This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PYud7OXXjnpuk9oiRTCNBftOgpU.roa File: PYud7OXXjnpuk9oiRTCNBftOgpU.roa (raw, json) Hash identifier: QevFhC9qk2XwgqdqLfGdGoaBlEwU9ku9HSi2slyGcco= Subject key identifier: 3D:8B:9D:EC:E5:D7:8E:7A:6E:93:DA:22:45:30:8D:05:FB:4E:82:95 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018E8AC53AEDF559F12E3A7D6D591FD34BAE Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PYud7OXXjnpuk9oiRTCNBftOgpU.roa Signing time: Fri 29 Mar 2024 15:12:45 +0000 ROA not before: Fri 29 Mar 2024 15:12:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128 2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128 2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:8a:c5:3a:ed:f5:59:f1:2e:3a:7d:6d:59:1f:d3:4b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Mar 29 15:12:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=3d8b9dece5d78e7a6e93da2245308d05fb4e8295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:25:57:fa:5f:80:b1:da:e3:c6:40:5d:18: 1e:74:ee:69:9e:d6:9c:31:4a:a1:ac:31:a1:92:f8: e7:9d:11:4e:71:7f:f1:f4:7c:55:68:19:ab:d4:28: b0:93:c8:ae:cd:32:de:ef:c4:0f:dd:92:e7:d7:3f: 54:94:eb:28:c0:47:03:c7:2d:d5:c5:5c:01:3f:a7: 73:d9:4b:26:4b:fb:26:7b:0b:e3:46:bd:16:86:26: 3f:22:6a:88:6c:fa:42:4c:1c:91:c3:e1:62:1a:6b: 29:9e:cc:f9:7f:b6:4c:76:ef:d8:29:b7:91:d4:60: c6:ae:95:f0:88:22:d5:aa:94:b4:73:71:4b:60:09: d9:82:a3:4f:fa:0d:9b:4f:39:73:c5:bd:4d:b0:c9: 61:4a:7e:6c:bf:e4:24:ae:99:92:c5:ef:26:ab:12: 7b:26:7a:1b:5b:41:20:60:2e:f1:41:02:21:94:26: 6d:cf:6e:78:a0:7d:43:bf:8e:ea:37:a9:8c:0f:7e: 00:0a:c4:e4:c5:ae:10:e7:49:fd:86:66:e1:68:d7: 91:d5:26:1e:3a:ca:cf:25:9c:6f:b7:b0:53:94:c0: 7f:ca:0a:12:52:15:0b:6a:f2:dc:7b:fb:a5:01:eb: 1e:fb:d7:8d:8d:e5:9a:9e:a3:5e:f0:c8:fc:da:8c: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8B:9D:EC:E5:D7:8E:7A:6E:93:DA:22:45:30:8D:05:FB:4E:82:95 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PYud7OXXjnpuk9oiRTCNBftOgpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 7a:69:5c:14:e2:1e:bb:f5:0b:2d:7a:49:c1:c6:83:36:65:27: 84:4f:78:23:4a:15:87:1b:67:a2:2e:81:91:0b:9d:1c:fc:2f: e1:25:ce:7a:9a:d9:9f:16:9e:9c:dc:23:b2:1d:e0:05:75:1b: cf:2b:f1:83:93:16:a3:32:a3:44:55:14:3a:65:f4:87:fe:b7: 90:91:b0:06:1f:f5:51:0e:ab:94:67:e2:92:da:03:38:20:ee: f5:f0:dc:a0:3c:40:0f:6b:8e:cd:5f:06:07:6c:a3:39:93:3c: bd:50:44:f0:3f:fd:d1:a7:51:72:f3:e0:08:85:64:e5:6f:30: 36:4c:b5:9e:ce:00:f8:ef:85:4f:ee:e8:b2:0b:32:d8:ff:f5: ae:64:44:f7:5d:8b:72:91:18:ec:d6:18:ba:81:9c:ef:c0:6f: f9:6c:06:8c:f7:50:15:ce:2a:62:8d:ac:da:3a:6c:78:f3:02: 51:ed:18:bd:67:fc:7c:9d:41:4d:ff:55:f5:13:2e:5e:8f:b5: 65:d0:9c:d2:d8:41:ea:cc:46:e2:99:7d:72:52:e3:cc:82:3c: de:63:32:f1:42:21:c3:ea:66:04:a7:85:52:62:19:d6:f2:57: d7:1c:ff:8a:42:51:f8:9c:2b:d4:ab:a3:76:68:b2:68:e5:1b: 3f:04:ec:04 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY6KxTrt9VnxLjp9bVkf00uuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMzI5MTUxMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDhiOWRlY2U1ZDc4ZTdhNmU5M2RhMjI0NTMwOGQwNWZiNGU4Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6glV/pfgLHa48ZAXRgedO5pntac MUqhrDGhkvjnnRFOcX/x9HxVaBmr1Ciwk8iuzTLe78QP3ZLn1z9UlOsowEcDxy3V xVwBP6dz2UsmS/smewvjRr0WhiY/ImqIbPpCTByRw+FiGmspnsz5f7ZMdu/YKbeR 1GDGrpXwiCLVqpS0c3FLYAnZgqNP+g2bTzlzxb1NsMlhSn5sv+QkrpmSxe8mqxJ7 JnobW0EgYC7xQQIhlCZtz254oH1Dv47qN6mMD34ACsTkxa4Q50n9hmbhaNeR1SYe OsrPJZxvt7BTlMB/ygoSUhULavLce/ulAese+9eNjeWanqNe8Mj82owarwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD2Lnezl1456bpPaIkUwjQX7ToKVMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvUFl1ZDdPWFhqbnB1azlvaVJUQ05CZnRPZ3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHppXBTiHrv1Cy16ScHG gzZlJ4RPeCNKFYcbZ6IugZELnRz8L+Elznqa2Z8WnpzcI7Id4AV1G88r8YOTFqMy o0RVFDpl9If+t5CRsAYf9VEOq5Rn4pLaAzgg7vXw3KA8QA9rjs1fBgdsozmTPL1Q RPA//dGnUXLz4AiFZOVvMDZMtZ7OAPjvhU/u6LILMtj/9a5kRPddi3KRGOzWGLqB nO/Ab/lsBoz3UBXOKmKNrNo6bHjzAlHtGL1n/HydQU3/VfUTLl6PtWXQnNLYQerM RuKZfXJS48yCPN5jMvFCIcPqZgSnhVJiGdbyV9cc/4pCUficK9Sro3ZosmjlGz8E 7AQ= -----END CERTIFICATE-----Generated at Sun Dec 14 09:32:54 2025 by rpki-client