This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sgES5MrgyqDoeV09eZ-rKRtoL1U.roa File: sgES5MrgyqDoeV09eZ-rKRtoL1U.roa (raw, json) Hash identifier: eCAtgKDZ/1ToHQ5DH//GUo+7hEoG1IC8Nz+TaPQIIr4= Subject key identifier: B2:01:12:E4:CA:E0:CA:A0:E8:79:5D:3D:79:9F:AB:29:1B:68:2F:55 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0186657CB77ECCA562F7D86D47526534A3FE Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sgES5MrgyqDoeV09eZ-rKRtoL1U.roa Signing time: Sat 18 Feb 2023 17:05:17 +0000 ROA not before: Sat 18 Feb 2023 17:05:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:657b:ebb7/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:65:7c:b7:7e:cc:a5:62:f7:d8:6d:47:52:65:34:a3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 18 17:05:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=b20112e4cae0caa0e8795d3d799fab291b682f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:3c:8f:4d:9f:56:50:5c:f6:b8:7e:55:e3: 1a:9b:2a:e9:b9:6c:69:d5:a7:54:28:e9:cb:a7:9b: 03:73:9a:08:29:e7:6e:16:04:37:7a:a6:39:dc:12: 7e:0f:c7:52:18:85:85:5d:27:5f:27:7a:5a:0c:a1: 82:51:38:f0:e3:23:8b:96:ec:72:55:c7:57:6d:32: 3b:09:3d:a6:5e:d9:3f:53:cf:ba:d2:25:36:35:38: 1c:1c:de:5a:89:b2:41:0c:1d:71:09:75:42:d9:ab: 9e:9c:80:ce:22:72:05:0f:70:fb:94:e3:e9:b0:6f: 5b:d3:7c:23:a8:ca:c1:e0:9b:d2:8f:b1:3a:fb:e3: ac:d6:9e:76:5b:d1:b4:1e:52:09:aa:ea:27:db:17: 65:1e:7a:09:d4:04:69:4f:19:60:cc:fe:b9:ad:9e: 0a:0c:bf:3e:88:4d:26:d0:81:71:fe:a5:9c:d8:08: 94:7f:be:9c:88:ca:7c:d1:92:41:33:0c:03:09:07: c8:58:81:02:6e:4e:e7:3f:54:09:e4:90:1b:27:d3: bf:99:f6:47:3a:df:f4:5c:c6:34:52:9d:cf:e1:61: 90:9d:7a:52:ba:c7:43:29:73:88:2a:ed:64:55:ab: 24:c9:88:8a:9c:f1:49:64:58:10:2e:5b:85:5e:fe: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:01:12:E4:CA:E0:CA:A0:E8:79:5D:3D:79:9F:AB:29:1B:68:2F:55 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sgES5MrgyqDoeV09eZ-rKRtoL1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption af:e2:3b:72:da:95:32:3c:5f:fd:e1:00:a1:fb:de:b6:f0:40: e9:13:55:b4:f9:7b:e9:c1:0e:fa:1a:60:43:07:4e:76:da:aa: 41:17:6f:09:8c:a7:0f:11:da:c1:99:13:58:80:35:58:ce:29: ee:62:0c:e1:97:72:35:bc:4f:e1:a8:49:f9:d1:df:6e:bf:cf: 0f:6f:09:43:5c:e6:19:f7:c1:84:26:6b:89:0e:17:11:da:e5: 2c:52:38:40:85:46:d2:ef:4a:38:d2:37:63:b0:33:4f:97:86: 31:bf:b8:15:fd:3b:7d:62:29:12:98:e7:88:0d:c9:37:e1:9b: 50:97:9e:51:a6:57:14:94:4d:bc:4a:0f:28:ad:9a:71:4b:bc: 77:4e:dd:78:78:ee:74:b2:70:c5:16:f0:66:f4:b0:bc:36:6b: 42:64:c3:f1:ef:28:a1:f1:bb:c7:21:a5:aa:07:14:03:2d:69: 57:dd:2d:2c:34:60:0e:b7:e3:dd:24:8d:78:94:5d:c8:e2:b9: d8:3e:8b:f6:27:53:a2:d5:57:9a:e0:9f:6b:ba:e0:f0:47:0f: e1:16:4d:7c:df:91:ed:9a:e9:9c:2f:b5:c9:f0:13:b8:9e:da: 96:f9:70:f7:d9:13:5e:ff:65:c4:dc:74:ea:1e:f0:f7:b0:f5: 94:0b:74:bd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZlfLd+zKVi99htR1JlNKP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjE4MTcwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjAxMTJlNGNhZTBjYWEwZTg3OTVkM2Q3OTlmYWIyOTFiNjgyZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr08j02fVlBc9rh+VeMamyrpuWxp 1adUKOnLp5sDc5oIKeduFgQ3eqY53BJ+D8dSGIWFXSdfJ3paDKGCUTjw4yOLluxy VcdXbTI7CT2mXtk/U8+60iU2NTgcHN5aibJBDB1xCXVC2auenIDOInIFD3D7lOPp sG9b03wjqMrB4JvSj7E6++Os1p52W9G0HlIJquon2xdlHnoJ1ARpTxlgzP65rZ4K DL8+iE0m0IFx/qWc2AiUf76ciMp80ZJBMwwDCQfIWIECbk7nP1QJ5JAbJ9O/mfZH Ot/0XMY0Up3P4WGQnXpSusdDKXOIKu1kVaskyYiKnPFJZFgQLluFXv5whwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLIBEuTK4Mqg6HldPXmfqykbaC9VMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvc2dFUzVNcmd5cURvZVYwOWVaLXJLUnRvTDFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK/iO3LalTI8X/3hAKH7 3rbwQOkTVbT5e+nBDvoaYEMHTnbaqkEXbwmMpw8R2sGZE1iANVjOKe5iDOGXcjW8 T+GoSfnR326/zw9vCUNc5hn3wYQma4kOFxHa5SxSOECFRtLvSjjSN2OwM0+XhjG/ uBX9O31iKRKY54gNyTfhm1CXnlGmVxSUTbxKDyitmnFLvHdO3Xh47nSycMUW8Gb0 sLw2a0Jkw/HvKKHxu8chpaoHFAMtaVfdLSw0YA63490kjXiUXcjiudg+i/YnU6LV V5rgn2u64PBHD+EWTXzfke2a6ZwvtcnwE7ie2pb5cPfZE17/ZcTcdOoe8Pew9ZQL dL0= -----END CERTIFICATE-----Generated at Fri Dec 19 14:38:32 2025 by rpki-client