This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlrTEP41hqldYFAI2ZBx0SVUwe8.roa File: mlrTEP41hqldYFAI2ZBx0SVUwe8.roa (raw, json) Hash identifier: F05icBnCNDMknaD/2T+gvPds0nezwMsp9sji3Jfl/MQ= Subject key identifier: 9A:5A:D3:10:FE:35:86:A9:5D:60:50:08:D9:90:71:D1:25:54:C1:EF Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018CEFDB116024D14A4FB646C35433F939BB Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlrTEP41hqldYFAI2ZBx0SVUwe8.roa Signing time: Tue 09 Jan 2024 20:12:40 +0000 ROA not before: Tue 09 Jan 2024 20:12:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:ef:db:11:60:24:d1:4a:4f:b6:46:c3:54:33:f9:39:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Jan 9 20:12:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=9a5ad310fe3586a95d605008d99071d12554c1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8a:5e:d3:6c:87:b5:74:6f:00:2c:76:fa:da: 04:c0:73:5b:2e:60:e7:95:60:85:5f:17:31:64:80: 7a:56:1f:47:4d:d1:69:c3:ec:95:f0:98:ad:99:f1: 88:80:93:23:84:5c:8c:fb:57:00:ea:34:2c:b5:f0: eb:16:95:61:e3:81:01:fc:7a:a3:27:ae:12:34:d1: 0a:dc:90:41:b4:62:ed:8a:e3:92:4a:a1:e0:b3:f5: d9:96:a6:27:e9:46:17:7d:04:a9:d9:72:e9:54:93: 8a:92:32:f1:9e:9e:81:ad:87:71:d4:11:27:4e:6a: 34:2b:56:db:56:ca:24:47:9d:92:15:d5:a2:7e:12: 21:86:71:66:ac:e0:87:73:b7:28:f7:43:2c:29:0b: 37:9f:f3:97:ef:e0:4e:1d:1b:53:1d:23:db:b5:04: cb:5c:bb:7d:60:1c:60:ff:d2:a3:3d:a0:6c:9f:e8: e2:e8:aa:97:97:13:fd:7b:5f:fb:29:19:00:59:05: b9:05:4d:c3:62:27:88:64:c0:c3:8a:5e:c4:bd:ec: 5a:8a:72:7d:b5:3f:fe:20:ac:3a:77:49:c0:a5:4c: db:ae:1d:b1:f4:26:9f:bb:4c:47:71:34:f8:21:79: c2:37:91:a5:7b:be:b2:93:cd:9f:38:d0:4d:73:30: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5A:D3:10:FE:35:86:A9:5D:60:50:08:D9:90:71:D1:25:54:C1:EF X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlrTEP41hqldYFAI2ZBx0SVUwe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 16:71:42:8f:b7:99:96:ad:ee:82:cd:66:45:eb:e5:57:22:6b: f2:f5:ab:d9:c3:44:48:35:b9:b7:f8:32:12:e5:3d:c8:e1:75: 65:95:37:b0:ad:be:3d:fb:f0:ff:f7:a1:39:85:51:6b:c0:c1: 24:08:48:a6:52:73:a4:2a:2a:39:cf:9e:56:70:a2:dc:a4:1c: b5:e4:9a:53:a8:20:0e:96:65:7f:cc:e1:28:11:7b:fb:69:e6: d4:a0:b8:38:5d:51:8b:da:4d:ee:77:f1:06:a7:7c:da:5c:0e: fa:d4:25:a9:e8:cc:1b:c1:b8:9c:64:86:aa:6e:20:31:85:88: 48:b4:11:4b:0b:08:85:f1:fa:39:6b:06:69:c7:5e:88:96:6c: d3:0e:e2:da:7d:9a:01:99:0b:4b:a5:f3:f6:de:ee:60:64:b6: c6:81:b9:c3:bc:5f:41:61:1e:4e:09:89:f2:92:ef:f9:3f:a2: f7:ec:5e:49:74:9d:cf:e4:0e:85:34:1b:61:6e:85:b8:a1:51: d8:9b:84:df:f7:10:12:53:96:a4:7d:0e:02:f3:a4:7c:25:89: f0:c0:18:06:9a:ca:44:b5:09:37:f2:eb:9a:8f:e2:96:44:02: 56:20:18:3b:96:cd:5f:4b:a3:4b:77:ed:0a:18:05:ce:86:83: d2:90:e9:d2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYzv2xFgJNFKT7ZGw1Qz+Tm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMTA5MjAxMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTVhZDMxMGZlMzU4NmE5NWQ2MDUwMDhkOTkwNzFkMTI1NTRjMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYpe02yHtXRvACx2+toEwHNbLmDn lWCFXxcxZIB6Vh9HTdFpw+yV8JitmfGIgJMjhFyM+1cA6jQstfDrFpVh44EB/Hqj J64SNNEK3JBBtGLtiuOSSqHgs/XZlqYn6UYXfQSp2XLpVJOKkjLxnp6BrYdx1BEn Tmo0K1bbVsokR52SFdWifhIhhnFmrOCHc7co90MsKQs3n/OX7+BOHRtTHSPbtQTL XLt9YBxg/9KjPaBsn+ji6KqXlxP9e1/7KRkAWQW5BU3DYieIZMDDil7EvexainJ9 tT/+IKw6d0nApUzbrh2x9Cafu0xHcTT4IXnCN5Gle76yk82fONBNczClHwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJpa0xD+NYapXWBQCNmQcdElVMHvMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvbWxyVEVQNDFocWxkWUZBSTJaQngwU1ZVd2U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABZxQo+3mZat7oLNZkXr 5Vcia/L1q9nDREg1ubf4MhLlPcjhdWWVN7Ctvj378P/3oTmFUWvAwSQISKZSc6Qq KjnPnlZwotykHLXkmlOoIA6WZX/M4SgRe/tp5tSguDhdUYvaTe538QanfNpcDvrU JanozBvBuJxkhqpuIDGFiEi0EUsLCIXx+jlrBmnHXoiWbNMO4tp9mgGZC0ul8/be 7mBktsaBucO8X0FhHk4JifKS7/k/ovfsXkl0nc/kDoU0G2FuhbihUdibhN/3EBJT lqR9DgLzpHwlifDAGAaaykS1CTfy65qP4pZEAlYgGDuWzV9Lo0t37QoYBc6Gg9KQ 6dI= -----END CERTIFICATE-----Generated at Sun Dec 14 09:36:07 2025 by rpki-client