This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NNGizbCvR38DDpoGUOMnAqVF74I.roa File: NNGizbCvR38DDpoGUOMnAqVF74I.roa (raw, json) Hash identifier: J9JweMVu1WikiSyMfO5BdNRdcMtCGrXLwdMyV4UUORI= Subject key identifier: 34:D1:A2:CD:B0:AF:47:7F:03:0E:9A:06:50:E3:27:02:A5:45:EF:82 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 018FC520F538971CF9BA743E1B275BCA94FE Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NNGizbCvR38DDpoGUOMnAqVF74I.roa Signing time: Wed 29 May 2024 16:13:42 +0000 ROA not before: Wed 29 May 2024 16:13:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:c5:20:f5:38:97:1c:f9:ba:74:3e:1b:27:5b:ca:94:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: May 29 16:13:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=34d1a2cdb0af477f030e9a0650e32702a545ef82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:f7:85:5e:8d:50:47:78:d3:e6:3c:6c:44: aa:e2:96:f4:a5:74:57:b8:d5:1a:0b:93:33:de:cf: 0b:0f:51:51:a0:3b:2c:e7:c6:60:75:37:9e:a3:0a: 02:dd:c7:7e:8e:4d:05:36:ed:1d:4f:7a:bf:91:5e: 2a:0c:6d:dd:b0:21:31:1f:f0:b4:80:fa:67:3b:8f: ff:bf:a6:5e:d8:3f:5e:5d:e4:0a:95:b2:da:e3:38: 94:7a:05:a5:77:58:54:50:1e:ac:56:32:d5:49:a5: 7f:e0:6e:e0:8b:a1:3d:29:73:e1:59:42:93:53:02: df:c5:6d:36:e1:5f:7a:60:30:0e:57:ff:87:9f:8c: 69:c9:d1:c9:bd:c6:95:3e:70:ae:23:85:16:50:3a: 7a:e5:35:37:e4:6b:14:5d:3b:59:f4:cf:34:bf:5e: 6c:36:6f:db:4d:5f:a1:7c:b6:95:e5:cb:2f:d2:c1: 36:1b:0b:32:ae:64:75:02:f0:a5:ee:e4:34:3b:be: 50:87:f4:7e:79:b7:e2:4c:9e:87:58:98:32:7d:61: a5:84:9f:6f:96:03:b4:c0:f7:f4:01:44:71:a3:45: df:26:4a:a3:81:b4:b7:67:6d:18:fb:b2:9d:83:b3: 8f:15:62:e6:1c:fe:e3:41:d8:97:70:e6:27:dc:43: c9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:A2:CD:B0:AF:47:7F:03:0E:9A:06:50:E3:27:02:A5:45:EF:82 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NNGizbCvR38DDpoGUOMnAqVF74I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 91:67:c5:d4:1e:ac:b8:09:21:e8:d4:50:9c:31:74:08:2d:e3: 3d:bf:db:ef:5a:35:cd:79:84:76:10:4d:43:db:30:fa:4e:9d: 34:d5:54:fb:a1:20:c3:77:ff:d8:49:95:80:38:e5:ae:61:6f: 5b:34:12:1f:77:4d:5b:c2:94:4b:db:78:98:f7:aa:30:d2:b8: b8:89:ac:b5:51:c3:52:f6:85:b9:fc:75:65:8b:d9:61:34:bb: a1:a9:02:0a:9a:e9:32:ae:46:5f:ac:9d:07:ff:f3:dc:ac:f1: 87:56:00:9a:47:fa:27:5f:63:85:c9:48:7d:e5:03:46:80:2a: 11:48:c3:c4:0d:8b:a3:30:8d:a8:a3:46:18:e7:ef:2b:c5:1d: bc:af:4c:eb:fd:88:b1:41:db:f0:6d:83:a4:fd:f8:d0:54:a7: 51:5c:d3:f5:57:fb:72:48:d5:c8:0b:08:5e:ff:d4:80:80:a7: 43:d8:c9:71:d1:b9:83:00:7d:ef:60:f3:fc:6c:e5:64:48:0f: 3c:ff:10:08:85:e7:73:da:0e:91:2f:83:61:dd:96:ca:fa:a7: 6f:66:e2:e9:b6:7b:66:2e:f1:66:24:98:c1:00:2c:76:54:e2: 6b:bd:ba:36:32:67:5d:c9:a4:7f:ad:b7:29:18:dc:d7:88:32: 71:d7:20:1e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY/FIPU4lxz5unQ+GydbypT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNTI5MTYxMzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGQxYTJjZGIwYWY0NzdmMDMwZTlhMDY1MGUzMjcwMmE1NDVlZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wz3hV6NUEd40+Y8bESq4pb0pXRX uNUaC5Mz3s8LD1FRoDss58ZgdTeeowoC3cd+jk0FNu0dT3q/kV4qDG3dsCExH/C0 gPpnO4//v6Ze2D9eXeQKlbLa4ziUegWld1hUUB6sVjLVSaV/4G7gi6E9KXPhWUKT UwLfxW024V96YDAOV/+Hn4xpydHJvcaVPnCuI4UWUDp65TU35GsUXTtZ9M80v15s Nm/bTV+hfLaV5csv0sE2GwsyrmR1AvCl7uQ0O75Qh/R+ebfiTJ6HWJgyfWGlhJ9v lgO0wPf0AURxo0XfJkqjgbS3Z20Y+7Kdg7OPFWLmHP7jQdiXcOYn3EPJbwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDTRos2wr0d/Aw6aBlDjJwKlRe+CMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvTk5HaXpiQ3ZSMzhERHBvR1VPTW5BcVZGNzRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJFnxdQerLgJIejUUJwx dAgt4z2/2+9aNc15hHYQTUPbMPpOnTTVVPuhIMN3/9hJlYA45a5hb1s0Eh93TVvC lEvbeJj3qjDSuLiJrLVRw1L2hbn8dWWL2WE0u6GpAgqa6TKuRl+snQf/89ys8YdW AJpH+idfY4XJSH3lA0aAKhFIw8QNi6MwjaijRhjn7yvFHbyvTOv9iLFB2/Btg6T9 +NBUp1Fc0/VX+3JI1cgLCF7/1ICAp0PYyXHRuYMAfe9g8/xs5WRIDzz/EAiF53Pa DpEvg2Hdlsr6p29m4um2e2Yu8WYkmMEALHZU4mu9ujYyZ13JpH+ttykY3NeIMnHX IB4= -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:22 2025 by rpki-client