This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-NPZB3Z6CBoPueoT5dSQjgBXntA.roa File: 1-NPZB3Z6CBoPueoT5dSQjgBXntA.roa (raw, json) Hash identifier: acX4Rg3pUEdpEUW0tP7K4o1oUAKrwQ+QLSCp9YGUSrI= Subject key identifier: F8:D3:D9:07:76:7A:08:1A:0F:B9:EA:13:E5:D4:90:8E:00:57:9E:D0 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01868DD3D31C0F2694CCEB99828CB1ACAC45 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-NPZB3Z6CBoPueoT5dSQjgBXntA.roa Signing time: Sun 26 Feb 2023 13:05:14 +0000 ROA not before: Sun 26 Feb 2023 13:05:14 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:8dd3:16e5/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:8d:d3:d3:1c:0f:26:94:cc:eb:99:82:8c:b1:ac:ac:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 26 13:05:14 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=f8d3d907767a081a0fb9ea13e5d4908e00579ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:48:0c:9a:5a:34:55:80:93:1a:d4:d2:03: 6d:68:18:14:82:06:25:1f:61:df:75:fa:ee:98:85: bb:71:92:f9:1a:77:2b:24:3e:e7:8f:4b:8c:f7:e5: 6d:a1:10:0f:bc:b3:68:ac:e2:12:6d:e0:92:0d:f8: d8:c8:31:d2:6e:c1:e0:ef:70:f2:42:cc:c5:7b:d5: 7c:b9:ef:89:1a:71:5e:50:85:21:9c:5f:c7:5b:73: 45:33:74:bc:28:6a:a6:88:bd:2a:87:17:60:06:5b: e1:35:dc:06:5e:3f:f8:09:7d:09:c5:4e:61:04:84: 31:f8:e5:d9:f4:14:80:60:b3:6d:88:c3:af:41:4c: b6:9d:b1:72:f3:50:7d:74:53:7c:e5:d7:af:80:bf: ad:a1:de:e7:07:66:c7:ff:cd:f4:ec:80:b5:c3:f9: cd:ff:c9:99:b1:26:91:e4:0a:23:79:0f:b2:5e:49: 54:0b:b8:25:5b:e3:be:29:61:51:18:ca:f2:83:5f: 03:de:5d:d7:8d:6f:0c:e9:dd:75:49:db:ce:5c:0d: b3:6c:80:84:5a:79:34:d3:23:d5:95:35:66:75:b9: 16:5b:70:1d:8a:8a:68:e9:33:21:16:b3:76:1a:07: a6:82:63:e3:e9:24:d1:c5:f7:41:45:a3:08:d0:27: f3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D3:D9:07:76:7A:08:1A:0F:B9:EA:13:E5:D4:90:8E:00:57:9E:D0 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-NPZB3Z6CBoPueoT5dSQjgBXntA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 30:73:03:90:7d:5a:a7:fc:95:5f:8f:eb:be:63:1b:af:7a:4f: 5f:1e:14:f5:89:cc:ef:73:37:ae:71:65:e2:9b:91:41:65:b9: 9f:09:6b:d1:51:38:4d:4c:66:b5:0c:9d:04:93:42:b0:3c:c5: 35:3d:6d:28:68:39:25:9c:66:f2:3f:d1:b6:75:18:ca:95:12: ec:ec:e8:32:00:83:91:ed:25:b9:15:9b:a5:98:6b:60:0a:f1: f7:a1:b8:fc:e6:96:b9:ba:7a:52:ed:1a:f8:57:47:69:55:05: 4b:f3:ee:a4:7c:6b:3d:c0:3d:88:57:10:06:66:53:40:58:f1: 3b:88:e9:1a:76:c7:c2:c8:05:4e:fb:f0:25:86:08:fe:ef:d3: e6:71:d0:86:61:49:3d:34:98:b6:74:41:10:b5:d1:65:ee:2c: 12:76:3b:a1:7f:4e:8d:85:bf:32:1a:c2:a2:4c:a5:eb:26:4f: 18:18:10:b3:93:9e:41:1f:ab:f7:f3:cc:e2:9c:f0:37:ea:4e: ca:8b:6a:51:f2:e3:d2:49:66:fb:30:cd:e6:eb:05:d4:8f:52: d4:50:d6:43:b4:d7:c8:f8:d7:5a:4d:55:d6:87:ae:10:d2:80: c6:36:46:18:c0:a8:cf:09:26:43:54:f3:ca:c7:38:c3:26:dd: 50:f8:c3:d4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAYaN09McDyaUzOuZgoyxrKxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjI2MTMwNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGQzZDkwNzc2N2EwODFhMGZiOWVhMTNlNWQ0OTA4ZTAwNTc5ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM5IDJpaNFWAkxrU0gNtaBgUggYl H2HfdfrumIW7cZL5GncrJD7nj0uM9+VtoRAPvLNorOISbeCSDfjYyDHSbsHg73Dy QszFe9V8ue+JGnFeUIUhnF/HW3NFM3S8KGqmiL0qhxdgBlvhNdwGXj/4CX0JxU5h BIQx+OXZ9BSAYLNtiMOvQUy2nbFy81B9dFN85devgL+tod7nB2bH/8307IC1w/nN /8mZsSaR5AojeQ+yXklUC7glW+O+KWFRGMryg18D3l3XjW8M6d11SdvOXA2zbICE Wnk00yPVlTVmdbkWW3Adiopo6TMhFrN2GgemgmPj6STRxfdBRaMI0CfzBwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPjT2Qd2eggaD7nqE+XUkI4AV57QMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvMS1OUFpCM1o2Q0JvUHVlb1Q1ZFNRamdCWG50QS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAwcwOQfVqn/JVfj+u+ Yxuvek9fHhT1iczvczeucWXim5FBZbmfCWvRUThNTGa1DJ0Ek0KwPMU1PW0oaDkl nGbyP9G2dRjKlRLs7OgyAIOR7SW5FZulmGtgCvH3obj85pa5unpS7Rr4V0dpVQVL 8+6kfGs9wD2IVxAGZlNAWPE7iOkadsfCyAVO+/Alhgj+79PmcdCGYUk9NJi2dEEQ tdFl7iwSdjuhf06Nhb8yGsKiTKXrJk8YGBCzk55BH6v388zinPA36k7Ki2pR8uPS SWb7MM3m6wXUj1LUUNZDtNfI+NdaTVXWh64Q0oDGNkYYwKjPCSZDVPPKxzjDJt1Q +MPU -----END CERTIFICATE-----Generated at Tue Dec 30 08:52:50 2025 by rpki-client