This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28lKxtlyqqTArD3_pjl9e9ASkCs.roa File: 28lKxtlyqqTArD3_pjl9e9ASkCs.roa (raw, json) Hash identifier: KMtny4s6GqGtJrgSHvmrHe++rr9nrtyBMe8KB7RyDKg= Subject key identifier: DB:C9:4A:C6:D9:72:AA:A4:C0:AC:3D:FF:A6:39:7D:7B:D0:12:90:2B Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 86AB83DD Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28lKxtlyqqTArD3_pjl9e9ASkCs.roa Signing time: Mon 23 May 2022 19:05:29 +0000 ROA not before: Mon 23 May 2022 19:05:29 +0000 ROA not after: Sat 01 Jul 2023 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128 2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128 2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128 2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128 2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128 2001:67c:64:ffff:0:180:f24e:8237/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2259387357 (0x86ab83dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: May 23 19:05:29 2022 GMT Not After : Jul 1 00:00:00 2023 GMT Subject: CN=dbc94ac6d972aaa4c0ac3dffa6397d7bd012902b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:d8:25:5f:8a:a5:fc:d1:8d:50:76:54:5d: a6:e7:1d:7d:03:99:9b:84:dc:20:6c:83:80:54:1a: 09:c4:1a:f1:7a:16:20:2b:20:1f:c5:13:b0:e7:2a: 9d:b5:78:a7:0b:3e:33:98:6e:a7:76:b0:9d:17:c1: d8:65:97:e8:80:16:bb:e9:11:e5:65:d7:19:06:99: 2d:b2:2e:a7:6c:e0:c9:df:46:94:6a:57:1f:a2:b3: f7:cc:29:89:5d:1d:e9:2d:8f:dd:96:3b:1f:21:c6: 8b:02:64:26:75:6b:de:a1:76:98:85:37:a1:2a:ee: 4f:5c:e9:7b:b2:06:53:de:d8:8b:d2:3a:45:26:7e: b9:12:fc:91:56:51:c5:5a:c3:0b:90:34:fd:97:9e: 69:f2:2b:f7:aa:6f:11:4e:8a:88:4d:a9:75:d4:26: 37:56:e9:e4:ed:80:d7:9b:8f:d3:11:ce:32:ea:c6: 93:f2:04:46:28:ca:28:84:c8:a2:80:6c:78:75:1e: 21:86:1f:cb:4a:5d:13:8b:4b:2b:02:cd:72:99:35: f6:a6:f9:52:23:d5:75:87:18:59:d6:fb:eb:38:37: c2:1d:e4:5e:ae:ab:83:6d:12:eb:6b:50:74:2d:01: 63:20:62:c6:32:77:ed:12:0c:10:18:40:5a:16:b4: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C9:4A:C6:D9:72:AA:A4:C0:AC:3D:FF:A6:39:7D:7B:D0:12:90:2B X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28lKxtlyqqTArD3_pjl9e9ASkCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 0b:e5:9e:89:2e:4e:aa:25:24:cf:a8:01:10:40:bc:2c:40:a1: 59:60:6a:39:d2:f4:b9:d6:b3:26:7a:e4:d3:d7:a7:72:2f:97: 44:ff:41:24:78:01:17:2c:63:31:90:f6:18:0b:41:77:1d:99: bc:73:0d:b8:91:fe:f1:8a:54:40:f5:6e:f2:d2:0d:58:5a:9c: 97:90:7c:40:18:72:8a:d7:27:82:4b:40:be:f5:ea:49:df:f2: d3:f6:8f:e2:a3:3d:36:89:44:8c:7b:ac:7b:11:f0:4b:d6:94: b1:99:af:04:c1:a2:dd:59:f1:f9:7e:24:b0:98:1f:75:89:ab: f2:19:84:8a:60:15:97:f8:7c:bc:7b:90:5c:8f:36:02:8c:93: 86:95:8f:80:f4:46:e4:53:6c:36:d4:2b:03:d8:d2:52:b6:7b: 8f:12:2f:cc:e1:39:87:9d:c6:38:66:b4:d8:e0:d4:97:f7:f2: 21:d5:19:6b:15:ba:e0:a3:1d:4f:8a:92:44:81:9f:ae:f0:ae: 04:8b:05:5b:ed:7f:7c:c7:0c:3f:df:1d:c0:1f:e1:c1:ef:08: 5f:bb:21:cb:61:99:cc:3d:88:39:ce:c4:e0:b9:da:d4:68:fb: 8d:8c:6e:eb:46:78:94:da:00:ee:97:9a:9c:de:40:49:75:f7: 9c:ad:5b:04 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIFAIarg90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1 MjMxOTA1MjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGRiYzk0YWM2ZDk3 MmFhYTRjMGFjM2RmZmE2Mzk3ZDdiZDAxMjkwMmIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCYtglX4ql/NGNUHZUXabnHX0DmZuE3CBsg4BUGgnEGvF6 FiArIB/FE7DnKp21eKcLPjOYbqd2sJ0Xwdhll+iAFrvpEeVl1xkGmS2yLqds4Mnf RpRqVx+is/fMKYldHektj92WOx8hxosCZCZ1a96hdpiFN6Eq7k9c6XuyBlPe2IvS OkUmfrkS/JFWUcVawwuQNP2XnmnyK/eqbxFOiohNqXXUJjdW6eTtgNebj9MRzjLq xpPyBEYoyiiEyKKAbHh1HiGGH8tKXROLSysCzXKZNfam+VIj1XWHGFnW++s4N8Id 5F6uq4NtEutrUHQtAWMgYsYyd+0SDBAYQFoWtNaPAgMBAAGjggIaMIICFjAdBgNV HQ4EFgQU28lKxtlyqqTArD3/pjl9e9ASkCswHwYDVR0jBBgwFoAUcgR74VsnWQLc 9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv MS8yOGxLeHRseXFxVEFyRDNfcGpsOWU5QVNrQ3Mucm9hMIGBBgNVHR8EejB4MHag dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA ZDANBgkqhkiG9w0BAQsFAAOCAQEAC+WeiS5OqiUkz6gBEEC8LEChWWBqOdL0udaz Jnrk09enci+XRP9BJHgBFyxjMZD2GAtBdx2ZvHMNuJH+8YpUQPVu8tINWFqcl5B8 QBhyitcngktAvvXqSd/y0/aP4qM9NolEjHusexHwS9aUsZmvBMGi3Vnx+X4ksJgf dYmr8hmEimAVl/h8vHuQXI82AoyThpWPgPRG5FNsNtQrA9jSUrZ7jxIvzOE5h53G OGa02ODUl/fyIdUZaxW64KMdT4qSRIGfrvCuBIsFW+1/fMcMP98dwB/hwe8IX7sh y2GZzD2IOc7E4Lna1Gj7jYxu60Z4lNoA7peanN5ASXX3nK1bBA== -----END CERTIFICATE-----Generated at Tue Dec 30 14:55:13 2025 by rpki-client