This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BbfzdXLMnJjFJIbFEqppzYaKzww.roa File: BbfzdXLMnJjFJIbFEqppzYaKzww.roa (raw, json) Hash identifier: FnavkdJ7CA+w46dNVrklNG6Y1GNi9M4kJTl/jcZNdak= Subject key identifier: 05:B7:F3:75:72:CC:9C:98:C5:24:86:C5:12:AA:69:CD:86:8A:CF:0C Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018E72EC7EE31E81711CA97296A91374BFEC Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BbfzdXLMnJjFJIbFEqppzYaKzww.roa Signing time: Mon 25 Mar 2024 00:04:45 +0000 ROA not before: Mon 25 Mar 2024 00:04:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128 2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128 2001:67c:64:ffff:0:18e:72ec:6797/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:72:ec:7e:e3:1e:81:71:1c:a9:72:96:a9:13:74:bf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Mar 25 00:04:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=05b7f37572cc9c98c52486c512aa69cd868acf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:b2:25:f0:04:96:09:7e:29:30:ed:ae:61: ae:f5:37:51:a6:09:17:85:ae:e1:23:b9:45:c7:55: 9c:20:72:18:fd:86:67:40:6c:82:f8:dc:07:35:10: 78:44:37:26:22:e5:e0:00:d9:e0:a4:1c:6d:60:3a: 8e:e3:bd:23:aa:dd:f5:c4:2c:8c:98:79:cf:e9:c4: d8:e6:6f:42:b8:db:97:e2:57:7a:8f:88:76:68:e6: 2c:e6:93:47:1d:57:84:6a:ed:69:01:39:23:d0:69: 9c:85:a6:38:7d:c6:96:61:bb:3a:9b:fa:11:fd:cd: 65:7d:1a:13:50:2f:cc:9e:df:dd:3c:43:bb:dd:b0: 9e:e5:d8:3f:4a:4e:cd:d3:28:26:1d:de:ea:98:5b: 4b:2d:a7:50:bb:d5:43:f4:75:ef:ca:55:f7:fc:6e: 69:8a:86:5b:55:36:26:80:08:e0:0e:a0:35:2a:56: 90:a6:7d:d7:ee:74:be:0f:bf:5c:46:b9:f1:99:9f: 56:34:e4:2a:73:10:54:4f:7e:98:c7:66:a9:7c:90: 16:84:72:2f:fe:97:62:8c:26:27:3c:75:13:08:55: 12:70:45:ba:c5:d4:75:69:9e:8d:7e:3e:44:97:d4: 2a:64:13:a8:58:4a:74:76:cf:87:32:3b:b2:45:41: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B7:F3:75:72:CC:9C:98:C5:24:86:C5:12:AA:69:CD:86:8A:CF:0C X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BbfzdXLMnJjFJIbFEqppzYaKzww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 53:4e:81:eb:93:d4:4d:54:f5:a6:8e:75:2f:8f:40:9d:20:68: 54:1d:14:0c:d9:d5:f3:81:27:a9:80:13:79:6a:14:67:ab:12: ad:a6:c1:5f:41:71:c6:da:24:7c:eb:77:c4:d8:2d:70:eb:86: 7a:78:38:f4:b1:52:3c:d6:81:4a:c2:c5:78:e8:79:31:ac:b1: b3:f9:f5:bc:92:02:53:e3:36:19:9c:ca:6a:8b:6e:19:93:e1: 50:8c:58:fc:c0:4a:42:0a:47:f7:47:49:a5:80:37:51:80:4e: 56:9c:36:8f:2d:69:e8:42:2c:9a:91:e4:6f:79:67:a7:98:c6: 1b:b7:d3:3d:1e:b5:41:5e:53:a4:2f:d3:57:44:b3:1a:d8:8b: 58:9f:55:29:99:40:6a:16:01:7c:f4:3c:f1:06:e3:b8:bc:bd: 2f:00:18:22:2a:62:b4:15:ce:bf:33:83:54:da:61:6f:e6:24: 03:07:36:22:f6:8a:85:01:86:be:65:1d:ea:64:72:a6:da:1f: b7:27:05:c8:fd:2e:eb:dc:c5:cd:e9:00:8c:53:b7:32:65:bf: 5c:46:72:21:74:bd:3f:27:0b:66:f8:a1:fb:59:61:ec:f2:03: 30:7c:87:ee:e8:38:43:55:2b:82:d2:44:da:48:6f:73:ed:99: 8a:21:bc:d4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY5y7H7jHoFxHKlylqkTdL/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMzI1MDAwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWI3ZjM3NTcyY2M5Yzk4YzUyNDg2YzUxMmFhNjljZDg2OGFjZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEOyJfAElgl+KTDtrmGu9TdRpgkX ha7hI7lFx1WcIHIY/YZnQGyC+NwHNRB4RDcmIuXgANngpBxtYDqO470jqt31xCyM mHnP6cTY5m9CuNuX4ld6j4h2aOYs5pNHHVeEau1pATkj0GmchaY4fcaWYbs6m/oR /c1lfRoTUC/Mnt/dPEO73bCe5dg/Sk7N0ygmHd7qmFtLLadQu9VD9HXvylX3/G5p ioZbVTYmgAjgDqA1KlaQpn3X7nS+D79cRrnxmZ9WNOQqcxBUT36Yx2apfJAWhHIv /pdijCYnPHUTCFUScEW6xdR1aZ6Nfj5El9QqZBOoWEp0ds+HMjuyRUHDiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAW383VyzJyYxSSGxRKqac2Gis8MMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvQmJmemRYTE1uSmpGSkliRkVxcHB6WWFLend3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFNOgeuT1E1U9aaOdS+P QJ0gaFQdFAzZ1fOBJ6mAE3lqFGerEq2mwV9BccbaJHzrd8TYLXDrhnp4OPSxUjzW gUrCxXjoeTGssbP59bySAlPjNhmcymqLbhmT4VCMWPzASkIKR/dHSaWAN1GATlac No8taehCLJqR5G95Z6eYxhu30z0etUFeU6Qv01dEsxrYi1ifVSmZQGoWAXz0PPEG 47i8vS8AGCIqYrQVzr8zg1TaYW/mJAMHNiL2ioUBhr5lHepkcqbaH7cnBcj9Luvc xc3pAIxTtzJlv1xGciF0vT8nC2b4oftZYezyAzB8h+7oOENVK4LSRNpIb3PtmYoh vNQ= -----END CERTIFICATE-----Generated at Sat Dec 20 00:21:33 2025 by rpki-client