This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hIJ2-mceQIp9hQOLzMmcp0aDDAk.roa File: hIJ2-mceQIp9hQOLzMmcp0aDDAk.roa (raw, json) Hash identifier: NCPP4hU4DE3/v9d1X2Ii6GQLWGFe8FEYaUJai01UkYQ= Subject key identifier: 84:82:76:FA:67:1E:40:8A:7D:85:03:8B:CC:C9:9C:A7:46:83:0C:09 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01903FD668DA7FA40250F3294F3FF3C5026D Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hIJ2-mceQIp9hQOLzMmcp0aDDAk.roa Signing time: Sat 22 Jun 2024 12:05:34 +0000 ROA not before: Sat 22 Jun 2024 12:05:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:190:3fd5:7dd3/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:3f:d6:68:da:7f:a4:02:50:f3:29:4f:3f:f3:c5:02:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jun 22 12:05:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=848276fa671e408a7d85038bccc99ca746830c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:0b:2a:e4:48:fb:30:84:39:3f:f3:b4:38: b2:f1:1f:8c:61:b7:b2:d3:a3:5c:ac:a9:cd:58:ee: 27:a8:e8:44:5c:39:3c:75:39:62:7d:64:60:49:fa: b4:9c:d2:21:9e:7d:5f:f8:54:1e:78:53:66:21:89: df:b1:bb:60:2c:57:c7:14:67:8e:35:bd:70:c6:5a: 39:d2:10:0e:40:94:15:7c:e8:90:ff:61:85:46:93: dc:4f:3e:fa:02:aa:95:23:b2:48:82:fd:41:9c:92: ca:e1:bf:05:fb:dd:b6:21:42:c6:59:42:a8:fd:b7: 61:e6:9a:c6:7b:d7:a8:45:71:0e:a2:bb:7c:db:9e: d1:49:40:22:d7:59:51:10:0b:b5:3b:f9:cd:82:40: de:6a:8b:ce:70:21:37:cf:64:a0:1c:b0:58:ad:32: b5:d5:d5:bf:db:11:46:46:b9:f4:49:74:fa:35:bf: 99:66:83:61:31:cf:d8:74:ca:c7:e9:d6:38:27:34: ee:14:36:37:55:50:26:c2:f5:4e:ec:2a:10:58:31: e1:ce:6a:2b:4d:e6:ce:1f:88:70:31:e2:cc:bd:19: c2:51:62:8c:4f:06:c0:1b:95:20:82:b3:c6:fc:05: 55:4c:29:39:d3:00:44:9d:7c:0b:21:3c:16:21:26: b9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:82:76:FA:67:1E:40:8A:7D:85:03:8B:CC:C9:9C:A7:46:83:0C:09 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hIJ2-mceQIp9hQOLzMmcp0aDDAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 76:1d:f7:ea:a2:19:31:8a:10:7c:f1:d6:80:df:9d:c9:26:f6: 83:ee:84:07:4e:d4:de:41:0a:8f:bc:75:02:6c:b8:29:12:b9: f5:6a:31:d8:6f:07:57:07:70:e1:65:00:7a:e1:bd:67:24:5f: 81:08:85:c1:1e:d8:cc:d6:a1:56:fe:f7:9a:c2:3b:c2:9c:e2: 8c:62:69:45:05:65:b0:4e:a6:c0:6c:1d:8f:82:43:01:f2:fb: 0b:04:9b:fc:85:0c:e7:14:d4:ed:c5:d3:09:7f:de:35:84:27: 7f:66:a6:e4:ea:a8:1b:42:2c:4d:cf:dc:8f:f7:09:4d:d1:2b: f9:26:da:4d:9b:fd:bf:91:a0:bc:c0:6e:62:50:18:35:87:36: bf:09:88:40:eb:77:ef:17:a5:33:6e:d6:7d:76:14:4a:73:f6: 73:96:6d:c9:9a:32:e3:c9:13:0e:6d:40:cc:36:85:79:58:79: 52:b7:fc:d9:2a:33:6c:be:76:09:8e:5e:2d:3e:08:0c:07:76: 71:7f:5b:8e:26:1d:57:af:ee:af:ca:19:3a:6e:95:5b:1f:27: ff:91:2d:0c:58:94:90:fc:d7:24:4a:bd:e0:1c:02:1b:2d:49: 68:da:2c:7f:4c:b4:4a:a6:6b:07:3c:75:7d:85:f6:0f:d0:5c: 7a:46:71:d5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZA/1mjaf6QCUPMpTz/zxQJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNjIyMTIwNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDgyNzZmYTY3MWU0MDhhN2Q4NTAzOGJjY2M5OWNhNzQ2ODMwYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNQLKuRI+zCEOT/ztDiy8R+MYbey 06NcrKnNWO4nqOhEXDk8dTlifWRgSfq0nNIhnn1f+FQeeFNmIYnfsbtgLFfHFGeO Nb1wxlo50hAOQJQVfOiQ/2GFRpPcTz76AqqVI7JIgv1BnJLK4b8F+922IULGWUKo /bdh5prGe9eoRXEOort8257RSUAi11lREAu1O/nNgkDeaovOcCE3z2SgHLBYrTK1 1dW/2xFGRrn0SXT6Nb+ZZoNhMc/YdMrH6dY4JzTuFDY3VVAmwvVO7CoQWDHhzmor TebOH4hwMeLMvRnCUWKMTwbAG5UggrPG/AVVTCk50wBEnXwLITwWISa5MwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFISCdvpnHkCKfYUDi8zJnKdGgwwJMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvaElKMi1tY2VRSXA5aFFPTHpNbWNwMGFEREFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHYd9+qiGTGKEHzx1oDf nckm9oPuhAdO1N5BCo+8dQJsuCkSufVqMdhvB1cHcOFlAHrhvWckX4EIhcEe2MzW oVb+95rCO8Kc4oxiaUUFZbBOpsBsHY+CQwHy+wsEm/yFDOcU1O3F0wl/3jWEJ39m puTqqBtCLE3P3I/3CU3RK/km2k2b/b+RoLzAbmJQGDWHNr8JiEDrd+8XpTNu1n12 FEpz9nOWbcmaMuPJEw5tQMw2hXlYeVK3/NkqM2y+dgmOXi0+CAwHdnF/W44mHVev 7q/KGTpulVsfJ/+RLQxYlJD81yRKveAcAhstSWjaLH9MtEqmawc8dX2F9g/QXHpG cdU= -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:55 2025 by rpki-client