This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yjv7N_-a3QjhkquC7Rn3aTEdxAI.roa File: yjv7N_-a3QjhkquC7Rn3aTEdxAI.roa (raw, json) Hash identifier: MQtjssnVTMOH0xPrXC8SeH2tRmazY0xc9dApiop6b6w= Subject key identifier: CA:3B:FB:37:FF:9A:DD:08:E1:92:AB:82:ED:19:F7:69:31:1D:C4:02 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A051A4E85C0C755F896D37B8ECFF82804 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yjv7N_-a3QjhkquC7Rn3aTEdxAI.roa Signing time: Thu 17 Aug 2023 20:05:24 +0000 ROA not before: Thu 17 Aug 2023 20:05:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 2001:67c:64:ffff:0:18a:519:7fd5/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:05:1a:4e:85:c0:c7:55:f8:96:d3:7b:8e:cf:f8:28:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 17 20:05:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ca3bfb37ff9add08e192ab82ed19f769311dc402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:79:8a:fc:00:1c:6b:8b:7a:ae:c7:13:63: 93:8f:23:54:c8:b1:bc:dd:16:c2:a4:97:bc:30:e8: 40:fd:85:7e:21:14:e5:5c:db:ef:35:0f:b7:20:91: 58:d8:7d:da:65:6d:18:f6:cd:76:d9:0f:44:b6:3b: 96:be:ea:f0:32:12:c2:ff:9d:18:d8:0d:eb:ac:92: e3:89:bd:ff:18:92:c3:51:0c:29:54:10:66:44:48: 3c:a4:20:42:41:a3:09:d0:c6:81:03:17:d3:68:3b: 3c:50:ff:4c:74:dd:36:ae:4c:17:bf:d6:d0:22:b0: 73:94:3b:28:c4:c4:c9:4f:a5:f1:4b:76:9a:a2:d6: 2b:ce:3d:99:7f:21:2b:dd:50:84:83:c2:6b:d4:46: c6:87:da:44:9a:b6:ae:0a:f2:8e:98:77:19:2f:ce: 9e:9d:50:94:a7:e5:e3:7f:2b:09:bc:dc:e7:79:d8: 47:56:91:ce:75:9b:d2:88:b9:06:d3:87:db:30:e3: 84:e0:26:6f:19:81:00:58:2e:f9:b3:1d:16:16:8e: a2:8e:6e:70:5f:b4:3e:78:85:85:01:b2:77:66:3b: 9f:a1:85:6a:25:6c:bc:21:66:0f:92:52:de:2f:73: e8:48:4c:24:6d:13:82:9a:dd:49:71:f2:ec:15:41: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3B:FB:37:FF:9A:DD:08:E1:92:AB:82:ED:19:F7:69:31:1D:C4:02 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yjv7N_-a3QjhkquC7Rn3aTEdxAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 86:ad:be:f1:39:4c:6d:a7:06:48:60:c2:7a:63:42:c4:b5:a8: b4:02:b8:17:0b:ca:c2:2b:14:f1:a2:98:ab:f2:98:d6:af:41: f6:e3:5b:37:33:1b:08:04:a0:14:f2:67:1a:51:16:91:20:9a: c0:37:ba:2e:94:cb:24:9a:d7:e4:42:18:20:d1:23:d0:b0:61: 70:f5:4d:da:90:65:c9:f9:13:c1:a4:ec:e1:c9:0f:99:d6:ef: 0d:37:34:ae:84:35:91:03:f6:08:10:37:5d:c5:aa:81:19:d5: 55:43:15:ea:67:9e:d9:be:b9:2f:53:82:5d:9e:59:57:66:31: ed:3e:b7:77:50:c3:43:06:82:15:f6:e1:9c:9d:9b:02:d1:7b: 84:23:cb:32:1f:20:d7:47:9f:98:9d:a8:51:ea:d6:d2:17:d1: 92:3f:b7:66:43:5e:c3:ef:c4:11:cd:98:ed:af:f1:35:7d:f3: 92:4c:67:c3:25:0d:26:bf:da:db:3b:a7:f3:5b:1f:bc:09:60: f3:29:39:1a:b8:3f:65:fa:f4:bb:e4:89:db:18:35:d0:8b:ee: f2:62:9a:dd:42:72:82:17:a4:6b:54:36:c9:32:e8:34:04:0f: f3:31:78:8f:fa:b5:80:b3:da:76:c2:4f:c5:1a:d0:d5:d1:13: 8f:a7:37:d7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYoFGk6FwMdV+JbTe47P+CgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE3MjAwNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTNiZmIzN2ZmOWFkZDA4ZTE5MmFiODJlZDE5Zjc2OTMxMWRjNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOx5ivwAHGuLeq7HE2OTjyNUyLG8 3RbCpJe8MOhA/YV+IRTlXNvvNQ+3IJFY2H3aZW0Y9s122Q9EtjuWvurwMhLC/50Y 2A3rrJLjib3/GJLDUQwpVBBmREg8pCBCQaMJ0MaBAxfTaDs8UP9MdN02rkwXv9bQ IrBzlDsoxMTJT6XxS3aaotYrzj2ZfyEr3VCEg8Jr1EbGh9pEmrauCvKOmHcZL86e nVCUp+XjfysJvNznedhHVpHOdZvSiLkG04fbMOOE4CZvGYEAWC75sx0WFo6ijm5w X7Q+eIWFAbJ3ZjufoYVqJWy8IWYPklLeL3PoSEwkbROCmt1JcfLsFUHMwQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMo7+zf/mt0I4ZKrgu0Z92kxHcQCMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEveWp2N05fLWEzUWpoa3F1QzdSbjNhVEVkeEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIatvvE5TG2nBkhgwnpj QsS1qLQCuBcLysIrFPGimKvymNavQfbjWzczGwgEoBTyZxpRFpEgmsA3ui6UyySa 1+RCGCDRI9CwYXD1TdqQZcn5E8Gk7OHJD5nW7w03NK6ENZED9ggQN13FqoEZ1VVD Fepnntm+uS9Tgl2eWVdmMe0+t3dQw0MGghX24ZydmwLRe4QjyzIfINdHn5idqFHq 1tIX0ZI/t2ZDXsPvxBHNmO2v8TV985JMZ8MlDSa/2ts7p/NbH7wJYPMpORq4P2X6 9LvkidsYNdCL7vJimt1CcoIXpGtUNsky6DQED/MxeI/6tYCz2nbCT8Ua0NXRE4+n N9c= -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:43 2025 by rpki-client