This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/txIkzqW9uJmhum6qdid4O2_N5jE.roa File: txIkzqW9uJmhum6qdid4O2_N5jE.roa (raw, json) Hash identifier: oP9yCLeUaIrm2jgyM8fh57aEdPGFTqNHwjZqNOG6Pcs= Subject key identifier: B7:12:24:CE:A5:BD:B8:99:A1:BA:6E:AA:76:27:78:3B:6F:CD:E6:31 Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F3600DB2B68C57C0FC61726F3E3C265AD Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/txIkzqW9uJmhum6qdid4O2_N5jE.roa Signing time: Wed 01 May 2024 21:12:56 +0000 ROA not before: Wed 01 May 2024 21:12:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:36:00:db:2b:68:c5:7c:0f:c6:17:26:f3:e3:c2:65:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 1 21:12:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=b71224cea5bdb899a1ba6eaa7627783b6fcde631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:82:b8:46:67:b1:15:38:e0:3d:72:2c:b2: 4f:12:c8:f6:95:82:69:f8:88:e7:ca:ef:de:3e:31: aa:4b:d9:13:bc:9c:b1:8c:75:18:4a:7d:50:00:d8: ef:89:08:a5:89:f0:04:ea:42:bb:a9:ee:cf:4f:6d: 0e:52:64:96:cb:e8:c5:c6:8d:6e:c8:91:71:ee:6b: 58:89:f3:de:61:3e:41:0c:59:4d:61:a1:e6:55:fb: 64:76:74:35:75:b4:3f:da:d7:02:a3:06:b9:a8:b1: bc:d9:04:02:03:95:70:d4:25:38:48:6d:39:53:3f: 1b:60:48:43:fb:48:57:a9:7e:73:b9:da:30:97:c9: db:a4:d2:32:73:58:af:83:00:21:1e:78:77:7a:8c: 4f:00:c9:65:03:89:1b:53:48:5d:be:8b:f0:ae:ee: 3f:25:41:5a:ed:da:a1:2c:d9:c1:67:9d:b0:17:9f: 78:3c:b1:cd:93:71:3b:f4:e4:44:d2:f7:fd:7d:66: 87:20:50:16:6a:72:2b:fb:49:ca:6e:b0:21:9a:58: 94:26:62:1d:d7:65:8c:7c:58:ce:7c:65:df:c3:00: e5:fc:dc:6f:61:59:a5:fa:64:20:37:66:c1:e7:7c: 94:1f:97:4b:7b:7b:35:3f:fb:10:3f:2f:30:0e:66: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:12:24:CE:A5:BD:B8:99:A1:BA:6E:AA:76:27:78:3B:6F:CD:E6:31 X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/txIkzqW9uJmhum6qdid4O2_N5jE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 24:50:ec:8b:55:a2:6f:cd:48:a5:7a:7b:27:4e:2c:cf:c7:36: b5:d0:67:54:56:b1:49:23:24:b6:aa:3b:fa:29:4b:98:08:9f: 13:ae:70:0e:66:fb:05:ba:9d:d4:1b:05:9b:a2:39:b2:c1:3b: bc:a2:fe:d0:36:05:bd:0c:5e:e0:04:81:ad:6c:8b:80:32:3b: ba:57:c1:66:a8:a7:16:c2:ec:dd:5b:c6:28:11:32:ac:89:2b: dd:1a:8c:26:72:90:a4:91:7a:a9:a8:43:1f:1b:05:fd:5d:30: 47:3c:95:b1:9f:d5:fb:ab:f2:57:5f:1e:b1:5e:dc:7d:28:dd: 95:43:9f:a7:16:44:0a:b4:3e:25:d8:b0:94:bf:07:7f:ad:34: e2:2d:57:ed:6a:84:29:09:4c:2f:ea:b8:36:61:fe:7d:f5:53: e0:14:3f:d1:6b:04:c2:2d:a9:3b:72:30:21:a6:9e:c2:db:d7: e0:d9:4a:66:64:f8:c2:a2:86:45:e6:03:0f:cf:f2:f5:af:08: 33:6e:44:71:97:26:fd:5a:30:35:d4:ab:65:13:c9:24:83:a8: 74:42:47:69:ce:84:eb:88:7a:b1:98:c5:b6:0d:e0:e8:55:20: b8:38:f7:28:3b:b4:8f:1f:9a:ea:dc:9e:d5:d3:05:07:09:82: 9d:f2:52:bf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY82ANsraMV8D8YXJvPjwmWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTAxMjExMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzEyMjRjZWE1YmRiODk5YTFiYTZlYWE3NjI3NzgzYjZmY2RlNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqCCuEZnsRU44D1yLLJPEsj2lYJp +Ijnyu/ePjGqS9kTvJyxjHUYSn1QANjviQilifAE6kK7qe7PT20OUmSWy+jFxo1u yJFx7mtYifPeYT5BDFlNYaHmVftkdnQ1dbQ/2tcCowa5qLG82QQCA5Vw1CU4SG05 Uz8bYEhD+0hXqX5zudowl8nbpNIyc1ivgwAhHnh3eoxPAMllA4kbU0hdvovwru4/ JUFa7dqhLNnBZ52wF594PLHNk3E79ORE0vf9fWaHIFAWanIr+0nKbrAhmliUJmId 12WMfFjOfGXfwwDl/NxvYVml+mQgN2bB53yUH5dLe3s1P/sQPy8wDmaLZQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLcSJM6lvbiZobpuqnYneDtvzeYxMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvdHhJa3pxVzl1Sm1odW02cWRpZDRPMl9ONWpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACRQ7ItVom/NSKV6eydO LM/HNrXQZ1RWsUkjJLaqO/opS5gInxOucA5m+wW6ndQbBZuiObLBO7yi/tA2Bb0M XuAEga1si4AyO7pXwWaopxbC7N1bxigRMqyJK90ajCZykKSReqmoQx8bBf1dMEc8 lbGf1fur8ldfHrFe3H0o3ZVDn6cWRAq0PiXYsJS/B3+tNOItV+1qhCkJTC/quDZh /n31U+AUP9FrBMItqTtyMCGmnsLb1+DZSmZk+MKihkXmAw/P8vWvCDNuRHGXJv1a MDXUq2UTySSDqHRCR2nOhOuIerGYxbYN4OhVILg49yg7tI8fmurcntXTBQcJgp3y Ur8= -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:30 2026 by rpki-client