This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/3VLS9dgvr4979lcosHXm7PxHQg0.roa File: 3VLS9dgvr4979lcosHXm7PxHQg0.roa (raw, json) Hash identifier: UOyP1vgVputHnyeimjxnOFoG27fi0kW1EsjDILu+Pkg= Subject key identifier: DD:52:D2:F5:D8:2F:AF:8F:7B:F6:57:28:B0:75:E6:EC:FC:47:42:0D Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F0FCF3558B718A9235BD63C189AE15820 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/3VLS9dgvr4979lcosHXm7PxHQg0.roa Signing time: Wed 24 Apr 2024 11:13:08 +0000 ROA not before: Wed 24 Apr 2024 11:13:08 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:0f:cf:35:58:b7:18:a9:23:5b:d6:3c:18:9a:e1:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: Apr 24 11:13:08 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=dd52d2f5d82faf8f7bf65728b075e6ecfc47420d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:9d:43:b6:7d:12:42:aa:68:13:c8:bd:98: bc:20:74:8a:e2:ec:bc:5e:62:af:c5:1d:60:9c:22: fd:da:57:c2:90:31:e2:17:c4:14:18:71:d0:e7:1b: a3:1f:96:2a:92:04:ff:47:77:6f:dd:d3:87:6e:c0: 60:07:76:c0:51:a7:10:d1:d0:e7:47:56:8c:6d:35: 52:59:d0:9a:42:81:0a:2f:c8:a4:d4:c8:44:0f:0a: 8b:5a:c3:2f:03:e7:dc:59:8a:0e:91:ad:7e:67:28: 39:c6:94:dc:1b:79:af:71:0c:6e:4d:c3:ee:3f:08: 41:86:d0:1a:39:f6:7b:41:c8:35:a2:fa:d4:69:57: 43:1c:71:f5:c8:63:2f:d4:13:38:86:b8:dc:1a:84: 2c:a6:03:8d:22:10:8f:d8:60:07:4b:5f:47:b5:d5: 6d:5f:14:1b:51:a7:76:4d:e3:6b:4d:16:83:11:01: ea:ef:c5:66:77:3b:ca:ae:8b:34:0c:aa:f3:48:78: 38:5c:94:d6:68:16:e8:a3:30:f5:82:7f:14:4c:17: fe:21:cd:cb:0f:15:ce:a4:5e:09:03:ab:ba:75:a9: 91:7f:82:11:ef:de:c7:dd:84:72:70:79:39:79:97: ab:74:34:96:b9:24:1a:e7:0e:d2:1d:34:d4:ac:b5: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:52:D2:F5:D8:2F:AF:8F:7B:F6:57:28:B0:75:E6:EC:FC:47:42:0D X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/3VLS9dgvr4979lcosHXm7PxHQg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64:ffff:0:18f:543:9e41/128 Signature Algorithm: sha256WithRSAEncryption 3e:d7:6b:8e:73:04:12:45:ff:56:b4:89:3c:bf:53:68:b6:ae: 50:7c:69:91:1e:67:2b:34:48:5f:ff:8a:6f:a5:0f:9a:98:c1: 03:31:15:38:e6:d7:ca:81:66:ac:b4:6c:3c:c8:88:d0:62:af: f1:b7:eb:ce:58:4c:38:38:3d:69:3a:d8:44:a9:83:5e:a7:4e: 7f:a6:fd:36:39:56:bd:2f:0f:f3:6d:ed:c8:8c:c7:db:54:fc: 62:bb:93:7a:46:ac:b2:7a:19:72:62:dd:f2:ec:71:25:ed:26: c1:51:a7:46:24:7b:66:5c:5a:83:57:8f:27:18:66:ff:82:1e: da:7e:d6:d4:96:a0:23:3a:f1:31:42:75:ed:bf:c5:e1:ed:55: e9:ac:21:58:0b:8c:b1:39:f1:a0:af:5c:ad:0a:9a:14:b1:2e: 64:f0:56:a7:4a:c9:ad:cc:91:47:a8:90:e6:f4:c1:66:3d:19: d5:1e:37:44:c9:ca:da:94:ca:c5:a2:f6:c2:c4:3d:1c:62:3c: 5f:ef:90:82:01:35:19:20:9f:61:40:bd:bb:10:9b:7f:06:bc: 43:18:e1:93:f7:56:a1:b4:ae:ac:3b:fc:38:06:43:1b:9f:82: d2:ad:af:f9:6d:21:49:47:53:81:2d:9f:c1:da:4d:d4:d5:ee: fe:41:9f:a1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAY8PzzVYtxipI1vWPBia4VggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNDI0MTExMzA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDUyZDJmNWQ4MmZhZjhmN2JmNjU3MjhiMDc1ZTZlY2ZjNDc0MjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifydQ7Z9EkKqaBPIvZi8IHSK4uy8 XmKvxR1gnCL92lfCkDHiF8QUGHHQ5xujH5YqkgT/R3dv3dOHbsBgB3bAUacQ0dDn R1aMbTVSWdCaQoEKL8ik1MhEDwqLWsMvA+fcWYoOka1+Zyg5xpTcG3mvcQxuTcPu PwhBhtAaOfZ7Qcg1ovrUaVdDHHH1yGMv1BM4hrjcGoQspgONIhCP2GAHS19HtdVt XxQbUad2TeNrTRaDEQHq78VmdzvKros0DKrzSHg4XJTWaBboozD1gn8UTBf+Ic3L DxXOpF4JA6u6damRf4IR797H3YRycHk5eZerdDSWuSQa5w7SHTTUrLU1QwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFN1S0vXYL6+Pe/ZXKLB15uz8R0INMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvM1ZMUzlkZ3ZyNDk3OWxjb3NIWG03UHhIUWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQDwQAYMBkE AgACMBMDEQAgAQZ8AGT//wAAAY8FQ55BMA0GCSqGSIb3DQEBCwUAA4IBAQA+12uO cwQSRf9WtIk8v1Notq5QfGmRHmcrNEhf/4pvpQ+amMEDMRU45tfKgWastGw8yIjQ Yq/xt+vOWEw4OD1pOthEqYNep05/pv02OVa9Lw/zbe3IjMfbVPxiu5N6Rqyyehly Yt3y7HEl7SbBUadGJHtmXFqDV48nGGb/gh7aftbUlqAjOvExQnXtv8Xh7VXprCFY C4yxOfGgr1ytCpoUsS5k8FanSsmtzJFHqJDm9MFmPRnVHjdEycralMrFovbCxD0c Yjxf75CCATUZIJ9hQL27EJt/BrxDGOGT91ahtK6sO/w4BkMbn4LSra/5bSFJR1OB LZ/B2k3U1e7+QZ+h -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:23 2025 by rpki-client