This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BiaM1E0mfWq5PdC0T49RTY8Rtr4.roa File: BiaM1E0mfWq5PdC0T49RTY8Rtr4.roa (raw, json) Hash identifier: EkqVvDbIRcF+/ERMcdB7TCkabO0Zben77J3aLgPHLLM= Subject key identifier: 06:26:8C:D4:4D:26:7D:6A:B9:3D:D0:B4:4F:8F:51:4D:8F:11:B6:BE Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018E85A546F679C151C7E590C65529D43056 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BiaM1E0mfWq5PdC0T49RTY8Rtr4.roa Signing time: Thu 28 Mar 2024 15:19:45 +0000 ROA not before: Thu 28 Mar 2024 15:19:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128 2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128 2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:85:a5:46:f6:79:c1:51:c7:e5:90:c6:55:29:d4:30:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Mar 28 15:19:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=06268cd44d267d6ab93dd0b44f8f514d8f11b6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:c8:21:8c:18:b8:cf:74:bf:a9:f3:25:4e: 26:29:cc:85:3e:a9:36:d9:30:f9:ac:7e:9f:d2:9f: 91:ec:30:ad:1d:25:70:14:b4:8b:dc:09:e2:61:d3: b9:fe:80:12:1c:9b:a3:5e:46:3c:b0:0b:ec:b9:58: 3b:9c:d8:0c:bd:47:36:cd:80:9c:d4:2b:02:f0:df: 4b:4b:0b:6d:69:6c:67:a5:84:3b:f6:be:20:e6:65: 13:35:2e:0c:87:e2:83:6d:4b:b2:ef:52:78:c8:0d: 58:e0:83:23:f9:d4:7a:14:0a:ba:65:4a:2d:d3:a9: f2:a6:77:b2:ce:1c:b0:4f:c5:50:a7:33:3f:bf:09: e1:32:13:5c:a6:83:1b:81:3d:84:38:38:63:90:53: 42:bc:3c:ee:ea:ee:98:a5:00:36:2e:b0:40:9b:4d: 1c:c5:b3:a6:3c:07:9f:ea:0e:6f:eb:5a:4b:f2:b8: 74:8e:d7:45:90:18:f6:39:52:fe:27:db:cc:8c:2e: 61:e8:87:9b:d8:12:f6:d5:20:ab:00:15:b5:22:79: 01:34:32:c7:a2:af:56:10:83:f8:be:ac:76:46:05: 76:82:7d:3c:fd:9c:6e:d3:5d:f6:1f:20:8e:87:ab: 08:c6:60:8f:b2:8a:a4:c1:15:07:a7:be:fb:26:79: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:26:8C:D4:4D:26:7D:6A:B9:3D:D0:B4:4F:8F:51:4D:8F:11:B6:BE X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BiaM1E0mfWq5PdC0T49RTY8Rtr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 11:ae:83:58:af:75:79:58:8a:54:bc:af:9b:e1:8b:fa:6f:ad: 76:27:5e:6f:04:1b:e4:f8:d7:78:c7:b7:04:3c:69:6b:0a:22: 90:8e:06:b9:cb:11:b6:2a:e5:ca:7d:19:f3:0f:fb:61:79:8b: d3:9e:cc:b6:98:4f:d7:00:30:a2:0f:5a:05:99:5b:0c:6c:64: 9d:30:2a:02:30:cd:ed:a1:0a:8c:88:15:14:d3:c6:b9:96:10: 6e:03:22:a0:ad:d3:67:71:2f:35:99:91:2e:93:e8:36:03:a5: 28:55:32:03:90:79:35:18:e3:e6:1d:d3:74:9e:67:32:92:1f: 48:4e:51:93:8e:89:4e:7d:05:63:69:34:d1:f0:bb:20:7d:a6: da:fb:0c:96:51:d7:e6:ce:07:dd:d0:fe:65:b6:aa:21:2f:de: 4c:66:e6:d8:e8:73:34:63:e5:2a:f5:09:aa:9b:d8:6c:47:0f: d3:6b:ad:d5:de:51:fd:9c:e7:f8:fe:e1:a3:d4:e9:af:5e:77: 8c:e2:20:aa:b0:f8:43:8e:18:35:3c:e8:e5:05:33:43:da:54: f8:c7:f1:63:e7:f9:e3:1a:7c:51:3c:49:a9:db:9c:d1:35:29: 32:90:48:70:86:ec:69:df:9f:a8:ad:cd:a1:d7:fb:89:51:c5: 40:84:ff:dc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY6FpUb2ecFRx+WQxlUp1DBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMzI4MTUxOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjI2OGNkNDRkMjY3ZDZhYjkzZGQwYjQ0ZjhmNTE0ZDhmMTFiNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnknIIYwYuM90v6nzJU4mKcyFPqk2 2TD5rH6f0p+R7DCtHSVwFLSL3AniYdO5/oASHJujXkY8sAvsuVg7nNgMvUc2zYCc 1CsC8N9LSwttaWxnpYQ79r4g5mUTNS4Mh+KDbUuy71J4yA1Y4IMj+dR6FAq6ZUot 06nypneyzhywT8VQpzM/vwnhMhNcpoMbgT2EODhjkFNCvDzu6u6YpQA2LrBAm00c xbOmPAef6g5v61pL8rh0jtdFkBj2OVL+J9vMjC5h6Ieb2BL21SCrABW1InkBNDLH oq9WEIP4vqx2RgV2gn08/Zxu0132HyCOh6sIxmCPsoqkwRUHp777JnmRqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAYmjNRNJn1quT3QtE+PUU2PEba+MB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvQmlhTTFFMG1mV3E1UGRDMFQ0OVJUWThSdHI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABGug1ivdXlYilS8r5vh i/pvrXYnXm8EG+T413jHtwQ8aWsKIpCOBrnLEbYq5cp9GfMP+2F5i9OezLaYT9cA MKIPWgWZWwxsZJ0wKgIwze2hCoyIFRTTxrmWEG4DIqCt02dxLzWZkS6T6DYDpShV MgOQeTUY4+Yd03SeZzKSH0hOUZOOiU59BWNpNNHwuyB9ptr7DJZR1+bOB93Q/mW2 qiEv3kxm5tjoczRj5Sr1Caqb2GxHD9NrrdXeUf2c5/j+4aPU6a9ed4ziIKqw+EOO GDU86OUFM0PaVPjH8WPn+eMafFE8SanbnNE1KTKQSHCG7Gnfn6itzaHX+4lRxUCE /9w= -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:56 2025 by rpki-client