This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wh8Res318qo8QFHmeVaymoArr8Q.roa File: wh8Res318qo8QFHmeVaymoArr8Q.roa (raw, json) Hash identifier: DR5aU5J5jWVNyrUW1anMql5l1sZ8g4bOW23ub6d1gNg= Subject key identifier: C2:1F:11:7A:CD:F5:F2:AA:3C:40:51:E6:79:56:B2:9A:80:2B:AF:C4 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 018FAAEB0F1635B4DCBED0FB9A98AFE51D77 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wh8Res318qo8QFHmeVaymoArr8Q.roa Signing time: Fri 24 May 2024 14:04:42 +0000 ROA not before: Fri 24 May 2024 14:04:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:aaea:e87d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:aa:eb:0f:16:35:b4:dc:be:d0:fb:9a:98:af:e5:1d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: May 24 14:04:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=c21f117acdf5f2aa3c4051e67956b29a802bafc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:a7:01:5d:96:69:35:8e:23:f1:4d:5c:b2: b3:78:ef:a6:d6:9c:c4:1f:dd:e9:31:f2:5f:58:f5: cf:2b:10:2f:08:47:9b:95:2c:be:63:df:9d:43:2c: 98:94:bf:6e:37:42:38:40:1f:27:f5:30:8d:c5:1d: cb:a1:20:d0:c6:19:03:bb:9e:79:a9:2a:f9:2c:2c: 65:75:2f:9f:26:17:6c:93:64:d2:d7:9d:25:2c:c9: 7f:58:8f:29:29:09:11:27:96:ff:ab:49:7c:35:ab: f5:07:d4:5a:e2:74:8a:2c:32:01:2f:55:c8:9f:df: b6:7d:96:fb:ad:9a:c9:b2:10:17:5e:3f:be:a5:5e: 30:d2:a4:8a:4d:f6:aa:f9:ee:0c:3a:4d:98:86:2a: f5:6f:79:a5:05:03:fb:2c:87:33:af:8f:34:fc:27: 99:8e:dc:24:df:d4:2d:43:84:b9:bd:f6:e5:60:02: b8:6b:8f:c8:73:4d:e7:6d:c2:d2:a8:28:d8:c3:d9: c2:5d:cb:81:75:ec:30:02:02:f4:74:09:b2:92:6b: 31:78:70:24:03:da:7e:62:89:c0:77:cc:e1:b8:da: a0:6e:ef:da:d2:3e:84:08:84:6b:6e:2f:5d:b9:b6: 3f:b9:1f:d5:7f:1e:2d:12:86:ad:8a:4b:d4:a6:7d: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1F:11:7A:CD:F5:F2:AA:3C:40:51:E6:79:56:B2:9A:80:2B:AF:C4 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wh8Res318qo8QFHmeVaymoArr8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 2f:17:da:6c:38:16:c2:35:48:78:f3:13:43:d6:3c:a6:b6:9b: 0c:17:06:7f:d1:80:55:30:57:46:f4:a6:a8:96:9b:00:77:93: ab:2b:d8:6e:3f:c3:56:52:5a:42:26:85:ec:76:47:cf:d6:d2: 7a:5b:e7:ff:fe:29:95:d5:2d:86:3a:5b:ab:68:96:47:7c:a0: 07:c5:75:90:0b:16:db:93:ed:53:10:92:63:23:91:4b:5f:b3: 18:98:81:46:ef:89:37:85:41:91:14:70:81:9e:14:28:f4:0d: a9:50:27:7c:6d:73:61:06:1b:12:5a:26:57:06:82:7a:90:c9: 78:e1:85:25:d7:c4:b2:92:db:01:f2:c4:8a:ee:3a:f8:45:e7: 7d:cb:f7:99:39:9b:c0:20:db:4a:1c:83:00:dc:5e:c4:d1:69: 21:b9:9b:8b:5f:8f:a6:16:ed:86:00:3f:71:38:f0:23:06:30: e6:a5:48:68:11:5b:70:f3:70:9a:51:a4:08:29:f6:02:c8:43: 33:b5:e6:50:b1:61:4e:ab:93:b8:5c:c8:1b:32:e7:87:80:3f: a6:22:4f:02:16:af:a5:83:07:00:8c:46:8f:60:0c:fd:cf:e8: 1a:62:1a:dd:b9:b3:19:cf:1b:f6:40:64:b9:a0:74:f5:59:c9: c5:25:fa:bf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY+q6w8WNbTcvtD7mpiv5R13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNTI0MTQwNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjFmMTE3YWNkZjVmMmFhM2M0MDUxZTY3OTU2YjI5YTgwMmJhZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg2nAV2WaTWOI/FNXLKzeO+m1pzE H93pMfJfWPXPKxAvCEeblSy+Y9+dQyyYlL9uN0I4QB8n9TCNxR3LoSDQxhkDu555 qSr5LCxldS+fJhdsk2TS150lLMl/WI8pKQkRJ5b/q0l8Nav1B9Ra4nSKLDIBL1XI n9+2fZb7rZrJshAXXj++pV4w0qSKTfaq+e4MOk2Yhir1b3mlBQP7LIczr480/CeZ jtwk39QtQ4S5vfblYAK4a4/Ic03nbcLSqCjYw9nCXcuBdewwAgL0dAmykmsxeHAk A9p+YonAd8zhuNqgbu/a0j6ECIRrbi9dubY/uR/Vfx4tEoatikvUpn0MnQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMIfEXrN9fKqPEBR5nlWspqAK6/EMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvd2g4UmVzMzE4cW84UUZIbWVWYXltb0FycjhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC8X2mw4FsI1SHjzE0PW PKa2mwwXBn/RgFUwV0b0pqiWmwB3k6sr2G4/w1ZSWkImhex2R8/W0npb5//+KZXV LYY6W6tolkd8oAfFdZALFtuT7VMQkmMjkUtfsxiYgUbviTeFQZEUcIGeFCj0DalQ J3xtc2EGGxJaJlcGgnqQyXjhhSXXxLKS2wHyxIruOvhF533L95k5m8Ag20ocgwDc XsTRaSG5m4tfj6YW7YYAP3E48CMGMOalSGgRW3DzcJpRpAgp9gLIQzO15lCxYU6r k7hcyBsy54eAP6YiTwIWr6WDBwCMRo9gDP3P6BpiGt25sxnPG/ZAZLmgdPVZycUl +r8= -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:11 2025 by rpki-client