This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/EBM3ky2fJhEBHKgFJhlb1fFIwG0.roa File: EBM3ky2fJhEBHKgFJhlb1fFIwG0.roa (raw, json) Hash identifier: ymy9kl09WHBtMNLRoNfpGtWEU3LjBMzgEGthrc6284k= Subject key identifier: 10:13:37:93:2D:9F:26:11:01:1C:A8:05:26:19:5B:D5:F1:48:C0:6D Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F9B7A261886A0E7EF3A9BAF4E18EC82F1 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/EBM3ky2fJhEBHKgFJhlb1fFIwG0.roa Signing time: Tue 21 May 2024 14:07:04 +0000 ROA not before: Tue 21 May 2024 14:07:04 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128 2001:67c:64:ffff:0:18f:9b7a:594/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:9b:7a:26:18:86:a0:e7:ef:3a:9b:af:4e:18:ec:82:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 21 14:07:04 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=101337932d9f2611011ca80526195bd5f148c06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:7f:92:62:43:a4:f7:56:02:83:7f:a3:17: 9a:d3:5f:cb:6a:44:1f:c1:dd:76:32:7a:b0:c8:bb: e4:e7:51:fb:c4:42:73:a8:39:ae:53:e6:68:8e:a4: 78:4c:7b:d2:c5:6d:41:ee:db:ce:a7:54:f3:d0:09: 39:90:e7:95:73:7c:29:a2:4a:87:df:67:3e:9c:d8: 8d:24:b1:57:06:e0:ad:53:0d:9a:66:92:e1:18:8a: 06:0d:a7:b6:43:3e:ea:ec:08:fa:43:18:ab:57:37: fe:2c:3c:b5:58:c9:fc:24:74:90:6f:f6:5c:a9:65: 15:7f:ea:f2:9f:56:5c:f9:5c:d2:59:52:ab:71:8d: e6:6a:94:39:e8:b1:e1:b5:d3:c8:23:19:3d:a8:45: 65:d6:38:0b:18:5e:73:a0:50:68:14:c3:c3:e7:e1: 1c:05:34:f9:8c:f6:9c:17:08:98:dd:d3:0f:ed:93: 0c:90:d6:f9:b5:fd:90:15:6f:36:b0:89:aa:2e:d1: bc:ad:03:ec:ae:b1:d4:e6:26:61:46:fc:29:8f:dd: 63:f3:de:11:36:6e:45:90:5d:fc:98:c7:ee:fb:5f: 22:8a:f3:37:f7:07:3c:66:50:b2:bf:b4:16:7c:22: 62:47:84:83:40:fe:1d:82:e7:50:86:67:33:d8:d6: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:13:37:93:2D:9F:26:11:01:1C:A8:05:26:19:5B:D5:F1:48:C0:6D X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/EBM3ky2fJhEBHKgFJhlb1fFIwG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 62:c5:8c:e0:76:be:41:10:4c:98:32:a9:a8:bf:aa:45:7f:ea: 8f:cf:1e:5a:f6:18:ee:49:ca:84:43:45:ad:5b:06:b0:a0:23: 47:9b:e8:ed:35:5f:4c:ed:46:02:26:b0:33:75:d0:81:ab:ef: 94:e3:ea:ba:41:72:4d:b7:0e:bb:71:5b:28:df:f5:35:2b:a9: 52:14:32:a1:3a:e3:3a:ad:c5:26:7b:b8:83:34:cd:dd:70:3e: a2:0a:ab:d5:45:5c:39:5d:40:22:90:f7:c5:8c:b3:2f:8d:1a: da:aa:e1:ab:f5:c6:33:ad:51:a3:4f:a8:27:15:82:d9:96:ff: 7f:81:82:c0:01:6d:5b:a7:4e:4a:8e:d7:31:29:48:02:ca:e1: ad:54:7e:ab:48:a9:e3:a7:9e:15:2f:2a:e7:30:8a:bb:fb:4f: ce:c5:aa:83:ce:fc:ea:7e:98:6d:7a:c4:59:9e:84:ef:54:8c: 5d:24:ac:4e:84:8d:18:47:e3:ae:00:90:00:60:f5:df:a2:61: 53:8a:4b:7e:ff:40:6f:c1:03:33:a3:80:c1:4a:11:3b:ec:fc: fd:d9:1a:d6:57:64:4a:d1:48:b1:02:6d:46:5a:e8:61:7c:a7: 3b:75:14:a3:47:8b:c8:a3:48:cd:d2:dc:e0:7c:c4:e2:36:a5: 54:3f:41:6b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY+beiYYhqDn7zqbr04Y7ILxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTIxMTQwNzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDEzMzc5MzJkOWYyNjExMDExY2E4MDUyNjE5NWJkNWYxNDhjMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlF/kmJDpPdWAoN/oxea01/LakQf wd12MnqwyLvk51H7xEJzqDmuU+ZojqR4THvSxW1B7tvOp1Tz0Ak5kOeVc3wpokqH 32c+nNiNJLFXBuCtUw2aZpLhGIoGDae2Qz7q7Aj6QxirVzf+LDy1WMn8JHSQb/Zc qWUVf+ryn1Zc+VzSWVKrcY3mapQ56LHhtdPIIxk9qEVl1jgLGF5zoFBoFMPD5+Ec BTT5jPacFwiY3dMP7ZMMkNb5tf2QFW82sImqLtG8rQPsrrHU5iZhRvwpj91j894R Nm5FkF38mMfu+18iivM39wc8ZlCyv7QWfCJiR4SDQP4dgudQhmcz2NaZqQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBATN5MtnyYRARyoBSYZW9XxSMBtMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvRUJNM2t5MmZKaEVCSEtnRkpobGIxZkZJd0cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGLFjOB2vkEQTJgyqai/ qkV/6o/PHlr2GO5JyoRDRa1bBrCgI0eb6O01X0ztRgImsDN10IGr75Tj6rpBck23 DrtxWyjf9TUrqVIUMqE64zqtxSZ7uIM0zd1wPqIKq9VFXDldQCKQ98WMsy+NGtqq 4av1xjOtUaNPqCcVgtmW/3+BgsABbVunTkqO1zEpSALK4a1UfqtIqeOnnhUvKucw irv7T87FqoPO/Op+mG16xFmehO9UjF0krE6EjRhH464AkABg9d+iYVOKS37/QG/B AzOjgMFKETvs/P3ZGtZXZErRSLECbUZa6GF8pzt1FKNHi8ijSM3S3OB8xOI2pVQ/ QWs= -----END CERTIFICATE-----Generated at Sun Dec 28 22:14:40 2025 by rpki-client