This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vX0JX-BXWiLXoBZwbJzHgCYSq44.roa File: vX0JX-BXWiLXoBZwbJzHgCYSq44.roa (raw, json) Hash identifier: D/XCqVhxbU/Be9E9pJCD68yw1ZpDFLFC/KavTJYYQRs= Subject key identifier: BD:7D:09:5F:E0:57:5A:22:D7:A0:16:70:6C:9C:C7:80:26:12:AB:8E Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F6DFAB04DFB0A1C8F2397BBF571FB7519 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vX0JX-BXWiLXoBZwbJzHgCYSq44.roa Signing time: Sun 12 May 2024 18:04:56 +0000 ROA not before: Sun 12 May 2024 18:04:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128 2001:67c:64:ffff:0:18f:6dfa:f12/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:6d:fa:b0:4d:fb:0a:1c:8f:23:97:bb:f5:71:fb:75:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 12 18:04:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=bd7d095fe0575a22d7a016706c9cc7802612ab8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:8d:4f:05:18:2a:9d:7c:72:7a:65:d5:a9: c4:fc:b7:29:79:3f:41:3f:35:a0:85:0e:e1:63:05: 98:78:db:40:44:c9:19:7e:e3:7c:df:46:b9:56:3b: 76:1a:e5:0a:44:ea:91:64:ec:ca:4b:7a:34:aa:f0: 6a:41:0c:7a:5d:ed:0b:e5:03:74:ab:30:04:ac:ec: fc:f4:64:f9:fb:9b:7c:2b:be:2e:1e:28:70:e4:63: fc:a5:ff:b6:cd:bf:d9:01:36:60:fa:47:04:0c:51: 31:d6:59:14:07:45:0e:a0:65:f1:3e:d6:01:bb:98: 65:4b:9b:fc:27:b8:ae:9c:d7:ee:53:10:5d:b9:d8: 1f:d9:7c:fe:4b:0e:8f:0d:3c:41:4d:71:12:13:de: bd:54:d7:b7:76:be:9e:4e:86:5f:ef:bc:65:fc:d2: 0e:59:81:b6:4d:04:6a:9c:b7:ac:69:6a:55:11:f0: ec:a1:7c:05:27:d0:f2:d4:88:93:bb:4e:db:6a:18: d7:41:77:24:bd:34:b8:6e:bf:c1:e5:c3:0e:36:80: 19:8d:26:d3:e5:ae:ca:f2:2a:6b:74:d9:6a:62:16: ff:5d:ec:27:83:21:b8:3b:69:93:bf:c7:77:7d:eb: 29:c8:eb:73:67:e4:79:9f:75:72:8e:bb:e9:37:52: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7D:09:5F:E0:57:5A:22:D7:A0:16:70:6C:9C:C7:80:26:12:AB:8E X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/vX0JX-BXWiLXoBZwbJzHgCYSq44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 54:01:b3:15:ba:50:ed:e8:45:f5:16:85:57:b4:3b:06:a3:f9: 25:6c:42:cc:d0:41:57:cc:1c:93:63:cc:07:c2:bb:df:6f:82: 1a:7b:4c:f9:ff:07:ad:72:7f:ea:76:82:25:cb:3b:5b:bf:b6: 3e:94:9c:49:91:a4:44:c4:84:22:e0:f8:1c:e5:fa:5b:2c:60: 0d:f5:91:5a:82:ec:1b:a9:40:c8:14:81:0b:18:b0:02:32:ac: 02:0a:05:95:18:f4:2e:99:7b:da:e4:de:1d:01:ef:65:ca:18: 2f:4d:9a:4a:ac:3d:44:59:5b:5f:e7:11:d5:b0:f3:c2:39:dd: 84:34:d5:e5:0c:d4:fb:07:ae:68:2f:d4:24:e4:74:ff:35:67: 9c:93:97:cf:38:f8:24:37:90:93:2e:5d:4c:f2:8a:7b:a4:6a: 0e:d8:b8:f5:f9:52:54:03:3d:d7:e3:9b:2d:5f:6d:54:ed:7a: dc:62:b0:d0:d3:a0:d4:a6:d8:eb:b1:ea:68:db:a4:0c:cf:6b: 94:07:43:29:fd:0f:8d:bc:bc:39:a6:aa:50:4b:6b:b7:16:00: 64:69:f1:b6:17:c9:08:2e:a6:6a:eb:4f:36:10:67:1a:fc:d2: 77:33:3c:c2:ba:c0:26:ba:15:e6:27:94:5e:45:cd:88:43:32: fe:2c:a3:2c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY9t+rBN+wocjyOXu/Vx+3UZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTEyMTgwNDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDdkMDk1ZmUwNTc1YTIyZDdhMDE2NzA2YzljYzc4MDI2MTJhYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdeNTwUYKp18cnpl1anE/LcpeT9B PzWghQ7hYwWYeNtARMkZfuN830a5Vjt2GuUKROqRZOzKS3o0qvBqQQx6Xe0L5QN0 qzAErOz89GT5+5t8K74uHihw5GP8pf+2zb/ZATZg+kcEDFEx1lkUB0UOoGXxPtYB u5hlS5v8J7iunNfuUxBdudgf2Xz+Sw6PDTxBTXESE969VNe3dr6eToZf77xl/NIO WYG2TQRqnLesaWpVEfDsoXwFJ9Dy1IiTu07bahjXQXckvTS4br/B5cMONoAZjSbT 5a7K8iprdNlqYhb/XewngyG4O2mTv8d3fespyOtzZ+R5n3VyjrvpN1KzDwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL19CV/gV1oi16AWcGycx4AmEquOMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvdlgwSlgtQlhXaUxYb0Jad2JKekhnQ1lTcTQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFQBsxW6UO3oRfUWhVe0 Owaj+SVsQszQQVfMHJNjzAfCu99vghp7TPn/B61yf+p2giXLO1u/tj6UnEmRpETE hCLg+Bzl+lssYA31kVqC7BupQMgUgQsYsAIyrAIKBZUY9C6Ze9rk3h0B72XKGC9N mkqsPURZW1/nEdWw88I53YQ01eUM1PsHrmgv1CTkdP81Z5yTl884+CQ3kJMuXUzy inukag7YuPX5UlQDPdfjmy1fbVTtetxisNDToNSm2Oux6mjbpAzPa5QHQyn9D428 vDmmqlBLa7cWAGRp8bYXyQgupmrrTzYQZxr80nczPMK6wCa6FeYnlF5FzYhDMv4s oyw= -----END CERTIFICATE-----Generated at Mon Jan 5 19:09:12 2026 by rpki-client