This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z18FTQsGpfJ7gxk4HXgH8r8pvks.roa File: z18FTQsGpfJ7gxk4HXgH8r8pvks.roa (raw, json) Hash identifier: biPZ5u+4J2tWWnCbs+5GoTqS25P7+L044jsvRw5APvY= Subject key identifier: CF:5F:05:4D:0B:06:A5:F2:7B:83:19:38:1D:78:07:F2:BF:29:BE:4B Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A3E381D90093B6943533AC3242DC4E427 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z18FTQsGpfJ7gxk4HXgH8r8pvks.roa Signing time: Mon 28 Aug 2023 22:16:19 +0000 ROA not before: Mon 28 Aug 2023 22:16:19 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:3e:38:1d:90:09:3b:69:43:53:3a:c3:24:2d:c4:e4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 28 22:16:19 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=cf5f054d0b06a5f27b8319381d7807f2bf29be4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:26:4f:f9:cd:96:c4:57:7d:6d:a0:3a:ee:49: f9:f9:fd:4d:87:ce:f8:c0:2f:b5:4d:a2:68:3a:30: f5:0c:f2:4f:2c:56:8d:49:15:ab:a1:8a:92:0c:4c: 93:2b:c6:7b:3d:8e:0d:19:59:12:bd:55:6c:77:2e: 6d:c7:07:81:b2:18:ea:eb:af:03:2b:b6:08:a0:c9: ad:91:4e:eb:48:e1:92:c3:0a:8a:e4:d8:e9:67:bb: 01:0d:81:20:6d:d1:bf:72:7d:8b:60:cc:8c:3d:8d: 5e:33:c6:8f:3a:48:0d:f1:cd:a4:75:1c:dd:69:51: 6c:ad:e4:90:50:dd:4a:6a:9e:08:4a:05:fb:b6:71: b6:52:c0:40:8f:9c:44:d7:6e:12:7f:f9:b4:41:1c: a3:52:6d:eb:47:44:0f:80:19:1b:3f:8e:5b:6e:ba: 24:a1:e8:b5:bd:33:38:d1:1b:bb:85:7e:2a:75:c5: e6:27:49:d6:7c:20:23:eb:10:c1:c6:d0:91:26:a7: da:40:fd:29:27:3d:11:88:86:40:fa:12:ec:96:aa: 52:2d:f3:5a:5f:3a:ed:c2:97:dc:4c:ba:39:47:d7: f4:0b:cc:94:22:7c:38:44:e1:c1:cb:fb:3c:01:4e: 09:cf:86:3b:97:56:45:e1:0c:6d:e8:b6:c2:7c:02: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5F:05:4D:0B:06:A5:F2:7B:83:19:38:1D:78:07:F2:BF:29:BE:4B X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z18FTQsGpfJ7gxk4HXgH8r8pvks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 20:67:00:1e:33:4e:bd:6b:16:8a:c6:19:5f:c5:f7:97:2a:ca: d1:bb:82:90:a2:cb:00:54:df:3e:5d:aa:fa:05:2d:43:4d:19: 10:4e:2a:4e:e6:1c:ac:9c:ba:ba:bf:67:fa:43:c6:d3:c1:21: 2b:83:4d:8c:0a:17:2e:9b:98:63:80:2a:6b:7c:b0:8d:75:be: 31:da:7a:4f:ce:85:86:5a:1b:f6:6e:70:89:8b:e9:c0:9a:ac: 3c:0c:8a:fb:86:13:b7:4b:17:61:48:0d:b2:e7:c8:ee:29:22: fa:9c:22:00:3e:8a:87:2e:26:8c:85:5b:ec:e3:fa:72:92:17: ba:ae:4e:22:cf:86:98:de:15:09:02:75:e9:f8:ac:2b:54:25: 5d:74:89:56:c0:1d:96:c4:2a:2d:57:ce:2d:da:60:d2:d0:b1: 64:b1:87:70:c1:68:79:9a:44:a3:87:cc:cf:88:67:f3:7b:3d: ff:68:07:72:e2:80:92:1b:7b:e6:f6:a9:90:13:9c:25:48:1b: 53:fa:8e:6e:a2:d1:a0:21:3c:46:43:bb:4a:91:7b:f2:cd:7e: 3a:f7:77:cc:b7:4b:d8:fc:fe:07:8a:8d:30:18:71:22:36:d5: db:56:96:0b:31:14:b0:d2:23:14:3a:cc:40:45:9d:62:c7:e7: 2a:50:bf:b0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYo+OB2QCTtpQ1M6wyQtxOQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODI4MjIxNjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjVmMDU0ZDBiMDZhNWYyN2I4MzE5MzgxZDc4MDdmMmJmMjliZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iZP+c2WxFd9baA67kn5+f1Nh874 wC+1TaJoOjD1DPJPLFaNSRWroYqSDEyTK8Z7PY4NGVkSvVVsdy5txweBshjq668D K7YIoMmtkU7rSOGSwwqK5NjpZ7sBDYEgbdG/cn2LYMyMPY1eM8aPOkgN8c2kdRzd aVFsreSQUN1Kap4ISgX7tnG2UsBAj5xE124Sf/m0QRyjUm3rR0QPgBkbP45bbrok oei1vTM40Ru7hX4qdcXmJ0nWfCAj6xDBxtCRJqfaQP0pJz0RiIZA+hLslqpSLfNa XzrtwpfcTLo5R9f0C8yUInw4ROHBy/s8AU4Jz4Y7l1ZF4Qxt6LbCfAKAZQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM9fBU0LBqXye4MZOB14B/K/Kb5LMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvejE4RlRRc0dwZko3Z3hrNEhYZ0g4cjhwdmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACBnAB4zTr1rForGGV/F 95cqytG7gpCiywBU3z5dqvoFLUNNGRBOKk7mHKycurq/Z/pDxtPBISuDTYwKFy6b mGOAKmt8sI11vjHaek/OhYZaG/ZucImL6cCarDwMivuGE7dLF2FIDbLnyO4pIvqc IgA+iocuJoyFW+zj+nKSF7quTiLPhpjeFQkCden4rCtUJV10iVbAHZbEKi1Xzi3a YNLQsWSxh3DBaHmaRKOHzM+IZ/N7Pf9oB3LigJIbe+b2qZATnCVIG1P6jm6i0aAh PEZDu0qRe/LNfjr3d8y3S9j8/geKjTAYcSI21dtWlgsxFLDSIxQ6zEBFnWLH5ypQ v7A= -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:23 2025 by rpki-client