This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/sZtEbRrxr1LmNlSmDKIvprGRdOg.roa File: sZtEbRrxr1LmNlSmDKIvprGRdOg.roa (raw, json) Hash identifier: mhIdru9G67dZKW7tMONK7hKg4medRv7ge0kQVXuLkFY= Subject key identifier: B1:9B:44:6D:1A:F1:AF:52:E6:36:54:A6:0C:A2:2F:A6:B1:91:74:E8 Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19 Certificate serial: 019B7AC79C9FA83B39F0FF97A375EE3C2175 Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/sZtEbRrxr1LmNlSmDKIvprGRdOg.roa Signing time: Thu 01 Jan 2026 18:17:40 +0000 ROA not before: Thu 01 Jan 2026 18:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8461 IP address blocks: 193.254.216.0/23 maxlen: 23 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9c:9f:a8:3b:39:f0:ff:97:a3:75:ee:3c:21:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19 Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b19b446d1af1af52e63654a60ca22fa6b19174e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:51:ef:3f:65:c7:5e:16:0d:ed:5a:34:ad:52: cb:70:6b:4d:22:69:05:fa:fd:88:be:d9:ac:36:c1: 9c:6f:c3:6d:1e:a6:20:60:6d:04:51:33:d1:63:a2: bc:59:13:fa:9f:ba:4d:2d:8b:5a:5a:98:9f:1f:09: a4:38:b5:aa:cb:d5:8f:d4:1b:dc:6b:00:38:c0:2b: 67:42:26:42:a8:8d:e6:ba:e7:59:38:8e:05:58:77: 8f:e1:0f:4e:c1:f3:41:45:cc:4f:05:48:d6:97:ee: 21:78:df:6d:2c:3a:89:fc:91:00:c6:15:d8:19:ac: 36:27:3c:cd:e1:84:38:5f:09:df:df:ea:b8:c4:2e: e4:a4:58:0f:b9:1f:f1:e8:03:ec:8a:69:49:05:90: 5d:71:03:d6:89:01:71:dc:02:d7:d2:58:09:4e:fa: 24:85:8b:03:e4:b5:b0:07:ce:f8:4e:c1:5b:66:65: dd:1f:bb:fe:ee:6d:5f:b9:47:66:ad:1f:58:69:4b: fa:5b:da:bb:61:f9:3d:8b:b9:5e:32:4e:70:f2:74: 6d:2b:43:3f:8e:a5:7b:8e:f2:d8:35:d5:50:2f:26: aa:29:e6:f2:a7:35:1e:18:85:58:03:37:cb:ef:31: b1:86:79:f9:1a:2d:e4:8c:bc:17:30:e2:f0:a6:11: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:44:6D:1A:F1:AF:52:E6:36:54:A6:0C:A2:2F:A6:B1:91:74:E8 X509v3 Authority Key Identifier: keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/sZtEbRrxr1LmNlSmDKIvprGRdOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.254.216.0/23 Signature Algorithm: sha256WithRSAEncryption c1:32:44:73:4f:8f:09:bc:9e:f6:be:fe:f1:62:d3:ec:07:d5: 6b:b7:a2:90:7c:83:f1:df:dc:54:e4:fa:83:b8:c2:46:6e:62: 59:cb:d9:db:f9:53:d1:1e:54:77:43:aa:60:1f:87:37:c2:13: e8:52:de:94:ba:4b:b4:e9:3c:86:02:6b:e8:bb:a2:bf:a4:97: ba:6c:40:cb:94:15:9e:32:65:bf:11:22:22:06:8d:31:dd:0b: e5:8c:59:43:6f:25:b7:71:cb:bb:56:44:e8:f9:a6:7d:7c:9e: 10:6b:1c:5f:3d:59:72:72:df:6a:c2:cb:20:71:8e:6c:07:45: 03:2a:c8:d7:41:f0:a0:4b:52:12:b2:4d:08:31:8a:d4:08:13: a9:cd:9d:20:04:d3:56:77:a4:ff:3c:17:38:51:cf:6b:24:18: 6b:97:04:91:f5:96:c4:86:0e:45:bd:81:fa:57:dd:df:47:e9: 53:48:24:25:90:bb:8f:4c:a7:24:cd:f7:64:70:91:e3:b8:ca: 9f:69:fc:30:e9:10:f4:49:be:e0:de:f3:4f:cd:0f:80:3d:d4: 58:70:6f:8c:3c:ec:12:86:05:0e:c5:46:cf:62:44:27:fc:12: 41:19:de:4e:c4:58:18:3f:cb:29:82:5e:1e:53:29:8e:8c:6b: 21:c3:a9:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5yfqDs58P+Xo3XuPCF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDFhNjQ4M2RjNmY2NmI3OGE3YTQxMTJkNTg3M2RjNTY2 NDdhMTkwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTliNDQ2ZDFhZjFhZjUyZTYzNjU0YTYwY2EyMmZhNmIxOTE3NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVHvP2XHXhYN7Vo0rVLLcGtNImkF +v2IvtmsNsGcb8NtHqYgYG0EUTPRY6K8WRP6n7pNLYtaWpifHwmkOLWqy9WP1Bvc awA4wCtnQiZCqI3muudZOI4FWHeP4Q9OwfNBRcxPBUjWl+4heN9tLDqJ/JEAxhXY Gaw2JzzN4YQ4Xwnf3+q4xC7kpFgPuR/x6APsimlJBZBdcQPWiQFx3ALX0lgJTvok hYsD5LWwB874TsFbZmXdH7v+7m1fuUdmrR9YaUv6W9q7Yfk9i7leMk5w8nRtK0M/ jqV7jvLYNdVQLyaqKebypzUeGIVYAzfL7zGxhnn5Gi3kjLwXMOLwphF8gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGbRG0a8a9S5jZUpgyiL6axkXToMB8GA1UdIwQY MBaAFMQBpkg9xvZreKekES1Yc9xWZHoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YThhNjItZjU0YS00MTUwLWFkZGUt MTlkMzNlMDU1ODU3LzEvc1p0RWJScnhyMUxtTmxTbURLSXZwckdSZE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82YThhNjItZjU0YS00MTUwLWFkZGUtMTlkMzNlMDU1ODU3 LzEveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwf7YMA0G CSqGSIb3DQEBCwUAA4IBAQDBMkRzT48JvJ72vv7xYtPsB9Vrt6KQfIPx39xU5PqD uMJGbmJZy9nb+VPRHlR3Q6pgH4c3whPoUt6Uuku06TyGAmvou6K/pJe6bEDLlBWe MmW/ESIiBo0x3QvljFlDbyW3ccu7VkTo+aZ9fJ4QaxxfPVlyct9qwssgcY5sB0UD KsjXQfCgS1ISsk0IMYrUCBOpzZ0gBNNWd6T/PBc4Uc9rJBhrlwSR9ZbEhg5FvYH6 V93fR+lTSCQlkLuPTKckzfdkcJHjuMqfafww6RD0Sb7g3vNPzQ+APdRYcG+MPOwS hgUOxUbPYkQn/BJBGd5OxFgYP8spgl4eUymOjGshw6mq -----END CERTIFICATE-----Generated at Mon Jan 26 22:41:03 2026 by rpki-client