This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NN4Rut3jxqxgY55qbDhy4ghi-cE.roa File: NN4Rut3jxqxgY55qbDhy4ghi-cE.roa (raw, json) Hash identifier: Ue8WELwLs8wsOT4IIyXzl5KdVFvwzI7b+FqBr5NWc78= Subject key identifier: 34:DE:11:BA:DD:E3:C6:AC:60:63:9E:6A:6C:38:72:E2:08:62:F9:C1 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018E99FA0C7D319987657433D0FC3F021B82 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NN4Rut3jxqxgY55qbDhy4ghi-cE.roa Signing time: Mon 01 Apr 2024 14:04:44 +0000 ROA not before: Mon 01 Apr 2024 14:04:44 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128 2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128 2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128 2001:67c:64:ffff:0:18e:99f9:a5f4/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:99:fa:0c:7d:31:99:87:65:74:33:d0:fc:3f:02:1b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Apr 1 14:04:44 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=34de11badde3c6ac60639e6a6c3872e20862f9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:a7:f7:41:2b:88:f4:38:35:93:fa:74:03: 55:3f:fd:f1:02:95:b5:45:03:30:4f:0f:bc:f4:45: a1:92:50:ee:10:00:7c:ec:24:ec:b4:3e:23:52:03: b5:58:f6:ef:d8:61:aa:49:92:f8:cb:b8:e7:97:12: 94:48:12:d2:65:70:f7:10:a4:4a:72:08:ba:cb:12: 6f:20:ac:d3:ad:16:0d:94:b3:2e:fa:1d:6b:b6:c4: 9a:d8:d1:60:20:39:32:77:5f:0f:22:49:03:f2:f7: a9:ec:b7:c1:20:1a:d4:0a:23:72:c0:fe:fa:77:1e: df:00:40:43:29:bc:11:15:34:d5:9b:da:42:4c:c9: 9d:f2:de:da:f9:d8:5e:91:16:19:7c:fc:50:13:bf: 89:51:ac:f0:c9:04:b6:35:db:63:c7:7f:38:38:52: cd:00:a0:92:34:6d:1a:52:86:c9:45:7c:22:cc:05: a0:b1:0f:65:67:d5:98:a5:56:2e:74:f1:06:1f:46: 41:fe:0c:0d:ff:7e:2e:0d:e9:00:e8:9f:ab:2e:fd: a5:d1:15:1a:45:d5:a0:26:e8:1c:1b:5c:0b:d5:03: 05:a5:ac:85:8c:30:aa:0e:02:11:c6:3b:7e:c6:26: 9a:04:6c:b1:16:a4:3d:0a:d3:1f:6f:c8:3a:93:d3: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DE:11:BA:DD:E3:C6:AC:60:63:9E:6A:6C:38:72:E2:08:62:F9:C1 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NN4Rut3jxqxgY55qbDhy4ghi-cE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 1b:83:da:76:ea:44:06:c1:d9:94:20:d5:3b:29:07:fd:f3:31: ef:95:30:71:99:8f:1a:65:86:94:72:ff:71:c3:89:ea:7a:db: e6:b3:ca:f4:2c:e4:de:e9:a0:73:4c:93:8c:1a:b9:b8:cc:71: 27:e4:2f:0b:83:db:0b:31:85:42:69:89:a7:7d:c2:7d:ef:8a: 26:f8:4e:b6:73:fa:4f:bf:55:bc:35:1d:87:f8:8e:43:d6:ae: 9b:20:c5:9e:4e:57:a4:69:cc:47:44:26:68:52:63:b0:30:1a: fa:d8:f6:c1:0b:08:63:4f:41:98:97:02:ef:39:10:e0:2e:90: 9b:b5:38:8d:e7:da:88:66:32:57:9c:d3:dd:15:f4:5a:88:64: 23:eb:b0:9e:82:94:20:69:89:a7:a9:49:50:65:ee:09:93:38: dd:b6:65:c0:81:7f:81:e9:2d:4f:3b:6b:0a:61:cc:bd:dd:02: 7c:14:36:dd:b7:fe:fa:f4:4f:5b:a7:27:81:e6:ee:9d:1e:f1: 90:0c:70:00:fe:77:f7:5f:cb:db:80:72:bb:24:4b:2b:62:f1: a9:aa:ea:c8:0f:b1:53:a6:6f:79:9a:07:7a:84:eb:90:a5:8a: ec:f2:86:fe:01:2e:cf:9c:fa:70:c1:05:79:d2:af:ce:64:0f: 31:b7:92:d2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY6Z+gx9MZmHZXQz0Pw/AhuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwNDAxMTQwNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGRlMTFiYWRkZTNjNmFjNjA2MzllNmE2YzM4NzJlMjA4NjJmOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnECn90EriPQ4NZP6dANVP/3xApW1 RQMwTw+89EWhklDuEAB87CTstD4jUgO1WPbv2GGqSZL4y7jnlxKUSBLSZXD3EKRK cgi6yxJvIKzTrRYNlLMu+h1rtsSa2NFgIDkyd18PIkkD8vep7LfBIBrUCiNywP76 dx7fAEBDKbwRFTTVm9pCTMmd8t7a+dhekRYZfPxQE7+JUazwyQS2Ndtjx384OFLN AKCSNG0aUobJRXwizAWgsQ9lZ9WYpVYudPEGH0ZB/gwN/34uDekA6J+rLv2l0RUa RdWgJugcG1wL1QMFpayFjDCqDgIRxjt+xiaaBGyxFqQ9CtMfb8g6k9MJMwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDTeEbrd48asYGOeamw4cuIIYvnBMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvTk40UnV0M2p4cXhnWTU1cWJEaHk0Z2hpLWNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABuD2nbqRAbB2ZQg1Tsp B/3zMe+VMHGZjxplhpRy/3HDiep62+azyvQs5N7poHNMk4waubjMcSfkLwuD2wsx hUJpiad9wn3viib4TrZz+k+/Vbw1HYf4jkPWrpsgxZ5OV6RpzEdEJmhSY7AwGvrY 9sELCGNPQZiXAu85EOAukJu1OI3n2ohmMlec090V9FqIZCPrsJ6ClCBpiaepSVBl 7gmTON22ZcCBf4HpLU87awphzL3dAnwUNt23/vr0T1unJ4Hm7p0e8ZAMcAD+d/df y9uAcrskSyti8amq6sgPsVOmb3maB3qE65Cliuzyhv4BLs+c+nDBBXnSr85kDzG3 ktI= -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:08 2025 by rpki-client