This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sXHd08N9StA8YHJwxV9JjO9Dw5Y.roa File: sXHd08N9StA8YHJwxV9JjO9Dw5Y.roa (raw, json) Hash identifier: gTrutV3AH4D/nHeaLrHRiy4kCCr5+HegoZSPO3cet+w= Subject key identifier: B1:71:DD:D3:C3:7D:4A:D0:3C:60:72:70:C5:5F:49:8C:EF:43:C3:96 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018569248F0604E744A8A9109698107CA3F1 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sXHd08N9StA8YHJwxV9JjO9Dw5Y.roa Signing time: Sat 31 Dec 2022 17:04:41 +0000 ROA not before: Sat 31 Dec 2022 17:04:41 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:185:6924:2166/128 maxlen: 128 2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:69:24:8f:06:04:e7:44:a8:a9:10:96:98:10:7c:a3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Dec 31 17:04:41 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=b171ddd3c37d4ad03c607270c55f498cef43c396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:c3:fb:c8:ba:39:35:f6:1a:5a:6a:6e:c5: 77:f3:a1:7f:53:21:22:88:5d:07:72:48:9b:32:67: 6f:ce:6b:2f:0b:c1:9e:ce:ec:c0:f6:90:a5:02:67: 24:30:da:bc:e0:74:60:ab:8a:de:ec:cc:5a:8a:46: e3:23:ac:94:3b:c1:00:e9:a4:0e:92:71:b2:29:70: 0f:0e:d6:d6:7c:4c:ac:49:f8:89:c7:a2:21:80:75: ac:9f:1a:57:35:47:69:eb:2c:bd:5d:94:be:58:9b: 93:85:f0:ce:06:1e:2e:34:2d:9b:df:60:27:bd:bf: 52:49:4f:4d:8c:85:ee:61:20:f3:97:1e:61:df:4b: 61:6c:a1:ca:01:30:c6:c2:19:94:24:2f:51:9b:85: d7:58:05:9f:3e:76:ef:66:e3:60:cb:f0:37:08:27: b5:c8:e1:ed:63:34:35:fa:89:b9:f6:19:8f:9a:41: 3a:bd:b3:47:e1:37:30:fb:14:22:2e:0a:9d:bb:bd: bd:a4:65:84:09:0d:96:2d:90:eb:14:cc:b7:a9:87: a0:5f:c5:eb:5b:3a:dd:dc:7d:38:21:64:d9:8a:d4: 49:a2:9e:ab:8b:33:d1:bd:f8:f8:10:c3:59:7f:d6: d9:af:73:8a:94:17:12:e8:01:46:ca:07:65:9e:a4: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:71:DD:D3:C3:7D:4A:D0:3C:60:72:70:C5:5F:49:8C:EF:43:C3:96 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sXHd08N9StA8YHJwxV9JjO9Dw5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 06:99:09:c0:20:0f:1d:9f:00:23:64:49:7b:70:9c:c3:f9:e8: 1e:e8:d6:b7:26:58:1f:cf:54:c8:42:31:51:43:4b:82:c9:8e: ee:83:b2:4f:42:3f:a7:0c:a7:57:e2:6f:f1:83:ca:ee:ef:2e: 56:27:93:02:c5:6d:57:e6:56:12:3f:e9:48:eb:57:c2:a7:6e: 11:3b:92:f0:57:86:15:42:8b:05:35:50:17:ed:b9:50:d5:8c: e4:8c:e7:25:94:45:17:93:43:b0:84:04:26:39:b4:a1:0b:5f: ad:48:20:be:73:96:b9:a6:09:4a:b3:77:c8:38:2e:2d:7a:ff: e3:dd:17:c4:3b:db:89:cf:11:ba:5d:cf:a7:17:26:5f:b2:d7: e1:67:61:09:2d:7e:6e:74:43:ff:27:1e:9f:40:6a:2b:32:76: af:b0:c4:90:cb:6a:aa:9f:fc:a0:57:e5:50:67:64:78:3c:ac: bc:87:fc:3f:0e:df:80:92:19:51:c3:a0:23:d4:88:2b:b8:16: 2c:e7:e2:0f:39:21:9b:d6:4d:c6:92:b7:4f:22:0a:5c:24:f7: d8:11:b9:c5:df:ff:a5:35:fa:e0:6e:ec:09:1e:a4:35:cf:fc: df:9d:2e:e5:0a:0a:21:38:97:ec:78:d3:72:78:5e:11:79:52: d5:b1:8d:5d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYVpJI8GBOdEqKkQlpgQfKPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjIxMjMxMTcwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTcxZGRkM2MzN2Q0YWQwM2M2MDcyNzBjNTVmNDk4Y2VmNDNjMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5szD+8i6OTX2GlpqbsV386F/UyEi iF0HckibMmdvzmsvC8GezuzA9pClAmckMNq84HRgq4re7MxaikbjI6yUO8EA6aQO knGyKXAPDtbWfEysSfiJx6IhgHWsnxpXNUdp6yy9XZS+WJuThfDOBh4uNC2b32An vb9SSU9NjIXuYSDzlx5h30thbKHKATDGwhmUJC9Rm4XXWAWfPnbvZuNgy/A3CCe1 yOHtYzQ1+om59hmPmkE6vbNH4Tcw+xQiLgqdu729pGWECQ2WLZDrFMy3qYegX8Xr Wzrd3H04IWTZitRJop6rizPRvfj4EMNZf9bZr3OKlBcS6AFGygdlnqRIRQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLFx3dPDfUrQPGBycMVfSYzvQ8OWMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvc1hIZDA4TjlTdEE4WUhKd3hWOUpqTzlEdzVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAaZCcAgDx2fACNkSXtw nMP56B7o1rcmWB/PVMhCMVFDS4LJju6Dsk9CP6cMp1fib/GDyu7vLlYnkwLFbVfm VhI/6UjrV8KnbhE7kvBXhhVCiwU1UBftuVDVjOSM5yWURReTQ7CEBCY5tKELX61I IL5zlrmmCUqzd8g4Li16/+PdF8Q724nPEbpdz6cXJl+y1+FnYQktfm50Q/8nHp9A aisydq+wxJDLaqqf/KBX5VBnZHg8rLyH/D8O34CSGVHDoCPUiCu4Fizn4g85IZvW TcaSt08iClwk99gRucXf/6U1+uBu7AkepDXP/N+dLuUKCiE4l+x403J4XhF5UtWx jV0= -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:15 2025 by rpki-client