This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-lgUcWkIiEXkd4EKIGZcJNvItYw.roa File: 1-lgUcWkIiEXkd4EKIGZcJNvItYw.roa (raw, json) Hash identifier: 8uVCMn8CuQ2Co4xssOmfSNKh3BRRAdpo0i7bd13EnAk= Subject key identifier: FA:58:14:71:69:08:88:45:E4:77:81:0A:20:66:5C:24:DB:C8:B5:8C Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01906F7F65DFEBD789B89D6C2B3DF87F0449 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-lgUcWkIiEXkd4EKIGZcJNvItYw.roa Signing time: Mon 01 Jul 2024 18:12:18 +0000 ROA not before: Mon 01 Jul 2024 18:12:18 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:6f:7f:65:df:eb:d7:89:b8:9d:6c:2b:3d:f8:7f:04:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jul 1 18:12:18 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=fa58147169088845e477810a20665c24dbc8b58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:09:27:ed:a8:0f:1d:6b:b4:4f:cf:d3:67: 8b:8b:a4:81:23:7e:bb:06:84:f1:ee:8f:fb:d4:b6: 6a:77:03:d8:47:7d:7e:d4:cc:af:92:50:6d:e5:98: 6b:19:11:78:db:10:87:61:c2:c1:b0:18:45:69:5a: 35:47:83:12:4e:6c:d0:87:6e:f4:ac:98:f7:3c:cf: 75:19:96:ee:f5:7e:d8:65:f7:4f:d1:40:6b:3d:48: 10:00:d1:42:86:34:19:aa:55:14:70:2a:35:3a:f9: d7:60:c0:34:be:ff:59:35:18:e5:10:00:18:32:b6: 9a:ce:04:a2:f5:9a:e2:64:eb:d9:ea:00:99:46:32: 3a:5c:b3:e2:95:e2:d2:76:6e:cf:3c:9f:76:bd:c5: 90:5b:64:ee:ca:db:f3:85:cf:bf:b1:6d:c0:89:55: 73:89:ee:5c:7a:23:52:42:66:a8:60:d8:a3:a7:32: 5d:c4:76:c4:82:f4:3b:00:7a:51:bb:74:0e:c8:96: 16:d8:1f:c9:f5:6d:82:68:e2:21:cb:16:fc:37:74: da:33:dc:c6:0a:08:f3:00:b4:c9:ba:fb:75:73:f7: 0a:76:76:2c:23:10:44:66:d2:71:f2:dd:eb:a7:29: db:62:ed:9b:3d:e3:f9:3c:6f:4f:6c:95:c3:6d:ae: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:58:14:71:69:08:88:45:E4:77:81:0A:20:66:5C:24:DB:C8:B5:8C X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-lgUcWkIiEXkd4EKIGZcJNvItYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 41:ac:bf:02:e9:02:5a:25:bc:f3:17:29:b9:a1:91:c1:6a:89: 41:68:12:f0:27:26:fa:f6:35:45:5a:88:15:88:c6:b0:e9:69: 09:09:b4:f9:3a:84:e2:59:2b:6b:6e:c2:c4:28:1c:b9:6f:0e: a6:92:af:a6:fc:9e:b5:d8:ab:28:6b:49:50:6c:d8:56:fb:f2: c6:4d:5f:1e:98:81:94:c0:ea:db:65:a3:c1:58:45:99:dc:4d: 00:1f:68:d1:40:61:92:94:45:dc:14:6e:89:8b:45:b7:1c:0d: e1:8b:f6:5f:dd:b2:79:82:49:6e:cb:43:22:29:49:2c:eb:34: 43:43:a0:30:42:9a:83:4c:a1:50:c8:9e:cc:7c:16:37:e9:63: 51:43:5d:ec:ca:07:1a:46:92:b5:bb:67:9a:92:74:2c:b3:a6: 6f:ba:b1:9c:55:f6:01:04:9b:c2:da:24:f6:86:c7:84:80:fd: 04:a1:8e:d6:3e:f5:9a:ba:e4:a1:87:6e:e4:ad:75:5f:aa:a5: b9:4e:66:3b:01:38:58:ec:f9:5e:dc:47:2a:b5:ec:55:33:71: f2:6e:37:8f:67:69:45:cc:a6:77:db:47:08:e6:17:33:d2:90: 32:86:75:f0:5b:aa:f0:a5:60:6b:35:e4:7c:ff:14:77:93:7e: e7:3a:6a:73 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZBvf2Xf69eJuJ1sKz34fwRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNzAxMTgxMjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTU4MTQ3MTY5MDg4ODQ1ZTQ3NzgxMGEyMDY2NWMyNGRiYzhiNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjMJJ+2oDx1rtE/P02eLi6SBI367 BoTx7o/71LZqdwPYR31+1MyvklBt5ZhrGRF42xCHYcLBsBhFaVo1R4MSTmzQh270 rJj3PM91GZbu9X7YZfdP0UBrPUgQANFChjQZqlUUcCo1OvnXYMA0vv9ZNRjlEAAY MraazgSi9ZriZOvZ6gCZRjI6XLPileLSdm7PPJ92vcWQW2Tuytvzhc+/sW3AiVVz ie5ceiNSQmaoYNijpzJdxHbEgvQ7AHpRu3QOyJYW2B/J9W2CaOIhyxb8N3TaM9zG CgjzALTJuvt1c/cKdnYsIxBEZtJx8t3rpynbYu2bPeP5PG9PbJXDba6HywIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPpYFHFpCIhF5HeBCiBmXCTbyLWMMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvMS1sZ1VjV2tJaUVYa2Q0RUtJR1pjSk52SXRZdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvMDk4MzdjLTk4ZjMtNGM5Zi1hZWJmLTg4MTQ4OGZmZGJi MC8xL1VtSUVGZEpKQ2w3RDlwSmJuM2tFRG80aTNiOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBBrL8C6QJaJbzzFym5 oZHBaolBaBLwJyb69jVFWogViMaw6WkJCbT5OoTiWStrbsLEKBy5bw6mkq+m/J61 2Ksoa0lQbNhW+/LGTV8emIGUwOrbZaPBWEWZ3E0AH2jRQGGSlEXcFG6Ji0W3HA3h i/Zf3bJ5gkluy0MiKUks6zRDQ6AwQpqDTKFQyJ7MfBY36WNRQ13sygcaRpK1u2ea knQss6ZvurGcVfYBBJvC2iT2hseEgP0EoY7WPvWauuShh27krXVfqqW5TmY7AThY 7Ple3EcqtexVM3HybjePZ2lFzKZ320cI5hcz0pAyhnXwW6rwpWBrNeR8/xR3k37n Ompz -----END CERTIFICATE-----Generated at Thu Dec 18 23:38:42 2025 by rpki-client