This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-N7Xoto-dQ_hrROx2yzcQPvBa1c.roa File: 1-N7Xoto-dQ_hrROx2yzcQPvBa1c.roa (raw, json) Hash identifier: 0Ekgzm07MlK5e3CGHN561hlXj3sdc60g1GhdnOUyfpE= Subject key identifier: F8:DE:D7:A2:DA:3E:75:0F:E1:AD:13:B1:DB:2C:DC:40:FB:C1:6B:57 Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F9A9EE0B4954EB3316E28AE36B2A0EC22 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-N7Xoto-dQ_hrROx2yzcQPvBa1c.roa Signing time: Tue 21 May 2024 10:07:34 +0000 ROA not before: Tue 21 May 2024 10:07:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128 2001:67c:64:ffff:0:18f:9a9d:f9b7/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:9a:9e:e0:b4:95:4e:b3:31:6e:28:ae:36:b2:a0:ec:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 21 10:07:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=f8ded7a2da3e750fe1ad13b1db2cdc40fbc16b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:1f:e2:4d:61:0d:62:ef:62:60:cf:0b:72: 60:2b:41:24:ce:7d:43:09:7b:3b:28:fb:07:31:d2: 4d:60:e4:70:bd:59:36:52:7d:b8:ed:ea:35:56:5a: c7:5d:71:e5:9a:2b:26:21:1d:e2:c5:77:f0:26:0d: 0b:6f:f4:88:07:81:36:08:76:be:3e:79:28:96:1e: 7e:69:f2:65:bf:87:11:0a:ba:8e:34:3b:30:4f:9f: e3:d9:41:08:23:b6:67:a3:df:6a:60:65:b1:64:a5: 2c:94:06:37:86:87:70:10:b1:f0:5c:15:40:5c:e4: 06:b6:a0:81:ba:e4:e1:47:bf:3a:41:2c:19:d3:c3: 52:bf:70:90:db:eb:30:8d:57:5d:dd:e1:b3:98:8d: e1:a3:6f:ac:21:cd:26:3a:a4:29:55:62:0f:f2:0b: c8:4c:45:af:97:20:ea:50:8d:db:74:0b:cf:94:16: 13:cc:86:1e:95:39:f8:9d:0e:c6:a8:6b:76:30:c7: e5:95:1a:18:5d:6f:5d:83:83:5e:ad:46:7d:01:a7: f5:18:fa:1e:dc:6b:b2:44:a2:74:12:82:10:ef:ba: 35:29:58:6b:6b:24:f4:54:a7:ae:72:f1:5f:d0:2e: 8a:2d:74:ec:f6:ff:d1:c4:47:60:2a:a8:2b:09:c8: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DE:D7:A2:DA:3E:75:0F:E1:AD:13:B1:DB:2C:DC:40:FB:C1:6B:57 X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-N7Xoto-dQ_hrROx2yzcQPvBa1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 5c:ed:79:23:fd:11:1f:52:a3:3d:b8:0a:e9:86:df:56:c0:b8: 96:80:11:d5:e5:0a:e4:0e:d6:6e:d6:77:b2:fc:18:6d:b0:42: 43:a7:1c:f9:95:7e:e7:9e:f5:f6:ef:8e:c4:66:3d:0b:e9:96: d7:c6:6b:6b:21:b5:5d:b8:2f:9a:e1:91:e3:51:62:7f:b7:e1: eb:f8:44:b3:ec:a7:ce:18:bd:85:06:bb:7a:c5:40:ee:59:77: 4e:e3:47:a9:10:37:f1:fb:49:b4:00:1c:72:dd:f5:00:9e:f2: bb:a4:b4:50:7a:bd:19:bd:79:db:43:eb:e3:9b:68:d4:e2:01: 15:66:06:1e:59:ee:da:4e:98:a2:20:1e:ca:6a:5f:4e:55:20: cc:e1:31:65:32:40:89:a5:e5:33:e4:52:06:a1:88:79:34:00: 3f:ee:0d:ca:94:ac:c9:d2:ce:02:c0:a3:db:b1:0b:bc:17:a5: a6:77:75:4d:13:66:32:73:e1:9f:04:d6:f9:5e:5d:80:cc:d8: 12:78:bf:f1:27:5b:92:e3:64:4c:b7:38:20:ff:c6:6f:8f:74: da:69:35:b1:76:2b:6e:2a:3d:c5:b1:17:66:6d:cb:1f:fa:9f: 13:a1:db:ec:e6:cb:1a:c0:0a:e8:be:00:2e:63:b6:f4:1a:06: 58:bf:99:81 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAY+anuC0lU6zMW4orjayoOwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTIxMTAwNzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGRlZDdhMmRhM2U3NTBmZTFhZDEzYjFkYjJjZGM0MGZiYzE2YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqekf4k1hDWLvYmDPC3JgK0Ekzn1D CXs7KPsHMdJNYORwvVk2Un247eo1VlrHXXHlmismIR3ixXfwJg0Lb/SIB4E2CHa+ Pnkolh5+afJlv4cRCrqONDswT5/j2UEII7Zno99qYGWxZKUslAY3hodwELHwXBVA XOQGtqCBuuThR786QSwZ08NSv3CQ2+swjVdd3eGzmI3ho2+sIc0mOqQpVWIP8gvI TEWvlyDqUI3bdAvPlBYTzIYelTn4nQ7GqGt2MMfllRoYXW9dg4NerUZ9Aaf1GPoe 3GuyRKJ0EoIQ77o1KVhrayT0VKeucvFf0C6KLXTs9v/RxEdgKqgrCchOCwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPje16LaPnUP4a0Tsdss3ED7wWtXMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvMS1ON1hvdG8tZFFfaHJST3gyeXpjUVB2QmExYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmUvZDg5MDI1LWQ2ZjMtNDg5MS05ZDg2LWQxMmYwMzlkYjJj OS8xL3NyN0VHOUx6c1huZUNWRkRCbE1MMF91c2NIcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBc7Xkj/REfUqM9uArp ht9WwLiWgBHV5QrkDtZu1ney/BhtsEJDpxz5lX7nnvX2747EZj0L6ZbXxmtrIbVd uC+a4ZHjUWJ/t+Hr+ESz7KfOGL2FBrt6xUDuWXdO40epEDfx+0m0ABxy3fUAnvK7 pLRQer0ZvXnbQ+vjm2jU4gEVZgYeWe7aTpiiIB7Kal9OVSDM4TFlMkCJpeUz5FIG oYh5NAA/7g3KlKzJ0s4CwKPbsQu8F6Wmd3VNE2Yyc+GfBNb5Xl2AzNgSeL/xJ1uS 42RMtzgg/8Zvj3TaaTWxdituKj3FsRdmbcsf+p8Todvs5ssawArovgAuY7b0GgZY v5mB -----END CERTIFICATE-----Generated at Mon Dec 29 14:40:01 2025 by rpki-client