This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oGaIKce8n7KnhpC2btiZjGAMBd4.roa File: oGaIKce8n7KnhpC2btiZjGAMBd4.roa (raw, json) Hash identifier: KNas4wVqtq6OG4tiiDZnTOSAxvKqiUFD4ZqZYguWCg0= Subject key identifier: A0:66:88:29:C7:BC:9F:B2:A7:86:90:B6:6E:D8:99:8C:60:0C:05:DE Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019098AB313469BCD7833D2A9344ACC439CA Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oGaIKce8n7KnhpC2btiZjGAMBd4.roa Signing time: Tue 09 Jul 2024 18:04:34 +0000 ROA not before: Tue 09 Jul 2024 18:04:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:190:98aa:d0b0/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:98:ab:31:34:69:bc:d7:83:3d:2a:93:44:ac:c4:39:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jul 9 18:04:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=a0668829c7bc9fb2a78690b66ed8998c600c05de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:6a:fa:d0:77:3e:78:d6:1c:34:5a:0b:f6: da:c4:40:ee:93:99:90:40:23:ae:61:b9:54:76:a9: 4c:c3:fc:2b:83:cf:4f:7d:e5:4f:90:10:ff:53:bb: ac:89:ef:a3:8b:6c:91:ac:d3:5d:fe:c0:57:56:50: 7d:25:1c:77:65:4b:a7:4c:42:8a:41:6c:33:f5:50: 8e:2c:95:3b:94:a8:51:cd:61:7f:dc:d9:69:0b:41: 5d:89:48:9c:63:cd:17:79:70:2b:4c:6f:09:99:63: 1d:1f:13:42:3b:fc:a5:f1:44:63:fb:e4:6e:3b:e4: 2f:a3:83:f7:c4:94:44:94:39:02:28:7c:6d:77:5b: e7:0b:f0:01:c3:45:d9:06:63:94:86:a9:ee:37:d9: 38:32:02:f8:45:75:d7:85:bc:c2:92:f3:f6:34:97: 30:8a:d3:07:02:21:aa:4e:4c:f2:23:6e:cb:a2:53: 29:49:92:35:46:b9:cd:73:27:fe:44:3a:e5:32:a4: 5a:1f:42:ec:bf:7d:52:de:c0:6c:9d:c9:59:c3:7b: cb:22:0e:38:a8:36:ef:3a:f8:e1:6f:ce:96:ee:db: 10:d2:c8:69:57:1f:54:be:73:c7:8c:3e:30:a7:a3: 64:59:ef:32:00:4c:49:d5:6a:71:50:71:5b:df:04: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:88:29:C7:BC:9F:B2:A7:86:90:B6:6E:D8:99:8C:60:0C:05:DE X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oGaIKce8n7KnhpC2btiZjGAMBd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 1e:85:36:cb:bd:8b:9f:9c:17:c0:fd:4c:c3:82:f6:05:eb:0e: 7c:03:ed:cf:85:06:52:a2:88:fe:e7:f0:67:80:1f:3b:fc:f7: a7:2c:06:6a:8d:3e:63:6b:81:ff:bf:a8:79:20:6b:64:1e:12: 8b:6a:bf:70:63:7c:3a:49:96:54:b1:4e:9c:2b:af:7e:97:a8: 5c:30:23:33:20:57:25:91:15:a6:d2:e1:b7:23:7a:eb:6b:cd: f0:85:5d:45:ab:63:db:28:8a:f6:e1:e2:87:17:d5:d0:1c:0d: e9:78:41:b4:ab:f7:e2:36:e7:bb:81:25:77:5c:f5:9a:8d:26: 87:e1:19:75:0a:c2:92:8b:dd:53:d7:dd:25:84:4a:53:99:36: 00:96:35:0b:33:8b:7a:2f:49:b1:ef:38:96:ec:44:4c:bd:c1: 4b:c9:1f:23:d3:11:fd:ce:27:8d:1b:0e:d1:83:77:dd:93:2b: 44:f7:c0:00:e5:6b:8d:65:e9:5a:3d:57:75:e5:13:18:67:83: b6:7c:7a:b1:4b:43:32:ee:7a:8e:f8:65:27:fd:cc:c2:f4:c6: 9c:ca:4e:c5:90:50:ee:ad:49:47:eb:28:1d:f5:38:4d:12:82: c5:6b:bd:10:e9:cf:e2:66:d7:66:fa:a2:23:d3:d0:df:8c:30: 8b:7c:68:8c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZCYqzE0abzXgz0qk0SsxDnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNzA5MTgwNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDY2ODgyOWM3YmM5ZmIyYTc4NjkwYjY2ZWQ4OTk4YzYwMGMwNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz5q+tB3PnjWHDRaC/baxEDuk5mQ QCOuYblUdqlMw/wrg89PfeVPkBD/U7usie+ji2yRrNNd/sBXVlB9JRx3ZUunTEKK QWwz9VCOLJU7lKhRzWF/3NlpC0FdiUicY80XeXArTG8JmWMdHxNCO/yl8URj++Ru O+Qvo4P3xJRElDkCKHxtd1vnC/ABw0XZBmOUhqnuN9k4MgL4RXXXhbzCkvP2NJcw itMHAiGqTkzyI27LolMpSZI1RrnNcyf+RDrlMqRaH0Lsv31S3sBsnclZw3vLIg44 qDbvOvjhb86W7tsQ0shpVx9UvnPHjD4wp6NkWe8yAExJ1WpxUHFb3wQ5WwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKBmiCnHvJ+yp4aQtm7YmYxgDAXeMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvb0dhSUtjZThuN0tuaHBDMmJ0aVpqR0FNQmQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB6FNsu9i5+cF8D9TMOC 9gXrDnwD7c+FBlKiiP7n8GeAHzv896csBmqNPmNrgf+/qHkga2QeEotqv3BjfDpJ llSxTpwrr36XqFwwIzMgVyWRFabS4bcjeutrzfCFXUWrY9soivbh4ocX1dAcDel4 QbSr9+I257uBJXdc9ZqNJofhGXUKwpKL3VPX3SWESlOZNgCWNQszi3ovSbHvOJbs REy9wUvJHyPTEf3OJ40bDtGDd92TK0T3wADla41l6Vo9V3XlExhng7Z8erFLQzLu eo74ZSf9zML0xpzKTsWQUO6tSUfrKB31OE0SgsVrvRDpz+Jm12b6oiPT0N+MMIt8 aIw= -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:51 2025 by rpki-client