This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YuatqKz-GYtEts-E5C00AlZeS1c.roa File: YuatqKz-GYtEts-E5C00AlZeS1c.roa (raw, json) Hash identifier: NxKPkHh0EDB9c+ExHrrmVk1KvODMucfxAAHylHDdJ2k= Subject key identifier: 62:E6:AD:A8:AC:FE:19:8B:44:B6:CF:84:E4:2D:34:02:56:5E:4B:57 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018BD98607E180A24FDD4D1F474D11A4F263 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YuatqKz-GYtEts-E5C00AlZeS1c.roa Signing time: Thu 16 Nov 2023 19:05:21 +0000 ROA not before: Thu 16 Nov 2023 19:05:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18b:d985:2600/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:d9:86:07:e1:80:a2:4f:dd:4d:1f:47:4d:11:a4:f2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 16 19:05:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=62e6ada8acfe198b44b6cf84e42d3402565e4b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:8e:1c:4f:a3:ea:d7:0f:da:b1:ab:2f:67: 1b:ef:a4:a2:14:46:61:d2:38:e4:24:58:ff:ac:69: 80:78:81:e7:a8:7f:f4:33:b3:fa:ca:32:bd:81:05: 12:1d:d3:9c:78:60:d6:f1:ec:8d:cd:0d:57:a7:cc: ee:04:42:59:a2:da:3b:19:85:94:00:b7:47:34:e8: 03:39:18:dc:53:78:aa:9b:62:aa:2f:2a:18:bc:03: 43:2b:da:b4:52:c7:a4:ac:00:bd:e5:71:45:4e:44: 7c:96:8c:7d:2a:f9:dc:f5:ac:2f:09:d5:2e:36:a9: ad:60:ed:77:7e:c4:d0:39:e2:28:5b:66:75:47:57: b8:f5:b7:11:c1:24:b2:f4:76:a8:46:65:dc:a1:d2: be:be:56:bf:cb:18:90:b1:bd:52:91:6d:a8:65:d5: cc:09:09:eb:df:58:4d:d3:a2:77:b7:b6:e3:54:fb: 61:05:a7:16:6a:6d:db:48:53:6f:14:7c:12:6f:f9: eb:74:62:35:f7:d3:e8:77:35:7d:37:a0:f4:b8:f3: 0f:4f:37:08:86:c2:a2:a8:3e:72:3f:8e:cd:cf:0c: 3a:3d:8f:32:c2:65:61:7f:d8:b1:4f:83:d4:bf:7e: 28:6c:09:a7:05:a2:7b:f3:be:a1:53:c8:69:ca:73: 89:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E6:AD:A8:AC:FE:19:8B:44:B6:CF:84:E4:2D:34:02:56:5E:4B:57 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/YuatqKz-GYtEts-E5C00AlZeS1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption b2:51:35:44:0c:41:19:a5:48:82:e0:d5:a4:dd:79:ea:ed:78: 87:1f:1d:aa:f1:22:a6:aa:c3:b6:5a:5e:dd:34:fe:6c:a5:8f: e0:ac:b5:1e:63:07:ae:34:b5:84:ef:28:20:54:96:dc:22:f8: 4e:29:7a:89:a2:c9:a3:ef:a6:01:1a:57:4b:5a:a0:96:06:13: 08:37:18:fb:df:1b:37:b5:42:d8:88:57:31:f2:d5:6c:c4:fb: ac:01:3e:57:2e:7b:6a:b9:93:b7:b4:10:4e:8d:b7:b8:5a:46: 66:b2:2d:36:9f:ab:50:12:4e:27:55:dd:f0:10:a7:9d:90:9d: 92:25:c8:77:85:4b:a9:cb:03:76:2a:60:86:98:d1:35:e7:b7: 36:92:53:04:38:5c:cc:6a:62:53:19:81:fc:f6:9b:6f:54:0b: 4b:00:e6:f2:24:c1:8d:18:3a:8f:21:89:9a:c7:ca:ba:39:01: f8:b1:77:e0:b6:a2:26:49:80:81:22:55:80:28:da:00:9d:9f: 63:53:25:5c:62:cc:14:e9:b6:22:2f:95:9d:a6:98:9c:00:23: 22:18:72:b0:3f:a9:14:ed:36:30:de:98:e5:09:f2:87:a3:4b: 85:98:47:c5:e4:96:a8:7d:39:8e:50:5d:63:fc:f3:e5:ba:e9: 49:07:91:c6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYvZhgfhgKJP3U0fR00RpPJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTE2MTkwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmU2YWRhOGFjZmUxOThiNDRiNmNmODRlNDJkMzQwMjU2NWU0YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg+OHE+j6tcP2rGrL2cb76SiFEZh 0jjkJFj/rGmAeIHnqH/0M7P6yjK9gQUSHdOceGDW8eyNzQ1Xp8zuBEJZoto7GYWU ALdHNOgDORjcU3iqm2KqLyoYvANDK9q0UsekrAC95XFFTkR8lox9Kvnc9awvCdUu NqmtYO13fsTQOeIoW2Z1R1e49bcRwSSy9HaoRmXcodK+vla/yxiQsb1SkW2oZdXM CQnr31hN06J3t7bjVPthBacWam3bSFNvFHwSb/nrdGI199PodzV9N6D0uPMPTzcI hsKiqD5yP47Nzww6PY8ywmVhf9ixT4PUv34obAmnBaJ7876hU8hpynOJWQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGLmrais/hmLRLbPhOQtNAJWXktXMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvWXVhdHFLei1HWXRFdHMtRTVDMDBBbFplUzFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALJRNUQMQRmlSILg1aTd eerteIcfHarxIqaqw7ZaXt00/mylj+CstR5jB640tYTvKCBUltwi+E4peomiyaPv pgEaV0taoJYGEwg3GPvfGze1QtiIVzHy1WzE+6wBPlcue2q5k7e0EE6Nt7haRmay LTafq1ASTidV3fAQp52QnZIlyHeFS6nLA3YqYIaY0TXntzaSUwQ4XMxqYlMZgfz2 m29UC0sA5vIkwY0YOo8hiZrHyro5Afixd+C2oiZJgIEiVYAo2gCdn2NTJVxizBTp tiIvlZ2mmJwAIyIYcrA/qRTtNjDemOUJ8oejS4WYR8Xklqh9OY5QXWP88+W66UkH kcY= -----END CERTIFICATE-----Generated at Sat Dec 20 00:14:00 2025 by rpki-client