This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zKNxTN1aN8sfTn3DGE1OoWRqSXg.roa File: zKNxTN1aN8sfTn3DGE1OoWRqSXg.roa (raw, json) Hash identifier: noOKl0HJ6UfbBF/7Eu29ncNLhfH/vr6T9ZVMY8Z+cC0= Subject key identifier: CC:A3:71:4C:DD:5A:37:CB:1F:4E:7D:C3:18:4D:4E:A1:64:6A:49:78 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 91D984C2 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zKNxTN1aN8sfTn3DGE1OoWRqSXg.roa Signing time: Sat 02 Jul 2022 20:11:25 +0000 ROA not before: Sat 02 Jul 2022 20:11:25 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2446951618 (0x91d984c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 2 20:11:25 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=cca3714cdd5a37cb1f4e7dc3184d4ea1646a4978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:74:21:03:a7:6e:8f:8d:56:52:07:d3:3b:d8: a0:f1:d4:8d:df:e2:9a:bd:f5:7d:c6:9c:0f:83:8f: 91:4f:a3:c5:cd:38:c7:e3:2e:f6:7d:ee:b8:93:eb: f2:19:67:cf:87:32:72:df:a1:2f:f9:30:be:4c:f8: e8:c8:08:d0:ae:0b:09:2e:bf:e2:f7:48:55:08:0f: 10:2e:b6:2d:73:39:c6:3f:c1:b2:56:38:96:bf:aa: b4:56:7f:e9:08:90:c2:13:eb:08:12:89:fd:33:05: b8:cc:3c:fe:67:4c:eb:79:1d:02:41:c6:d7:30:24: af:ba:93:f2:ee:e8:69:6f:a1:11:ea:55:92:bd:17: 2a:23:32:dc:a6:44:31:41:ef:70:36:01:2b:f1:a6: c7:83:48:b2:8f:5c:ce:91:2b:0b:0e:1e:8e:4f:41: 4d:ca:77:cf:5b:06:3c:10:8e:ad:14:89:a2:5f:f4: 94:77:3b:df:b5:3b:3c:e1:7f:ed:14:54:97:e1:b1: 52:2b:e6:b2:30:ee:e1:5d:7c:6a:87:8c:68:16:de: 14:2c:11:a3:d2:fb:9a:fc:bb:af:f0:f9:83:b0:e9: 97:20:41:d5:43:21:2f:59:a0:c3:8d:c8:53:f4:0a: fc:7a:bc:a0:02:79:d7:9e:77:0f:9d:96:7b:56:f7: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A3:71:4C:DD:5A:37:CB:1F:4E:7D:C3:18:4D:4E:A1:64:6A:49:78 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zKNxTN1aN8sfTn3DGE1OoWRqSXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 6a:3a:bc:5d:e5:51:59:ec:33:29:33:8e:92:44:bf:26:e8:1f: 0e:1f:5d:20:7e:90:d8:ab:d5:5f:41:7d:13:b5:a0:38:94:98: a9:3e:ab:b7:2a:86:23:4c:4a:2d:40:a8:5a:ea:bc:09:03:fa: b6:f7:73:5b:39:49:02:8d:25:73:9c:5a:0b:3b:29:12:b2:1f: 21:3e:41:7b:0a:d9:ba:3d:24:70:e9:fc:aa:74:a4:eb:18:ec: de:1a:f6:c3:a5:54:7a:aa:06:d1:db:69:4d:b5:da:a7:b6:73: 9e:d6:c9:77:96:b6:44:17:92:4c:b1:2f:56:df:8b:21:c3:8d: d2:52:38:d9:8f:0b:fe:fd:eb:39:e6:29:e4:c2:3a:d6:37:6c: 4a:67:13:83:c9:d1:6b:c1:69:4d:e1:2d:97:66:24:bd:bc:11: 75:7b:d8:a0:5d:00:c4:d8:ed:6c:b0:a0:d3:d0:89:50:a9:5d: 44:31:24:e4:3c:8d:28:4c:61:fa:fc:b0:9b:88:63:e7:31:bf: 50:1d:70:ac:62:ee:a5:f6:73:9d:18:f6:3a:4f:85:ac:b4:b7: 59:5b:22:12:36:49:13:50:e4:8d:76:68:df:0e:6b:e6:92:d6: f4:20:3f:3c:82:4a:d7:e3:31:29:1b:4e:17:95:c4:8b:87:e6: 4b:0b:bb:7d -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIFAJHZhMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA3 MDIyMDExMjVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGNjYTM3MTRjZGQ1 YTM3Y2IxZjRlN2RjMzE4NGQ0ZWExNjQ2YTQ5NzgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIdCEDp26PjVZSB9M72KDx1I3f4pq99X3GnA+Dj5FPo8XN OMfjLvZ97riT6/IZZ8+HMnLfoS/5ML5M+OjICNCuCwkuv+L3SFUIDxAuti1zOcY/ wbJWOJa/qrRWf+kIkMIT6wgSif0zBbjMPP5nTOt5HQJBxtcwJK+6k/Lu6GlvoRHq VZK9FyojMtymRDFB73A2ASvxpseDSLKPXM6RKwsOHo5PQU3Kd89bBjwQjq0UiaJf 9JR3O9+1Ozzhf+0UVJfhsVIr5rIw7uFdfGqHjGgW3hQsEaPS+5r8u6/w+YOw6Zcg QdVDIS9ZoMONyFP0Cvx6vKACedeedw+dlntW9/b/AgMBAAGjggIaMIICFjAdBgNV HQ4EFgQUzKNxTN1aN8sfTn3DGE1OoWRqSXgwHwYDVR0jBBgwFoAUcgR74VsnWQLc 9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv MS96S054VE4xYU44c2ZUbjNER0UxT29XUnFTWGcucm9hMIGBBgNVHR8EejB4MHag dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA ZDANBgkqhkiG9w0BAQsFAAOCAQEAajq8XeVRWewzKTOOkkS/JugfDh9dIH6Q2KvV X0F9E7WgOJSYqT6rtyqGI0xKLUCoWuq8CQP6tvdzWzlJAo0lc5xaCzspErIfIT5B ewrZuj0kcOn8qnSk6xjs3hr2w6VUeqoG0dtpTbXap7ZzntbJd5a2RBeSTLEvVt+L IcON0lI42Y8L/v3rOeYp5MI61jdsSmcTg8nRa8FpTeEtl2YkvbwRdXvYoF0AxNjt bLCg09CJUKldRDEk5DyNKExh+vywm4hj5zG/UB1wrGLupfZznRj2Ok+FrLS3WVsi EjZJE1DkjXZo3w5r5pLW9CA/PIJK1+MxKRtOF5XEi4fmSwu7fQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:49:50 2025 by rpki-client