This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oAFGn5cIjsgAP3u-GRSPgevdzPI.roa File: oAFGn5cIjsgAP3u-GRSPgevdzPI.roa (raw, json) Hash identifier: 9hY3Z1eXh6xVujiJQj9Jt3NwAXtDA6LFMPrxbAxDksI= Subject key identifier: A0:01:46:9F:97:08:8E:C8:00:3F:7B:BE:19:14:8F:81:EB:DD:CC:F2 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 018FCDEB191FE52024AE32153BA4C08FF720 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oAFGn5cIjsgAP3u-GRSPgevdzPI.roa Signing time: Fri 31 May 2024 09:11:27 +0000 ROA not before: Fri 31 May 2024 09:11:27 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:cd:eb:19:1f:e5:20:24:ae:32:15:3b:a4:c0:8f:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: May 31 09:11:27 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=a001469f97088ec8003f7bbe19148f81ebddccf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:e6:07:29:06:d4:24:ec:9b:de:7b:25:61: 9a:88:7e:d3:28:79:c1:f6:35:09:47:0d:f2:b1:6e: d7:a2:6a:90:1e:34:04:09:a6:41:42:22:bb:86:8c: 12:5e:55:a0:d8:b2:20:e5:ce:dc:a6:26:53:3e:e3: 3b:e9:7b:d1:bd:f3:3c:7a:b5:2b:b6:3d:9f:aa:f7: 18:6e:01:05:66:1a:8d:73:25:00:7e:cf:d2:23:79: f9:71:76:e4:68:18:fb:04:91:25:fc:64:98:ab:1a: 51:bc:54:c9:41:83:09:9e:a0:d1:eb:30:3b:a9:86: 08:3b:39:87:01:b9:55:da:f7:bb:6a:3e:fa:66:42: ec:80:60:aa:af:a5:0a:77:a4:a7:6f:11:4f:68:6f: 5f:29:98:88:85:67:df:29:34:0e:3d:99:fa:06:10: c3:91:54:1a:a3:0a:5a:49:40:9e:50:2f:8c:29:5a: 09:94:c7:e4:ae:a4:ef:61:c1:79:23:8e:ae:09:3d: b1:c5:eb:04:b7:26:97:a1:3a:27:da:17:ab:57:37: c4:6a:68:e8:73:00:0c:7e:f4:4f:55:14:2c:23:1c: 20:66:68:c3:d3:c4:f0:d2:d0:ac:4b:22:30:f3:05: c9:16:10:98:60:cf:fe:d8:3c:76:49:81:9f:8b:2a: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:01:46:9F:97:08:8E:C8:00:3F:7B:BE:19:14:8F:81:EB:DD:CC:F2 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oAFGn5cIjsgAP3u-GRSPgevdzPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 36:d4:8b:fa:f6:ed:0b:11:a4:93:67:fc:33:c8:3f:97:99:f7: ae:45:15:51:ce:c6:06:bd:9f:be:74:42:e0:7c:cd:de:d5:07: f6:47:4e:0e:b0:a3:a5:1d:8b:9b:aa:42:3f:67:b7:36:48:1d: 73:16:d7:76:0c:3a:8f:2f:13:80:19:dc:ed:1d:68:5b:b3:70: 3f:3e:c6:62:c4:dd:81:a9:9b:7e:78:7b:f5:d0:8a:f1:fe:7a: 3b:80:d7:2c:7d:51:1a:ec:d1:f4:ec:23:47:93:8b:3c:73:2c: 59:60:fe:48:a2:52:d2:3e:47:41:fe:ee:b8:91:34:0b:69:e1: 2c:2c:a7:e4:70:77:3f:71:38:08:44:7a:c3:81:53:ab:10:61: e4:4e:f9:ab:89:74:4d:ef:6e:7c:a9:5c:c1:7b:8d:15:1f:de: 30:46:a8:a5:bd:a9:f8:48:72:df:78:ac:bf:d6:5c:42:5b:93: c0:52:f9:f6:47:27:28:4a:bd:8f:29:a6:14:1c:56:45:ff:ca: 02:98:2d:9c:93:df:d2:c0:da:36:69:d4:d8:64:2d:b0:ae:3d: 36:24:54:68:92:e2:7f:49:80:b2:01:9f:f8:07:f2:95:ad:2f: 70:14:8a:f1:1b:f3:e4:0a:68:8e:88:0e:b1:67:9e:a3:16:5f: 27:35:f3:fa -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY/N6xkf5SAkrjIVO6TAj/cgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNTMxMDkxMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDAxNDY5Zjk3MDg4ZWM4MDAzZjdiYmUxOTE0OGY4MWViZGRjY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdTmBykG1CTsm957JWGaiH7TKHnB 9jUJRw3ysW7XomqQHjQECaZBQiK7howSXlWg2LIg5c7cpiZTPuM76XvRvfM8erUr tj2fqvcYbgEFZhqNcyUAfs/SI3n5cXbkaBj7BJEl/GSYqxpRvFTJQYMJnqDR6zA7 qYYIOzmHAblV2ve7aj76ZkLsgGCqr6UKd6SnbxFPaG9fKZiIhWffKTQOPZn6BhDD kVQaowpaSUCeUC+MKVoJlMfkrqTvYcF5I46uCT2xxesEtyaXoTon2herVzfEamjo cwAMfvRPVRQsIxwgZmjD08Tw0tCsSyIw8wXJFhCYYM/+2Dx2SYGfiyoNHQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKABRp+XCI7IAD97vhkUj4Hr3czyMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvb0FGR241Y0lqc2dBUDN1LUdSU1BnZXZkelBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADbUi/r27QsRpJNn/DPI P5eZ965FFVHOxga9n750QuB8zd7VB/ZHTg6wo6Udi5uqQj9ntzZIHXMW13YMOo8v E4AZ3O0daFuzcD8+xmLE3YGpm354e/XQivH+ejuA1yx9URrs0fTsI0eTizxzLFlg /kiiUtI+R0H+7riRNAtp4Swsp+Rwdz9xOAhEesOBU6sQYeRO+auJdE3vbnypXMF7 jRUf3jBGqKW9qfhIct94rL/WXEJbk8BS+fZHJyhKvY8pphQcVkX/ygKYLZyT39LA 2jZp1NhkLbCuPTYkVGiS4n9JgLIBn/gH8pWtL3AUivEb8+QKaI6IDrFnnqMWXyc1 8/o= -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:03 2025 by rpki-client