This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2AWr8S9xy2k-DSmSrRHyU-eNviE.roa File: 2AWr8S9xy2k-DSmSrRHyU-eNviE.roa (raw, json) Hash identifier: Dq1w7/ei9k6+lSku5GmFxgPAIzGlWugcHaWyIEHaxrs= Subject key identifier: D8:05:AB:F1:2F:71:CB:69:3E:0D:29:92:AD:11:F2:53:E7:8D:BE:21 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 018FBEDFB3FD72A3B723CFE5BC5A6E538880 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2AWr8S9xy2k-DSmSrRHyU-eNviE.roa Signing time: Tue 28 May 2024 11:04:42 +0000 ROA not before: Tue 28 May 2024 11:04:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:bedf:a228/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:be:df:b3:fd:72:a3:b7:23:cf:e5:bc:5a:6e:53:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: May 28 11:04:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=d805abf12f71cb693e0d2992ad11f253e78dbe21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d8:c1:16:db:4f:29:da:7f:ab:a0:19:64:07: 5f:db:0b:78:aa:0c:00:c3:8b:32:19:53:62:b4:00: 13:b9:55:31:2f:32:c7:fa:d7:6c:bf:97:60:cf:1f: fe:6d:7b:7c:99:c7:0d:83:c6:12:ef:eb:ac:71:af: 42:2f:db:5b:26:7e:34:db:ba:e8:44:9a:e6:1f:14: bd:6c:93:a1:00:98:82:56:5e:de:32:27:ec:af:b6: 19:14:d6:4d:4f:ae:db:59:d1:6d:f4:12:2c:10:62: ca:c3:38:5d:51:c3:93:24:d7:5d:ca:ec:18:78:01: e4:62:aa:cc:72:e8:f7:cd:bc:77:a0:03:42:22:8a: 32:5a:ba:49:43:aa:01:6f:a2:d9:00:65:4f:fa:e9: c5:25:0b:20:7c:66:6b:6f:a1:fc:dd:f2:8b:33:f4: c1:9e:17:0e:db:5a:61:af:40:4e:31:d9:31:59:b9: fb:af:3a:42:f5:89:a1:89:31:09:81:e3:63:c3:03: 70:90:7b:39:0a:7e:d0:ad:59:83:20:eb:f9:bc:66: 82:1d:ef:57:71:07:42:ce:06:be:d3:40:bf:56:dc: bd:e2:d0:0e:3d:74:70:e6:85:95:a7:71:47:15:12: dc:fb:84:ba:80:82:6e:72:c2:42:ea:e7:0b:eb:d0: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:AB:F1:2F:71:CB:69:3E:0D:29:92:AD:11:F2:53:E7:8D:BE:21 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2AWr8S9xy2k-DSmSrRHyU-eNviE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 16:7e:2e:b2:67:1b:31:db:6a:6c:4d:11:3e:08:d7:e0:9b:2b: b2:74:af:69:14:a0:45:81:03:f6:f0:bc:f5:6e:29:66:87:c4: 59:78:18:d0:ea:c5:9f:0e:34:f1:f2:65:2f:7a:ce:eb:29:83: 52:14:b0:87:9a:53:18:83:e2:01:30:b6:0d:9c:40:35:e1:12: 83:60:dd:fb:e3:d5:6b:c3:ac:87:b5:07:a8:9d:19:7f:15:18: 36:06:74:69:4a:b4:4a:c2:40:bd:f7:46:d7:77:13:1e:9a:41: b2:0c:38:4b:a2:dc:ae:1a:72:61:45:81:c1:71:37:6c:19:71: 4b:f1:bc:c6:80:6c:24:0e:16:12:20:3f:e7:b2:00:1a:86:26: 43:66:66:19:3b:d7:f3:35:80:20:c3:41:16:b7:43:19:eb:41: e0:e1:52:8e:2f:d7:34:57:59:64:69:c4:f4:c7:06:f7:bc:e4: 5c:b5:57:4f:e1:69:61:1d:48:68:41:36:36:7c:7c:5b:95:92: c6:c9:63:17:ba:51:38:1f:a1:f3:3b:25:eb:fe:97:3d:7a:09: c5:cc:45:63:08:98:2b:39:aa:70:07:9c:7e:fc:2a:15:37:92: 93:be:0b:f3:6c:19:c9:82:8f:23:e9:58:3f:d7:a4:09:f7:a5: a6:7a:6e:06 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY++37P9cqO3I8/lvFpuU4iAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNTI4MTEwNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODA1YWJmMTJmNzFjYjY5M2UwZDI5OTJhZDExZjI1M2U3OGRiZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNjBFttPKdp/q6AZZAdf2wt4qgwA w4syGVNitAATuVUxLzLH+tdsv5dgzx/+bXt8mccNg8YS7+usca9CL9tbJn4027ro RJrmHxS9bJOhAJiCVl7eMifsr7YZFNZNT67bWdFt9BIsEGLKwzhdUcOTJNddyuwY eAHkYqrMcuj3zbx3oANCIooyWrpJQ6oBb6LZAGVP+unFJQsgfGZrb6H83fKLM/TB nhcO21phr0BOMdkxWbn7rzpC9YmhiTEJgeNjwwNwkHs5Cn7QrVmDIOv5vGaCHe9X cQdCzga+00C/Vty94tAOPXRw5oWVp3FHFRLc+4S6gIJucsJC6ucL69BSlQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNgFq/EvcctpPg0pkq0R8lPnjb4hMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvMkFXcjhTOXh5MmstRFNtU3JSSHlVLWVOdmlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABZ+LrJnGzHbamxNET4I 1+CbK7J0r2kUoEWBA/bwvPVuKWaHxFl4GNDqxZ8ONPHyZS96zuspg1IUsIeaUxiD 4gEwtg2cQDXhEoNg3fvj1WvDrIe1B6idGX8VGDYGdGlKtErCQL33Rtd3Ex6aQbIM OEui3K4acmFFgcFxN2wZcUvxvMaAbCQOFhIgP+eyABqGJkNmZhk71/M1gCDDQRa3 QxnrQeDhUo4v1zRXWWRpxPTHBve85Fy1V0/haWEdSGhBNjZ8fFuVksbJYxe6UTgf ofM7Jev+lz16CcXMRWMImCs5qnAHnH78KhU3kpO+C/NsGcmCjyPpWD/XpAn3paZ6 bgY= -----END CERTIFICATE-----Generated at Mon Dec 15 13:19:03 2025 by rpki-client