This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fh59IgtpnJj59nu163Zm-fI11SE.roa File: Fh59IgtpnJj59nu163Zm-fI11SE.roa (raw, json) Hash identifier: rYBWpCOu0Q4WxHQth2RdJP36N9dP8TYGXkSGQF89Fis= Subject key identifier: 16:1E:7D:22:0B:69:9C:98:F9:F6:7B:B5:EB:76:66:F9:F2:35:D5:21 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018EC36A1274592DB36E09B0BB4C392CB24A Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fh59IgtpnJj59nu163Zm-fI11SE.roa Signing time: Tue 09 Apr 2024 15:11:32 +0000 ROA not before: Tue 09 Apr 2024 15:11:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:c3:6a:12:74:59:2d:b3:6e:09:b0:bb:4c:39:2c:b2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Apr 9 15:11:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=161e7d220b699c98f9f67bb5eb7666f9f235d521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:82:dd:63:94:eb:68:2e:8a:6a:74:a1:f5:9e: ed:76:51:ae:6f:ae:5b:ff:f2:dc:43:0d:e7:b9:b4: 8a:3c:2d:ee:d1:b5:b2:7c:19:c7:34:9f:f3:1b:66: db:11:dd:3c:5a:0f:4c:4b:a7:84:73:36:e5:f6:c5: 5d:bb:d4:12:57:d5:54:5b:d6:ef:ba:dd:b9:ee:e3: 60:77:0b:57:3f:1d:20:60:00:8c:7e:8f:b3:1d:60: 79:0e:48:ea:22:7c:df:e0:2c:13:b5:9b:56:c4:97: ed:00:b8:2d:91:dd:a0:bf:16:5d:6b:d2:0b:a6:75: 8c:7c:b7:9a:5a:b1:46:42:82:b6:f1:87:93:b8:11: 84:af:e7:e7:1e:b8:54:ff:1b:06:c3:54:67:86:13: 76:75:cb:10:e4:fd:58:93:b8:01:d4:9d:ed:3c:f1: e0:0a:44:b6:23:70:fa:f6:d6:4f:4d:64:46:f1:b1: 78:ff:d6:eb:fe:e7:32:d3:e9:6d:50:30:98:fe:58: 12:90:7a:91:b1:c3:4d:8f:e7:58:0c:7d:c3:ce:42: 5a:cf:49:7f:ef:23:b8:aa:20:b9:1c:69:d0:b9:3c: 3f:e5:f1:c8:f2:8d:63:6b:19:34:67:4a:28:1e:85: be:de:58:22:4c:01:ca:bc:b7:f2:bb:52:99:00:db: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1E:7D:22:0B:69:9C:98:F9:F6:7B:B5:EB:76:66:F9:F2:35:D5:21 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fh59IgtpnJj59nu163Zm-fI11SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 82:3e:d5:91:8f:5b:56:08:ae:7f:24:74:64:91:d7:2e:92:47: 31:57:ed:51:e0:79:0d:ec:a6:95:f6:26:dd:d4:e8:13:10:73: e0:bb:4a:c3:39:59:4c:ed:1f:d8:32:cb:d4:fc:1e:fa:98:79: ac:84:7e:fc:b6:6b:de:ab:a0:5f:82:b9:f7:16:64:22:b9:2c: 71:89:09:73:d3:e0:fa:88:aa:6f:70:5b:c6:17:0b:d5:2a:2a: 93:c7:a0:f6:ac:c2:22:16:7d:ce:76:45:82:6b:42:0f:40:2a: 62:27:7e:b2:a9:38:a0:38:e6:e7:1e:29:ee:0f:d5:48:a4:1b: 57:b7:90:70:39:e7:15:f0:b6:1c:c3:19:28:5d:5f:3d:3e:56: 19:fa:28:4f:0d:46:d2:e8:f8:bb:f9:68:31:e1:6e:d0:5b:b0: 6a:8b:8a:9d:40:cb:17:3c:52:91:b6:ac:91:3a:f3:bd:6b:25: 16:f1:88:42:82:77:bf:79:9b:8e:d8:57:75:01:ce:e7:fb:a6: be:bd:60:95:30:36:19:04:7c:f9:a1:94:62:30:bd:fd:c1:d7: 85:f9:59:e8:1b:6f:44:64:ac:e5:8c:fc:6f:77:05:8e:c8:e4: 8d:a0:f6:47:a8:73:25:ea:65:f7:1a:d0:11:f0:e9:f8:3f:fd: 27:32:a5:7f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY7DahJ0WS2zbgmwu0w5LLJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwNDA5MTUxMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjFlN2QyMjBiNjk5Yzk4ZjlmNjdiYjVlYjc2NjZmOWYyMzVkNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioLdY5TraC6KanSh9Z7tdlGub65b //LcQw3nubSKPC3u0bWyfBnHNJ/zG2bbEd08Wg9MS6eEczbl9sVdu9QSV9VUW9bv ut257uNgdwtXPx0gYACMfo+zHWB5DkjqInzf4CwTtZtWxJftALgtkd2gvxZda9IL pnWMfLeaWrFGQoK28YeTuBGEr+fnHrhU/xsGw1RnhhN2dcsQ5P1Yk7gB1J3tPPHg CkS2I3D69tZPTWRG8bF4/9br/ucy0+ltUDCY/lgSkHqRscNNj+dYDH3DzkJaz0l/ 7yO4qiC5HGnQuTw/5fHI8o1jaxk0Z0ooHoW+3lgiTAHKvLfyu1KZANuEmwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBYefSILaZyY+fZ7tet2ZvnyNdUhMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvRmg1OUlndHBuSmo1OW51MTYzWm0tZkkxMVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAII+1ZGPW1YIrn8kdGSR 1y6SRzFX7VHgeQ3sppX2Jt3U6BMQc+C7SsM5WUztH9gyy9T8HvqYeayEfvy2a96r oF+CufcWZCK5LHGJCXPT4PqIqm9wW8YXC9UqKpPHoPaswiIWfc52RYJrQg9AKmIn frKpOKA45uceKe4P1UikG1e3kHA55xXwthzDGShdXz0+Vhn6KE8NRtLo+Lv5aDHh btBbsGqLip1Ayxc8UpG2rJE6871rJRbxiEKCd795m47YV3UBzuf7pr69YJUwNhkE fPmhlGIwvf3B14X5Wegbb0RkrOWM/G93BY7I5I2g9keocyXqZfca0BHw6fg//Scy pX8= -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:37 2025 by rpki-client