This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BLSxy3I3LvXbBuMNynYoNHjz1rU.roa File: BLSxy3I3LvXbBuMNynYoNHjz1rU.roa (raw, json) Hash identifier: eF0MteO8HUEmC4+LgTn/YPNW+ZA3iGhGks35vI4Suxk= Subject key identifier: 04:B4:B1:CB:72:37:2E:F5:DB:06:E3:0D:CA:76:28:34:78:F3:D6:B5 Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018FA2FA9638BE96405DDCE8E89C6C8D566E Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BLSxy3I3LvXbBuMNynYoNHjz1rU.roa Signing time: Thu 23 May 2024 01:04:42 +0000 ROA not before: Thu 23 May 2024 01:04:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128 2001:67c:64:ffff:0:18f:a2fa:364f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:a2:fa:96:38:be:96:40:5d:dc:e8:e8:9c:6c:8d:56:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 23 01:04:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=04b4b1cb72372ef5db06e30dca76283478f3d6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cd:2f:26:d9:4b:ad:6a:b0:89:e2:f4:6c:fd: 37:67:aa:85:78:8b:2c:88:5f:e3:c9:59:3a:40:2d: 26:5a:20:66:67:84:5c:77:8f:27:bc:22:b9:e0:9e: ad:92:61:36:f1:09:03:19:f3:2a:c5:c0:56:bb:03: c9:7f:36:63:89:72:40:9e:b6:de:59:21:54:44:28: ba:91:95:13:0d:b2:35:05:41:b9:ed:a6:1d:e8:fc: 45:a6:3d:80:ee:fd:0d:e4:dd:7c:b1:6a:6b:f8:f7: 62:10:3c:9a:bc:80:56:92:78:67:02:c4:60:43:56: fa:ac:2e:a2:14:c8:d9:45:b1:2a:b3:4b:49:64:64: 7a:15:66:d4:61:04:bc:1c:b0:4e:47:52:3e:a8:86: 69:8d:db:0a:94:b4:96:f3:94:8c:0f:ef:88:5a:92: 1c:9e:44:ea:30:7b:9e:8f:a6:4c:19:9a:77:1e:5f: 59:55:97:40:55:86:63:96:94:e7:36:d4:8a:3b:20: 01:c9:90:92:b4:b4:04:a3:45:f6:cd:58:24:7c:0d: d4:9b:6d:88:58:c1:fb:52:55:e8:f8:3d:b0:7d:6f: c8:db:b5:a2:f2:ec:02:21:4e:ad:e5:2c:e7:ef:1a: c7:04:b9:1a:3d:7a:73:38:af:8c:f3:14:88:14:4a: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B4:B1:CB:72:37:2E:F5:DB:06:E3:0D:CA:76:28:34:78:F3:D6:B5 X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BLSxy3I3LvXbBuMNynYoNHjz1rU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 31:90:dd:f1:ec:36:45:c0:b1:b4:a5:d8:cf:39:46:d1:74:b8: 56:45:00:b4:7e:cf:be:92:0e:08:8f:ff:e1:8e:f4:50:ff:8c: 91:e5:39:0d:16:f2:b2:5e:24:d2:fe:2e:ee:9b:c5:fb:52:ce: 67:c8:e5:01:79:b1:f1:cb:d2:d5:7e:52:3a:8f:1b:e3:cb:56: f3:3f:53:3a:0f:ff:d7:07:c1:7f:63:07:de:9e:99:52:56:53: 32:9d:95:e0:ab:0c:60:01:73:5b:40:bd:b5:97:e1:dc:fd:3d: 1e:3a:d3:5f:67:d7:59:ab:e6:81:bd:23:dc:c0:c8:ad:6a:74: b1:8a:3e:95:3c:98:04:37:dc:7e:b0:6d:1a:8e:f2:b5:7a:3b: 73:a1:3d:db:72:05:90:b6:b6:f8:90:ac:2a:4b:e2:e5:3c:14: 66:d4:be:5c:b7:e5:54:8a:8e:25:5d:88:25:7a:7d:f3:74:fa: 44:05:60:0d:5d:fe:df:56:78:66:9d:62:4e:7f:8e:a9:30:43: 09:c4:a0:eb:37:e2:86:d3:37:35:e1:08:4c:0e:2b:c0:e7:be: 94:f0:03:56:57:da:ad:a9:be:29:6f:6e:af:7d:c5:02:65:f5: 67:92:b6:2e:00:ec:cb:16:47:8f:75:d0:5f:ac:17:55:58:95: d3:5b:03:97 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY+i+pY4vpZAXdzo6JxsjVZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTIzMDEwNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGI0YjFjYjcyMzcyZWY1ZGIwNmUzMGRjYTc2MjgzNDc4ZjNkNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM0vJtlLrWqwieL0bP03Z6qFeIss iF/jyVk6QC0mWiBmZ4Rcd48nvCK54J6tkmE28QkDGfMqxcBWuwPJfzZjiXJAnrbe WSFURCi6kZUTDbI1BUG57aYd6PxFpj2A7v0N5N18sWpr+PdiEDyavIBWknhnAsRg Q1b6rC6iFMjZRbEqs0tJZGR6FWbUYQS8HLBOR1I+qIZpjdsKlLSW85SMD++IWpIc nkTqMHuej6ZMGZp3Hl9ZVZdAVYZjlpTnNtSKOyAByZCStLQEo0X2zVgkfA3Um22I WMH7UlXo+D2wfW/I27Wi8uwCIU6t5Szn7xrHBLkaPXpzOK+M8xSIFEoUPQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAS0sctyNy712wbjDcp2KDR489a1MB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvQkxTeHkzSTNMdlhiQnVNTnluWW9OSGp6MXJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADGQ3fHsNkXAsbSl2M85 RtF0uFZFALR+z76SDgiP/+GO9FD/jJHlOQ0W8rJeJNL+Lu6bxftSzmfI5QF5sfHL 0tV+UjqPG+PLVvM/UzoP/9cHwX9jB96emVJWUzKdleCrDGABc1tAvbWX4dz9PR46 019n11mr5oG9I9zAyK1qdLGKPpU8mAQ33H6wbRqO8rV6O3OhPdtyBZC2tviQrCpL 4uU8FGbUvly35VSKjiVdiCV6ffN0+kQFYA1d/t9WeGadYk5/jqkwQwnEoOs34obT NzXhCEwOK8DnvpTwA1ZX2q2pvilvbq99xQJl9WeSti4A7MsWR4910F+sF1VYldNb A5c= -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:34 2025 by rpki-client