This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15Hc-Vk0gBPB4Dg34FV9uz3okWI.roa File: 15Hc-Vk0gBPB4Dg34FV9uz3okWI.roa (raw, json) Hash identifier: u0SAAKWJIQdVFgmaWubGXQftHV3hW2U6YRU3vdm2Tmo= Subject key identifier: D7:91:DC:F9:59:34:80:13:C1:E0:38:37:E0:55:7D:BB:3D:E8:91:62 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189BEEF4233FF3A483286B71783A5E581D2 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15Hc-Vk0gBPB4Dg34FV9uz3okWI.roa Signing time: Fri 04 Aug 2023 05:04:58 +0000 ROA not before: Fri 04 Aug 2023 05:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:beee:e233/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:be:ef:42:33:ff:3a:48:32:86:b7:17:83:a5:e5:81:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 4 05:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d791dcf959348013c1e03837e0557dbb3de89162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:81:15:1f:1b:32:dd:71:34:e3:e1:03:d8: a8:b2:0c:0a:6d:e0:1d:99:6c:53:92:d4:9a:12:9a: 20:d0:55:d8:80:83:42:70:72:c6:65:36:5e:d5:6c: aa:5d:27:fb:32:c4:1c:ae:ae:5b:e6:6d:0b:21:19: fd:4f:31:2f:d7:d5:97:16:9a:f9:48:8d:d9:91:e5: d3:03:f0:84:b8:18:77:85:31:24:47:bb:26:58:f8: b7:3b:27:d2:bb:03:33:34:3c:ce:d2:91:3c:c4:8b: 63:fe:a5:85:4a:0f:9a:f9:67:78:57:e0:b0:9e:8a: 86:6e:84:fe:be:41:2e:c0:82:6a:88:3f:cf:1c:92: bf:fc:49:19:f7:2c:de:93:bd:bf:73:e1:2a:aa:b2: 20:ec:67:90:cb:7c:d4:76:5e:55:21:a7:36:87:7a: 80:33:67:f6:8e:8c:17:ef:4b:a2:ee:9e:5f:ba:de: 2d:38:6e:b3:2a:c3:4e:0e:b2:19:a2:71:4d:d5:27: c3:05:58:21:a9:d9:4e:18:8a:6d:96:4c:b3:6e:d0: 38:f2:1f:dc:68:58:92:b4:59:21:96:ad:98:f2:df: e5:72:2c:49:7c:63:b4:93:90:13:1c:b9:0c:5d:d3: a0:c4:17:96:ef:83:6c:46:be:bb:ef:3e:6c:30:b7: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:91:DC:F9:59:34:80:13:C1:E0:38:37:E0:55:7D:BB:3D:E8:91:62 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15Hc-Vk0gBPB4Dg34FV9uz3okWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 0c:38:75:48:ea:25:07:69:3f:23:56:c9:cf:21:e2:6c:ea:e4: 7f:fa:85:63:9b:4a:c5:f2:49:d9:2f:41:f8:bd:38:69:86:06: c8:03:9c:d8:4a:fa:9e:42:c3:70:05:6c:ea:15:ba:84:d0:c7: b3:b0:5c:62:5f:fd:67:25:55:02:c0:96:da:b2:4b:58:23:51: bf:5f:b7:66:5c:17:2f:66:1e:e4:b5:0f:e6:b7:39:81:95:3e: 86:29:b3:2a:18:36:ad:fb:dd:7b:5d:98:d2:be:5e:76:0f:27: fa:c9:16:8d:e3:31:c7:a8:80:f3:fd:e5:cd:6d:d5:82:88:da: 56:78:56:e5:ff:48:01:19:0f:84:1d:e3:97:bb:59:a6:cd:87: af:f9:e3:6c:c7:ae:34:8d:0b:54:20:97:67:c5:45:03:71:2a: f0:a2:ee:ad:65:9a:5d:38:8f:e7:a9:75:8f:1d:8b:9a:6f:7f: f2:aa:cc:ec:c6:09:78:af:41:f1:c4:65:78:cb:0e:d3:46:e3: 2d:75:eb:63:bd:ac:91:ba:66:9c:49:55:22:62:cb:79:f8:42: d7:1b:10:9e:85:39:3c:dc:7d:19:b6:d0:21:82:52:b0:b3:11: 5f:b1:ab:d7:61:97:ab:8a:9c:8f:2b:15:4e:af:03:b8:8c:11: 80:29:07:9a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYm+70Iz/zpIMoa3F4Ol5YHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODA0MDUwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzkxZGNmOTU5MzQ4MDEzYzFlMDM4MzdlMDU1N2RiYjNkZTg5MTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyGBFR8bMt1xNOPhA9iosgwKbeAd mWxTktSaEpog0FXYgINCcHLGZTZe1WyqXSf7MsQcrq5b5m0LIRn9TzEv19WXFpr5 SI3ZkeXTA/CEuBh3hTEkR7smWPi3OyfSuwMzNDzO0pE8xItj/qWFSg+a+Wd4V+Cw noqGboT+vkEuwIJqiD/PHJK//EkZ9yzek72/c+EqqrIg7GeQy3zUdl5VIac2h3qA M2f2jowX70ui7p5fut4tOG6zKsNODrIZonFN1SfDBVghqdlOGIptlkyzbtA48h/c aFiStFkhlq2Y8t/lcixJfGO0k5ATHLkMXdOgxBeW74NsRr677z5sMLdQuQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNeR3PlZNIATweA4N+BVfbs96JFiMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvMTVIYy1WazBnQlBCNERnMzRGVjl1ejNva1dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAw4dUjqJQdpPyNWyc8h 4mzq5H/6hWObSsXySdkvQfi9OGmGBsgDnNhK+p5Cw3AFbOoVuoTQx7OwXGJf/Wcl VQLAltqyS1gjUb9ft2ZcFy9mHuS1D+a3OYGVPoYpsyoYNq373XtdmNK+XnYPJ/rJ Fo3jMceogPP95c1t1YKI2lZ4VuX/SAEZD4Qd45e7WabNh6/542zHrjSNC1Qgl2fF RQNxKvCi7q1lml04j+epdY8di5pvf/KqzOzGCXivQfHEZXjLDtNG4y1162O9rJG6 ZpxJVSJiy3n4QtcbEJ6FOTzcfRm20CGCUrCzEV+xq9dhl6uKnI8rFU6vA7iMEYAp B5o= -----END CERTIFICATE-----Generated at Fri Dec 26 07:50:03 2025 by rpki-client