This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mM_ugqrSCqB0Cf93gdV0cm2jYwk.roa File: mM_ugqrSCqB0Cf93gdV0cm2jYwk.roa (raw, json) Hash identifier: 5UHmVBMfhYhWA3g0TUA/A5rMYSzMo0ZGzrjECIAohdQ= Subject key identifier: 98:CF:EE:82:AA:D2:0A:A0:74:09:FF:77:81:D5:74:72:6D:A3:63:09 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018EA446C46B77592DA3CAD3855B20656759 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mM_ugqrSCqB0Cf93gdV0cm2jYwk.roa Signing time: Wed 03 Apr 2024 14:04:44 +0000 ROA not before: Wed 03 Apr 2024 14:04:44 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128 2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128 2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128 2001:67c:64:ffff:0:18e:a446:73db/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:a4:46:c4:6b:77:59:2d:a3:ca:d3:85:5b:20:65:67:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Apr 3 14:04:44 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=98cfee82aad20aa07409ff7781d574726da36309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:ec:d4:6c:3c:e0:d6:09:c4:57:8b:21:73: 75:02:e9:85:d2:22:60:49:04:9a:1f:94:f5:1b:f4: d1:2f:87:e6:33:21:b7:87:bd:b1:2b:36:63:a8:d8: d7:b1:f4:5e:ec:70:4b:79:b0:56:66:c9:2d:dc:52: 5f:92:97:5a:7e:22:c5:fe:ab:04:c2:49:48:a7:ea: 86:03:ab:76:21:3a:1a:dc:2a:f9:67:8f:3d:3d:a6: aa:88:19:71:94:77:14:31:b4:85:8c:56:1c:b4:82: 0a:20:b6:c1:3b:a1:80:2a:f8:f9:d4:15:5f:73:5e: b5:c6:cf:64:71:84:1d:e6:40:cc:6d:76:36:7a:88: 93:5a:98:f7:64:da:7a:67:71:47:e4:db:92:fe:dd: 41:99:a8:b0:7a:38:18:2e:cd:61:a0:9f:2b:bc:0b: 84:43:c6:fc:95:71:c9:12:30:f5:47:d2:84:41:39: b8:4c:05:d0:66:13:78:71:bf:09:58:31:e2:cc:4d: 97:5a:61:8b:90:ae:1c:69:bc:a0:75:36:d8:47:7b: 1c:58:f3:f3:29:2a:85:a6:46:5c:58:72:ab:e9:35: bf:6f:f0:4d:67:0b:80:77:ec:b0:75:2c:b8:ba:f8: 14:0e:67:45:b1:77:75:cc:d1:b9:4c:5a:fe:b2:e4: 5d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CF:EE:82:AA:D2:0A:A0:74:09:FF:77:81:D5:74:72:6D:A3:63:09 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mM_ugqrSCqB0Cf93gdV0cm2jYwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 5f:67:ae:8c:52:0a:92:6f:4a:1c:a5:55:a1:50:ae:db:d6:07: 8f:25:10:f9:fa:8c:de:07:c1:09:2c:a6:4f:30:00:cb:ed:df: 11:1e:1d:f6:8d:4b:8b:fa:6e:6f:ea:ba:68:4a:29:61:1d:eb: f9:31:36:5c:18:e3:58:20:25:01:72:4b:34:60:49:0f:5e:49: 4a:9f:61:e3:c0:c2:80:08:f8:2f:fa:05:5b:79:07:a8:68:bc: 55:90:75:37:1d:a9:7f:9a:e7:30:02:05:c5:32:b1:97:4c:0e: 9c:a6:0e:88:5f:7b:49:a5:1b:4f:20:a9:dc:02:32:ec:06:3a: de:bc:ef:8f:6b:9c:82:9e:ba:96:6f:34:15:b4:ef:18:32:ef: 17:2b:2f:ed:c7:63:8d:42:f6:62:de:d2:c8:a2:5b:65:75:5c: a7:24:ee:e4:ff:d0:84:7a:c3:b6:fd:15:31:be:04:0e:39:55: 18:9e:f4:e5:f9:16:86:1b:54:f2:f6:1f:b3:6e:7a:8c:9f:fe: 1b:9e:a9:fd:89:33:16:8b:fd:4f:30:51:f5:58:77:83:ba:84: b8:6e:4e:9e:2b:9e:93:f1:61:ae:6b:40:e9:d2:fa:f7:55:7c: 99:ef:e5:1d:2d:94:2e:b7:bc:83:f4:2a:76:30:bc:2c:ae:83: c3:f3:64:36 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY6kRsRrd1kto8rThVsgZWdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwNDAzMTQwNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGNmZWU4MmFhZDIwYWEwNzQwOWZmNzc4MWQ1NzQ3MjZkYTM2MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRPs1Gw84NYJxFeLIXN1AumF0iJg SQSaH5T1G/TRL4fmMyG3h72xKzZjqNjXsfRe7HBLebBWZskt3FJfkpdafiLF/qsE wklIp+qGA6t2IToa3Cr5Z489PaaqiBlxlHcUMbSFjFYctIIKILbBO6GAKvj51BVf c161xs9kcYQd5kDMbXY2eoiTWpj3ZNp6Z3FH5NuS/t1BmaiwejgYLs1hoJ8rvAuE Q8b8lXHJEjD1R9KEQTm4TAXQZhN4cb8JWDHizE2XWmGLkK4cabygdTbYR3scWPPz KSqFpkZcWHKr6TW/b/BNZwuAd+ywdSy4uvgUDmdFsXd1zNG5TFr+suRdHwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJjP7oKq0gqgdAn/d4HVdHJto2MJMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvbU1fdWdxclNDcUIwQ2Y5M2dkVjBjbTJqWXdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF9nroxSCpJvShylVaFQ rtvWB48lEPn6jN4HwQkspk8wAMvt3xEeHfaNS4v6bm/qumhKKWEd6/kxNlwY41gg JQFySzRgSQ9eSUqfYePAwoAI+C/6BVt5B6hovFWQdTcdqX+a5zACBcUysZdMDpym Dohfe0mlG08gqdwCMuwGOt68749rnIKeupZvNBW07xgy7xcrL+3HY41C9mLe0sii W2V1XKck7uT/0IR6w7b9FTG+BA45VRie9OX5FoYbVPL2H7Nueoyf/hueqf2JMxaL /U8wUfVYd4O6hLhuTp4rnpPxYa5rQOnS+vdVfJnv5R0tlC63vIP0KnYwvCyug8Pz ZDY= -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:59 2025 by rpki-client