl0WIDuR HshAPhDBGBimBRe3l6qtnYQ6pZ849Kwaj77rh7RL5JDNjrh/evcesuCSqQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKabjJir8sj7I8FMp6eTymDdktpnMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvcHB1TW1Ldnl5UHNqd1V5bnA1UEtZTjJTMm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGdprLVmzQcogDeirB4D 6z14zFRBPB/p2SY+5IWhVcDJGS96uc2cibMZcr37TJdQxYfTtjgAGIcfDpw8KaiJ B0rQj8o1iLc2c5YI92JYRrfomaQ0vXzvoisgT2fbCXmk4KavHlEyho4xwzcGUBts nzTN9dkwhF9nY64f/9pvH3IA4IPKGLPuooQPUU0JBAgElbTaeKA7rTPu7WGM9WuK GtpUMxq13QCqiLNOfsuGBHKC4jope26by5FQANuQEyJoqVsbxtzjXcGc3aQOZ6/k gsSOo/8aaLj1RYfssBz7Sx16JujKzl+uPmDeohlQ9gEsRq3Vk3OoTlCA9n4RHk7n YbU= -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:44 2025 by rpki-client