This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xt3OCBeX0YqfDMifMGG4q9LoEtk.roa File: xt3OCBeX0YqfDMifMGG4q9LoEtk.roa (raw, json) Hash identifier: QZREzxl4XpBnd7uv7N7G2S9uKF9OauFzBjWa/kRwMy4= Subject key identifier: C6:DD:CE:08:17:97:D1:8A:9F:0C:C8:9F:30:61:B8:AB:D2:E8:12:D9 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018EC9D423A38F6D4638D92EBD506B2BBFC8 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xt3OCBeX0YqfDMifMGG4q9LoEtk.roa Signing time: Wed 10 Apr 2024 21:05:06 +0000 ROA not before: Wed 10 Apr 2024 21:05:06 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18e:c9d3:68af/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:c9:d4:23:a3:8f:6d:46:38:d9:2e:bd:50:6b:2b:bf:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Apr 10 21:05:06 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=c6ddce081797d18a9f0cc89f3061b8abd2e812d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:47:76:a7:aa:d1:65:f4:e6:00:5e:9c:fc: ea:a1:bf:ed:9c:5e:40:a2:00:6b:c5:9b:06:8d:da: 03:04:5f:b2:fa:4d:f1:04:72:ca:d9:1b:5f:68:3d: 6d:4c:48:a8:37:ec:e3:c8:95:be:f2:59:bc:c6:aa: ff:20:58:ee:00:f7:21:f2:14:c5:f4:ee:d6:8b:ce: 7a:8e:b9:0c:0b:60:e5:db:0b:a0:98:35:d1:40:37: 50:40:71:8d:7c:c8:3f:15:2f:fa:35:b0:d8:86:5a: 91:57:43:82:cc:00:d9:81:1d:59:fa:83:13:c1:7a: e4:1e:6b:50:4a:46:f9:70:32:52:65:f3:cd:3b:4d: 92:f1:c5:33:b5:0d:2b:2b:c1:b1:84:29:b8:39:11: 01:50:3a:8e:89:b7:f8:64:3c:9e:85:b4:fa:58:0a: a9:0b:63:f1:2f:b4:10:83:64:b5:45:cc:ec:12:0b: d0:b7:11:66:b9:95:c0:8e:af:c7:29:11:2d:c1:58: 99:6c:14:a4:3e:fb:31:f8:19:b5:15:ed:00:c8:82: 34:e3:0d:fb:50:47:6f:e7:4e:79:43:49:0a:fd:20: d9:16:2c:cf:35:c1:2e:cf:59:d7:c6:29:fc:88:95: e8:ea:bd:1d:f4:66:ee:01:5d:78:f6:41:1e:64:f8: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DD:CE:08:17:97:D1:8A:9F:0C:C8:9F:30:61:B8:AB:D2:E8:12:D9 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xt3OCBeX0YqfDMifMGG4q9LoEtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 88:ba:ca:b9:8e:f7:54:4f:9c:3d:8b:ca:a2:eb:2b:04:b6:91: 0b:ef:2b:ca:67:b4:aa:bc:74:34:5b:15:54:61:67:55:3d:1e: ae:a6:f9:53:33:92:18:63:40:36:ce:f0:28:c0:2d:07:fd:92: 79:47:80:88:7b:70:34:95:a8:27:a2:27:1b:9c:13:25:c8:c3: 0f:13:ea:26:50:f4:61:ad:6f:f2:50:76:2d:45:e7:d2:40:b8: c6:4c:a3:ee:73:34:a3:45:cc:6d:a5:52:0b:df:b5:31:72:ce: ea:63:02:c2:84:a9:dd:e1:3e:fa:18:ad:2f:76:de:c3:55:b3: e7:52:b0:c9:9a:b7:5e:cb:b7:6b:2a:32:23:2d:90:19:52:5e: 6d:bd:d8:1a:6b:e9:a8:59:4f:10:a9:c8:de:c0:51:1c:a9:20: 9f:95:5f:95:7f:e3:d9:8c:fb:3c:67:08:db:75:c4:92:e6:2e: 04:4e:01:f4:ea:12:45:ba:e1:24:ee:6a:c0:e4:b5:10:8a:7b: e9:7b:d7:97:84:4f:08:f8:a4:b5:b0:8e:ee:56:46:43:78:e5: 68:66:2e:e6:f6:9e:ee:bc:1d:3d:4f:a4:17:a7:55:2c:22:06: e1:bc:bf:c6:60:d0:cd:b2:b8:f8:c8:0a:6b:79:22:64:1f:eb: 5f:fd:1d:18 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY7J1COjj21GONkuvVBrK7/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwNDEwMjEwNTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmRkY2UwODE3OTdkMThhOWYwY2M4OWYzMDYxYjhhYmQyZTgxMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7xHdqeq0WX05gBenPzqob/tnF5A ogBrxZsGjdoDBF+y+k3xBHLK2RtfaD1tTEioN+zjyJW+8lm8xqr/IFjuAPch8hTF 9O7Wi856jrkMC2Dl2wugmDXRQDdQQHGNfMg/FS/6NbDYhlqRV0OCzADZgR1Z+oMT wXrkHmtQSkb5cDJSZfPNO02S8cUztQ0rK8GxhCm4OREBUDqOibf4ZDyehbT6WAqp C2PxL7QQg2S1RczsEgvQtxFmuZXAjq/HKREtwViZbBSkPvsx+Bm1Fe0AyII04w37 UEdv5055Q0kK/SDZFizPNcEuz1nXxin8iJXo6r0d9GbuAV149kEeZPiVKwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMbdzggXl9GKnwzInzBhuKvS6BLZMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEveHQzT0NCZVgwWXFmRE1pZk1HRzRxOUxvRXRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIi6yrmO91RPnD2LyqLr KwS2kQvvK8pntKq8dDRbFVRhZ1U9Hq6m+VMzkhhjQDbO8CjALQf9knlHgIh7cDSV qCeiJxucEyXIww8T6iZQ9GGtb/JQdi1F59JAuMZMo+5zNKNFzG2lUgvftTFyzupj AsKEqd3hPvoYrS923sNVs+dSsMmat17Lt2sqMiMtkBlSXm292Bpr6ahZTxCpyN7A URypIJ+VX5V/49mM+zxnCNt1xJLmLgROAfTqEkW64STuasDktRCKe+l715eETwj4 pLWwju5WRkN45WhmLub2nu68HT1PpBenVSwiBuG8v8Zg0M2yuPjICmt5ImQf61/9 HRg= -----END CERTIFICATE-----Generated at Mon Dec 15 12:04:57 2025 by rpki-client