This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lJP7CUpMGHFb2L1EuPFMpivNVrQ.roa File: lJP7CUpMGHFb2L1EuPFMpivNVrQ.roa (raw, json) Hash identifier: RHXsaLISyWUFshI45WtigmEKW/83JUSm+9qPk/kV5Tk= Subject key identifier: 94:93:FB:09:4A:4C:18:71:5B:D8:BD:44:B8:F1:4C:A6:2B:CD:56:B4 Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F92B19D9ED4C22E3B2995C5DDEA204475 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lJP7CUpMGHFb2L1EuPFMpivNVrQ.roa Signing time: Sun 19 May 2024 21:11:04 +0000 ROA not before: Sun 19 May 2024 21:11:04 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:92:b1:9d:9e:d4:c2:2e:3b:29:95:c5:dd:ea:20:44:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 19 21:11:04 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=9493fb094a4c18715bd8bd44b8f14ca62bcd56b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:25:5c:44:6b:9d:69:16:6e:4e:d4:2f:a2: f9:ca:72:8c:98:00:b9:fe:6c:86:ef:51:d4:85:a6: a7:c1:2a:3e:51:0d:d9:8c:6a:fd:3e:18:85:9d:91: 95:c5:da:bf:9c:9e:2a:2f:d3:b3:8b:49:bf:fa:81: 79:38:c1:7c:21:ce:f8:eb:6b:b2:7e:c4:c0:60:d0: 71:92:32:96:55:29:22:3c:7a:87:2b:59:95:34:ea: d9:f2:ce:67:f2:e8:44:3a:65:44:74:ee:36:81:64: c8:fa:bd:e7:05:f5:32:33:8e:2d:39:67:9a:68:ce: e7:79:04:46:22:05:1f:45:4c:4c:d6:7a:dd:78:f3: ad:10:2a:ab:dd:1f:19:dd:1e:49:c1:ae:de:84:e1: 39:4b:b1:f9:cc:f9:a4:7f:c8:6d:da:2b:72:f4:01: 88:ae:dc:d7:a1:a7:07:25:73:67:03:cb:ff:c7:03: d2:3e:16:4e:23:ee:12:f8:59:e2:21:7f:e5:c8:28: c7:c5:4b:19:3c:1a:46:45:2d:f5:9c:89:a4:80:f2: 93:4c:39:bd:f2:58:33:b9:4c:9a:d6:7e:89:53:a9: 15:81:17:3e:ac:fb:bc:6d:41:3e:fa:2f:d6:a0:13: cd:36:b9:59:05:a6:c8:d9:30:9e:03:20:b9:27:c1: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:93:FB:09:4A:4C:18:71:5B:D8:BD:44:B8:F1:4C:A6:2B:CD:56:B4 X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lJP7CUpMGHFb2L1EuPFMpivNVrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 12:29:3c:c6:1d:fc:00:cf:66:f5:f7:f4:af:e3:79:09:72:86: e1:61:ed:e4:3b:3f:f3:d3:c8:49:60:90:b9:77:fd:f3:a1:dd: 61:16:46:5f:b5:0b:9c:1d:2d:7a:1e:6c:21:7b:bc:dc:bf:2a: 99:ce:77:83:69:b9:b7:fd:bc:b4:f1:19:11:e0:7c:17:94:96: 60:59:60:2f:3d:35:94:3f:ce:e7:41:54:ed:ba:30:07:e1:d4: 32:30:22:97:3e:bc:20:a8:3e:29:2b:5f:6b:14:e8:38:ff:7a: c1:92:0f:b9:1c:d4:cd:eb:e1:7a:e9:01:f9:87:8c:12:86:c4: d0:c6:db:7c:18:38:07:83:10:f9:d5:ba:2c:a0:ab:35:e9:70: d4:58:a7:1c:dc:e8:15:ae:a0:ce:3d:37:1b:ec:26:eb:c6:19: 8a:fe:dd:77:57:b2:13:d9:ae:2c:41:8d:36:6b:5e:c1:05:be: cc:4e:18:08:15:d5:1d:5d:5b:f8:ce:49:e1:1c:a2:dc:da:1e: 56:b5:6d:e8:8c:3d:45:c9:e0:66:aa:df:9c:bb:62:f3:bd:bd: 44:4d:50:3e:88:eb:3c:0f:bc:a7:4f:db:4e:9b:4a:a5:1a:ad: 42:36:7c:c9:d1:bb:4a:5e:4e:4d:69:20:8a:5d:43:44:54:a4: bb:0f:62:b7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY+SsZ2e1MIuOymVxd3qIER1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTE5MjExMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDkzZmIwOTRhNGMxODcxNWJkOGJkNDRiOGYxNGNhNjJiY2Q1NmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY0lXERrnWkWbk7UL6L5ynKMmAC5 /myG71HUhaanwSo+UQ3ZjGr9PhiFnZGVxdq/nJ4qL9Ozi0m/+oF5OMF8Ic7462uy fsTAYNBxkjKWVSkiPHqHK1mVNOrZ8s5n8uhEOmVEdO42gWTI+r3nBfUyM44tOWea aM7neQRGIgUfRUxM1nrdePOtECqr3R8Z3R5Jwa7ehOE5S7H5zPmkf8ht2ity9AGI rtzXoacHJXNnA8v/xwPSPhZOI+4S+FniIX/lyCjHxUsZPBpGRS31nImkgPKTTDm9 8lgzuUya1n6JU6kVgRc+rPu8bUE++i/WoBPNNrlZBabI2TCeAyC5J8H43QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJST+wlKTBhxW9i9RLjxTKYrzVa0MB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvbEpQN0NVcE1HSEZiMkwxRXVQRk1waXZOVnJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABIpPMYd/ADPZvX39K/j eQlyhuFh7eQ7P/PTyElgkLl3/fOh3WEWRl+1C5wdLXoebCF7vNy/KpnOd4Npubf9 vLTxGRHgfBeUlmBZYC89NZQ/zudBVO26MAfh1DIwIpc+vCCoPikrX2sU6Dj/esGS D7kc1M3r4XrpAfmHjBKGxNDG23wYOAeDEPnVuiygqzXpcNRYpxzc6BWuoM49Nxvs JuvGGYr+3XdXshPZrixBjTZrXsEFvsxOGAgV1R1dW/jOSeEcotzaHla1beiMPUXJ 4Gaq35y7YvO9vURNUD6I6zwPvKdP206bSqUarUI2fMnRu0peTk1pIIpdQ0RUpLsP Yrc= -----END CERTIFICATE-----Generated at Sun Dec 28 05:49:56 2025 by rpki-client