This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yhOP5AYvUdFGpYp7CUYWRzu_Fbc.roa File: yhOP5AYvUdFGpYp7CUYWRzu_Fbc.roa (raw, json) Hash identifier: sOvb/j9+9WBzE+2ujEy2HBEEcbC8cHqtUQIjqfNmflg= Subject key identifier: CA:13:8F:E4:06:2F:51:D1:46:A5:8A:7B:09:46:16:47:3B:BF:15:B7 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A1BAC395CD560511B87A4C2A9F8E180A9 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yhOP5AYvUdFGpYp7CUYWRzu_Fbc.roa Signing time: Tue 22 Aug 2023 05:16:26 +0000 ROA not before: Tue 22 Aug 2023 05:16:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:1b:ac:39:5c:d5:60:51:1b:87:a4:c2:a9:f8:e1:80:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 22 05:16:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ca138fe4062f51d146a58a7b094616473bbf15b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:b9:e3:0f:6f:cf:cc:c2:2b:ca:10:e3:ca: 4b:23:00:a1:85:18:41:b8:47:07:f1:54:75:68:c0: 4f:84:c7:9b:b5:4a:72:98:4b:fb:34:8e:e8:97:6d: 28:75:71:b7:e6:ef:00:68:c9:6b:51:88:bb:21:bf: e8:14:55:c0:68:b6:a3:4e:09:8e:ab:0c:30:d8:41: 5f:84:53:a5:3c:43:d4:a3:30:eb:7d:a4:c5:d4:60: 42:24:55:66:55:aa:da:f2:a8:78:8a:81:d8:04:c9: f5:42:0c:bf:18:9d:7a:dc:c7:7c:f2:02:cf:88:a2: f1:59:a2:79:a0:05:d0:36:33:2d:3a:88:42:83:15: ed:e5:a7:cf:e1:aa:10:55:fc:53:82:d4:c8:e0:82: eb:27:bd:0f:5a:9e:e7:72:07:98:67:14:83:33:ee: ae:e1:e7:d3:0c:26:d6:f7:46:fa:d8:1c:3a:e1:a6: c2:09:57:f3:67:23:f6:29:ae:0e:72:d4:73:dc:8d: 12:0e:1c:0c:49:63:8f:f1:ef:22:ca:80:c2:0b:47: 3a:e7:ca:f6:e5:4e:02:88:ad:4c:43:b4:8c:c9:68: cd:de:e1:21:63:a0:83:83:15:04:88:35:ba:a9:3e: 63:41:08:f1:e9:cc:a6:83:ac:40:c7:be:7c:fa:f0: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:8F:E4:06:2F:51:D1:46:A5:8A:7B:09:46:16:47:3B:BF:15:B7 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yhOP5AYvUdFGpYp7CUYWRzu_Fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 5b:51:b2:9f:94:40:7c:60:5a:57:2b:f9:3c:c5:c6:50:90:19: a4:a2:85:37:5f:1a:8b:10:2a:ea:6d:13:f8:da:ad:eb:f2:71: 57:29:03:5e:ed:86:f4:03:a0:f8:2c:24:16:eb:c1:cc:33:f5: 79:cb:bd:40:ee:94:e1:e2:66:c3:3d:3f:3c:47:bc:c5:6a:72: f3:cf:7d:59:1d:69:78:f7:57:21:32:1c:a4:60:c9:b8:ab:59: 27:f1:5c:fe:4e:18:0a:d0:58:45:cc:d3:94:cd:79:fd:b1:e2: 31:c5:96:eb:49:65:df:93:fd:2b:e3:ad:3a:08:9c:93:ec:87: 11:8e:17:44:38:1b:d1:7c:22:f2:77:89:14:b5:78:18:1b:fd: 5d:3f:5a:af:66:b0:c2:f9:99:50:e2:39:40:b6:5d:1b:3e:da: 72:68:06:b4:bd:0f:3a:ed:34:3b:97:af:28:0d:52:e2:99:8e: 82:39:e0:66:69:3f:8a:16:e8:56:30:ad:f9:bf:9e:8f:1a:6a: c1:5d:ca:15:87:65:54:e4:ea:70:eb:15:17:2c:cc:09:f6:a3: e9:33:24:c7:4d:bd:b6:4a:3f:82:af:e0:1d:a8:d0:40:b4:4f: 63:f1:fd:6f:95:89:49:f6:99:70:e2:84:68:a5:ad:53:96:5f: 93:20:87:64 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYobrDlc1WBRG4ekwqn44YCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODIyMDUxNjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTEzOGZlNDA2MmY1MWQxNDZhNThhN2IwOTQ2MTY0NzNiYmYxNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9O54w9vz8zCK8oQ48pLIwChhRhB uEcH8VR1aMBPhMebtUpymEv7NI7ol20odXG35u8AaMlrUYi7Ib/oFFXAaLajTgmO qwww2EFfhFOlPEPUozDrfaTF1GBCJFVmVara8qh4ioHYBMn1Qgy/GJ163Md88gLP iKLxWaJ5oAXQNjMtOohCgxXt5afP4aoQVfxTgtTI4ILrJ70PWp7ncgeYZxSDM+6u 4efTDCbW90b62Bw64abCCVfzZyP2Ka4OctRz3I0SDhwMSWOP8e8iyoDCC0c658r2 5U4CiK1MQ7SMyWjN3uEhY6CDgxUEiDW6qT5jQQjx6cymg6xAx758+vASsQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMoTj+QGL1HRRqWKewlGFkc7vxW3MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEveWhPUDVBWXZVZEZHcFlwN0NVWVdSenVfRmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFtRsp+UQHxgWlcr+TzF xlCQGaSihTdfGosQKuptE/jarevycVcpA17thvQDoPgsJBbrwcwz9XnLvUDulOHi ZsM9PzxHvMVqcvPPfVkdaXj3VyEyHKRgybirWSfxXP5OGArQWEXM05TNef2x4jHF lutJZd+T/SvjrToInJPshxGOF0Q4G9F8IvJ3iRS1eBgb/V0/Wq9msML5mVDiOUC2 XRs+2nJoBrS9DzrtNDuXrygNUuKZjoI54GZpP4oW6FYwrfm/no8aasFdyhWHZVTk 6nDrFRcszAn2o+kzJMdNvbZKP4Kv4B2o0EC0T2Px/W+ViUn2mXDihGilrVOWX5Mg h2Q= -----END CERTIFICATE-----Generated at Sat Dec 20 05:32:27 2025 by rpki-client