This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gz3_3agbCasYnDT-aiTzPLEtmB0.roa File: gz3_3agbCasYnDT-aiTzPLEtmB0.roa (raw, json) Hash identifier: bxxJ/y4KhtqwWkthN9O23z6I1hlJRJhVnl5V81s10UE= Subject key identifier: 83:3D:FF:DD:A8:1B:09:AB:18:9C:34:FE:6A:24:F3:3C:B1:2D:98:1D Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018DEEC7CDE3CF1A53CD647400A0E1ABF194 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gz3_3agbCasYnDT-aiTzPLEtmB0.roa Signing time: Wed 28 Feb 2024 08:14:48 +0000 ROA not before: Wed 28 Feb 2024 08:14:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128 2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8d:ee:c7:cd:e3:cf:1a:53:cd:64:74:00:a0:e1:ab:f1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Feb 28 08:14:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=833dffdda81b09ab189c34fe6a24f33cb12d981d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:68:49:ac:4e:f8:e0:19:a2:48:a8:a2:fd:a6: c1:fc:df:42:db:2b:52:44:df:4e:10:b4:3f:69:47: 72:6e:95:12:08:c5:a1:a9:e4:7a:12:09:50:14:9f: 9b:57:f6:03:ee:6f:18:0d:6a:e6:d9:37:5e:79:33: 1f:2a:5e:34:39:bc:e0:86:60:1b:10:2c:94:0d:32: fe:54:5e:7c:a1:8f:48:31:fa:67:45:c3:b8:e0:4b: 07:ad:13:3d:9a:96:c9:3d:6a:2f:60:23:fc:38:71: 4c:12:2b:42:79:97:40:af:31:3d:70:45:3d:e4:67: 1a:e7:3c:ab:38:5a:f7:79:cb:23:70:ef:80:1f:3b: eb:e8:9b:c9:40:93:d4:40:54:00:53:fc:7f:b0:15: 1c:28:eb:8e:06:10:29:85:2d:2c:62:77:16:98:ef: 6a:55:21:86:e8:0c:3e:84:8b:8b:ea:b3:24:bd:15: 45:d9:b5:ed:8c:13:df:55:91:f7:eb:8f:31:ba:7e: 8b:9e:0a:50:62:01:6f:d7:1d:89:5e:d8:6b:c7:ef: 26:0f:d7:17:ee:9e:c1:d0:77:a2:56:10:3d:4c:cc: 7e:42:5d:b9:48:f5:ac:2e:a1:d7:49:a6:f7:f4:13: 81:3c:15:6a:e7:c1:7a:ff:d6:9e:ad:c3:3c:bb:e6: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3D:FF:DD:A8:1B:09:AB:18:9C:34:FE:6A:24:F3:3C:B1:2D:98:1D X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gz3_3agbCasYnDT-aiTzPLEtmB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 02:0a:a5:98:0d:37:1b:3d:12:a0:34:4a:22:6f:97:c1:9a:81: c2:73:d2:77:ef:09:9d:76:63:08:2d:10:1a:2b:7e:cc:07:99: 35:91:26:ae:dd:ca:86:9f:2e:31:14:16:80:29:9f:06:60:ca: 4e:b6:a0:b0:0e:39:58:a5:14:07:44:4e:af:de:b1:17:d1:44: b0:91:92:cc:07:6d:a8:5e:c0:fd:61:86:7d:83:50:64:03:21: 28:94:13:d9:e1:66:98:aa:38:b4:6b:6d:fe:ea:66:c3:d8:bd: b9:cc:91:69:ba:cd:d4:c9:09:21:4b:8d:aa:0b:92:c2:17:de: 8e:d4:9e:9b:16:b8:3e:f4:f5:f4:12:be:ac:26:a9:ec:99:17: 37:52:4e:c3:90:e8:7b:cb:b8:78:1c:84:01:87:f9:30:bc:b8: 67:1c:5c:0c:42:85:76:2f:90:89:04:e6:4c:43:b2:e2:38:47: 12:68:49:23:81:0c:23:35:26:7e:a3:9c:2b:62:b0:5b:96:00: dc:53:6f:cd:f4:f6:3c:9e:e7:2a:94:b8:21:77:29:d8:98:af: 57:47:b8:06:37:fb:ac:48:6a:63:3a:20:86:4b:7f:5a:39:0f: 4c:8f:f9:0a:e4:24:fc:dd:d7:db:3e:38:0c:11:85:c4:da:d4: 0f:ea:e0:53 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY3ux83jzxpTzWR0AKDhq/GUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMjI4MDgxNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzNkZmZkZGE4MWIwOWFiMTg5YzM0ZmU2YTI0ZjMzY2IxMmQ5ODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGhJrE744BmiSKii/abB/N9C2ytS RN9OELQ/aUdybpUSCMWhqeR6EglQFJ+bV/YD7m8YDWrm2TdeeTMfKl40ObzghmAb ECyUDTL+VF58oY9IMfpnRcO44EsHrRM9mpbJPWovYCP8OHFMEitCeZdArzE9cEU9 5Gca5zyrOFr3ecsjcO+AHzvr6JvJQJPUQFQAU/x/sBUcKOuOBhAphS0sYncWmO9q VSGG6Aw+hIuL6rMkvRVF2bXtjBPfVZH3648xun6LngpQYgFv1x2JXthrx+8mD9cX 7p7B0HeiVhA9TMx+Ql25SPWsLqHXSab39BOBPBVq58F6/9aercM8u+Z90wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIM9/92oGwmrGJw0/mok8zyxLZgdMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvZ3ozXzNhZ2JDYXNZbkRULWFpVHpQTEV0bUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAIKpZgNNxs9EqA0SiJv l8GagcJz0nfvCZ12YwgtEBorfswHmTWRJq7dyoafLjEUFoApnwZgyk62oLAOOVil FAdETq/esRfRRLCRkswHbahewP1hhn2DUGQDISiUE9nhZpiqOLRrbf7qZsPYvbnM kWm6zdTJCSFLjaoLksIX3o7UnpsWuD709fQSvqwmqeyZFzdSTsOQ6HvLuHgchAGH +TC8uGccXAxChXYvkIkE5kxDsuI4RxJoSSOBDCM1Jn6jnCtisFuWANxTb8309jye 5yqUuCF3KdiYr1dHuAY3+6xIamM6IIZLf1o5D0yP+QrkJPzd19s+OAwRhcTa1A/q 4FM= -----END CERTIFICATE-----Generated at Fri Dec 19 07:00:42 2025 by rpki-client