This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZQ8T8iOpiXSxbyEdJOPm8ofLxvA.roa File: ZQ8T8iOpiXSxbyEdJOPm8ofLxvA.roa (raw, json) Hash identifier: HkfR0uja/qKdwqHoccGjjkSJ5BZH6j9HfMik3yniT5w= Subject key identifier: 65:0F:13:F2:23:A9:89:74:B1:6F:21:1D:24:E3:E6:F2:87:CB:C6:F0 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018CA0386019C2A307383771B03C34DCA1C0 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZQ8T8iOpiXSxbyEdJOPm8ofLxvA.roa Signing time: Mon 25 Dec 2023 09:04:58 +0000 ROA not before: Mon 25 Dec 2023 09:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18c:a037:cb7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:a0:38:60:19:c2:a3:07:38:37:71:b0:3c:34:dc:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Dec 25 09:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=650f13f223a98974b16f211d24e3e6f287cbc6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:fa:fc:e2:ed:dc:1f:ce:4a:69:37:1c:03: 33:91:d2:04:5a:c3:73:a4:08:32:60:ed:3f:b2:c2: 97:88:61:9a:05:c3:f1:14:be:0f:bb:e0:3d:9f:34: e3:65:91:e3:5d:70:d4:ff:c5:c1:7d:5c:2a:83:09: d2:55:d2:d0:ac:fc:b7:f4:f7:5b:0f:21:c3:af:2b: 86:44:65:92:ad:6b:33:87:39:d3:0b:67:26:f2:bb: ec:14:a9:56:d4:2c:aa:b4:87:13:f0:c6:f0:53:1e: 6c:a0:57:96:65:b7:1f:05:8f:0b:c0:33:37:51:70: c9:ec:58:97:59:0c:8e:4d:4f:7f:75:39:94:83:97: 16:d9:41:25:94:84:f2:19:4f:6c:31:df:c7:1a:cc: 02:9e:db:61:5e:e3:49:f5:bd:01:98:2a:d0:ff:44: 11:95:b2:37:5f:8c:1e:9b:0a:4f:6f:ee:1e:44:96: 2e:13:ed:c5:ef:36:16:64:4d:d1:38:a5:06:5f:1c: fd:36:41:29:72:78:12:74:cb:14:b8:b2:ab:c0:8f: 1d:bd:a8:fe:a0:97:66:b5:fb:c9:3a:2e:76:75:e8: e8:82:72:9a:40:a0:00:c1:99:8c:47:60:b9:cd:3d: bf:4b:01:55:2d:95:e2:28:61:7f:e6:6f:10:30:5c: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:13:F2:23:A9:89:74:B1:6F:21:1D:24:E3:E6:F2:87:CB:C6:F0 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZQ8T8iOpiXSxbyEdJOPm8ofLxvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 59:61:1e:d1:bf:37:7e:eb:aa:b2:5d:50:41:9f:bf:a8:a1:87: 91:0f:7e:c8:4f:ff:47:b0:21:ec:5f:b6:27:04:c9:32:2d:5f: 64:c8:5c:42:14:6b:0d:b8:e0:2a:20:79:c4:57:ca:7e:2b:bb: 48:9d:08:e4:d4:85:d8:52:80:66:9f:a0:69:8c:1c:70:d6:d7: 75:9e:47:a0:e4:0d:03:ec:56:b1:cc:ed:1c:53:c8:6e:c2:5f: a4:76:95:5f:4c:4b:e7:5f:17:a2:03:50:cd:42:ff:1d:26:4f: 0b:b8:82:4a:a2:d3:4c:e9:be:6a:63:df:29:cf:02:81:91:88: 88:33:10:07:c0:2e:18:1f:30:fe:23:d9:d4:ef:1c:13:c0:ca: af:c1:93:74:1e:b2:7c:cf:45:d6:68:ff:1d:d9:47:17:05:8a: b3:a2:3e:9d:3a:e9:f1:45:9d:e4:93:d3:5f:bf:53:b4:39:a1: 62:3c:0d:19:87:ca:43:c6:4d:98:e6:e6:2a:24:24:cd:2b:9a: 13:ab:34:79:d9:36:00:43:ec:a6:cb:35:7d:33:ea:e4:8e:bf: c8:1f:f6:d3:65:0c:32:d9:83:9c:23:4e:26:d8:28:13:06:82: f2:ec:39:f3:11:6d:29:a4:0b:59:db:5d:72:32:11:48:4f:6c: eb:b8:09:8c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYygOGAZwqMHODdxsDw03KHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjMxMjI1MDkwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTBmMTNmMjIzYTk4OTc0YjE2ZjIxMWQyNGUzZTZmMjg3Y2JjNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0f6/OLt3B/OSmk3HAMzkdIEWsNz pAgyYO0/ssKXiGGaBcPxFL4Pu+A9nzTjZZHjXXDU/8XBfVwqgwnSVdLQrPy39Pdb DyHDryuGRGWSrWszhznTC2cm8rvsFKlW1CyqtIcT8MbwUx5soFeWZbcfBY8LwDM3 UXDJ7FiXWQyOTU9/dTmUg5cW2UEllITyGU9sMd/HGswCntthXuNJ9b0BmCrQ/0QR lbI3X4wemwpPb+4eRJYuE+3F7zYWZE3ROKUGXxz9NkEpcngSdMsUuLKrwI8dvaj+ oJdmtfvJOi52dejognKaQKAAwZmMR2C5zT2/SwFVLZXiKGF/5m8QMFzP1QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGUPE/IjqYl0sW8hHSTj5vKHy8bwMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvWlE4VDhpT3BpWFN4YnlFZEpPUG04b2ZMeHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFlhHtG/N37rqrJdUEGf v6ihh5EPfshP/0ewIexfticEyTItX2TIXEIUaw244CogecRXyn4ru0idCOTUhdhS gGafoGmMHHDW13WeR6DkDQPsVrHM7RxTyG7CX6R2lV9MS+dfF6IDUM1C/x0mTwu4 gkqi00zpvmpj3ynPAoGRiIgzEAfALhgfMP4j2dTvHBPAyq/Bk3QesnzPRdZo/x3Z RxcFirOiPp066fFFneST01+/U7Q5oWI8DRmHykPGTZjm5iokJM0rmhOrNHnZNgBD 7KbLNX0z6uSOv8gf9tNlDDLZg5wjTibYKBMGgvLsOfMRbSmkC1nbXXIyEUhPbOu4 CYw= -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:13 2025 by rpki-client