This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/0ZGHNbWsowM01vcjgQ_shUiZeX0.roa File: 0ZGHNbWsowM01vcjgQ_shUiZeX0.roa (raw, json) Hash identifier: jpiGjmEJkhDqs3ZRKEzxXHObojbvgAb6+fCg5qOSG6c= Subject key identifier: D1:91:87:35:B5:AC:A3:03:34:D6:F7:23:81:0F:EC:85:48:99:79:7D Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018FA4442D31C3A48516542F49A1ABE2D754 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/0ZGHNbWsowM01vcjgQ_shUiZeX0.roa Signing time: Thu 23 May 2024 07:04:42 +0000 ROA not before: Thu 23 May 2024 07:04:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128 2001:67c:64:ffff:0:18f:a443:b952/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:a4:44:2d:31:c3:a4:85:16:54:2f:49:a1:ab:e2:d7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 23 07:04:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=d1918735b5aca30334d6f723810fec854899797d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ac:ec:fe:09:82:ba:88:ce:41:79:5c:f8:b2: c7:a3:3c:19:7f:6c:a2:73:7b:2f:56:e8:84:dc:42: 3a:e6:c6:d7:c1:86:47:9d:08:7b:ad:56:40:fb:c0: 85:bd:07:ef:fd:5f:1c:16:71:65:94:9c:84:89:5b: 91:d9:8a:55:66:3e:e5:9f:aa:5e:a5:54:38:b4:55: be:66:ad:2b:45:18:b2:09:a2:0d:ba:d4:c3:31:7e: 6f:75:98:4b:e0:22:cc:0c:27:e0:65:1e:d0:f8:59: 4e:20:d9:3d:74:d6:b8:33:5a:c5:32:45:1d:87:56: 78:51:0f:c9:a3:20:29:1f:18:7f:53:18:73:be:16: 11:79:f7:25:37:65:17:7b:3a:c8:a3:a0:c5:4f:16: 3f:1b:bb:46:c9:c7:23:b1:da:0b:c8:e1:8e:14:f6: fc:96:11:d9:8c:f7:f1:c0:45:01:3f:3d:3d:55:b5: 20:f2:85:ee:f3:9c:cc:d5:1b:0f:d9:7e:f5:a3:8e: ee:bc:d2:4d:25:ee:ec:ab:e7:c1:1b:60:bb:1b:a3: 99:37:45:b2:04:cd:b3:a9:bf:87:47:d5:56:5e:4f: fc:6b:63:3e:0f:07:ab:d7:ff:ce:62:c5:fa:04:e2: 93:f6:78:d0:d6:ad:f2:46:e7:66:14:d3:00:d3:ac: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:91:87:35:B5:AC:A3:03:34:D6:F7:23:81:0F:EC:85:48:99:79:7D X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/0ZGHNbWsowM01vcjgQ_shUiZeX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption d2:ed:3c:f7:10:33:9b:dc:91:f9:6e:71:29:70:71:69:97:d1: 99:9e:c7:e5:4a:52:34:5f:55:9e:ef:e2:4c:14:3b:50:a4:28: af:ed:12:aa:9b:f7:fd:8a:62:0e:bf:d0:69:91:11:ed:1a:d5: 11:12:74:d9:d1:e4:f5:73:be:c8:41:fe:ee:99:2e:a8:1d:3c: 13:13:b8:0b:66:1f:93:ea:22:44:78:fb:88:20:19:7b:e3:6b: 75:ba:97:11:20:91:a2:bc:3f:7c:b1:31:f6:c2:08:15:e9:ac: fc:a3:86:5c:3b:e1:db:c2:6a:a0:a4:b5:81:f0:22:95:1d:b1: 50:eb:ba:30:5d:45:ee:c5:d2:24:5e:1d:42:f7:1d:f3:11:d2: d3:bc:06:14:36:18:34:8c:20:9d:49:db:c8:b7:03:75:f4:01: ca:58:0d:9e:af:fa:07:4f:08:41:28:e2:98:53:7f:89:8b:46: 30:e1:58:c8:a9:0e:04:00:94:15:b6:a3:4e:8f:2e:3d:0b:6d: 81:0c:de:ac:ab:d4:99:67:83:74:df:da:42:d6:ad:bb:49:56: 58:06:82:23:d5:82:e8:54:a9:79:8b:fa:33:03:b2:02:2a:c1: 86:e6:b6:33:ff:e4:7f:70:cc:22:75:ad:69:57:5d:92:79:08: 40:c5:7b:74 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY+kRC0xw6SFFlQvSaGr4tdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTIzMDcwNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTkxODczNWI1YWNhMzAzMzRkNmY3MjM4MTBmZWM4NTQ4OTk3OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qzs/gmCuojOQXlc+LLHozwZf2yi c3svVuiE3EI65sbXwYZHnQh7rVZA+8CFvQfv/V8cFnFllJyEiVuR2YpVZj7ln6pe pVQ4tFW+Zq0rRRiyCaINutTDMX5vdZhL4CLMDCfgZR7Q+FlOINk9dNa4M1rFMkUd h1Z4UQ/JoyApHxh/UxhzvhYRefclN2UXezrIo6DFTxY/G7tGyccjsdoLyOGOFPb8 lhHZjPfxwEUBPz09VbUg8oXu85zM1RsP2X71o47uvNJNJe7sq+fBG2C7G6OZN0Wy BM2zqb+HR9VWXk/8a2M+Dwer1//OYsX6BOKT9njQ1q3yRudmFNMA06y0BQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNGRhzW1rKMDNNb3I4EP7IVImXl9MB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvMFpHSE5iV3Nvd00wMXZjamdRX3NoVWlaZVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANLtPPcQM5vckflucSlw cWmX0Zmex+VKUjRfVZ7v4kwUO1CkKK/tEqqb9/2KYg6/0GmREe0a1RESdNnR5PVz vshB/u6ZLqgdPBMTuAtmH5PqIkR4+4ggGXvja3W6lxEgkaK8P3yxMfbCCBXprPyj hlw74dvCaqCktYHwIpUdsVDrujBdRe7F0iReHUL3HfMR0tO8BhQ2GDSMIJ1J28i3 A3X0AcpYDZ6v+gdPCEEo4phTf4mLRjDhWMipDgQAlBW2o06PLj0LbYEM3qyr1Jln g3Tf2kLWrbtJVlgGgiPVguhUqXmL+jMDsgIqwYbmtjP/5H9wzCJ1rWlXXZJ5CEDF e3Q= -----END CERTIFICATE-----Generated at Sun Dec 21 02:58:12 2025 by rpki-client