This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2vH5wLdV6-o8_nzZ0uoLOxF-N9s.roa File: 2vH5wLdV6-o8_nzZ0uoLOxF-N9s.roa (raw, json) Hash identifier: 4O7KAYlrr7m8dmPNbKiCtVfptK3lRUFa5M7LIkgW88M= Subject key identifier: DA:F1:F9:C0:B7:55:EB:EA:3C:FE:7C:D9:D2:EA:0B:3B:11:7E:37:DB Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A2D39B4B7AA3EF990E9158024629ABB68 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2vH5wLdV6-o8_nzZ0uoLOxF-N9s.roa Signing time: Fri 25 Aug 2023 15:04:30 +0000 ROA not before: Fri 25 Aug 2023 15:04:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:2d39:7271/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:2d:39:b4:b7:aa:3e:f9:90:e9:15:80:24:62:9a:bb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 25 15:04:30 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=daf1f9c0b755ebea3cfe7cd9d2ea0b3b117e37db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:4c:1c:d4:90:23:60:3b:c7:20:5b:0f:e2: 00:3b:7d:5d:27:58:3c:f2:96:8f:6e:ad:0a:27:0d: 6e:b0:54:09:9b:27:fd:2f:14:ec:3e:a2:69:74:88: 1e:69:0c:95:46:c4:5c:a5:55:1b:5f:7e:1b:a8:51: 67:cb:17:86:6f:eb:8f:f5:cc:88:ac:13:e5:71:8e: 32:88:cd:3c:27:1c:7a:af:f4:58:d2:ed:5d:68:2c: f0:fb:1a:b3:02:a1:6c:b9:87:5e:e6:08:e1:c4:30: bd:29:17:ff:35:6e:0b:7f:60:f0:9d:40:9b:40:fc: a7:15:dc:06:b2:a4:5d:a5:16:0e:91:d5:f0:ce:c1: 3c:43:85:ac:14:c5:62:8d:67:fc:fc:09:20:30:d4: 70:7e:39:95:d0:02:e3:11:8a:07:d2:35:8e:06:74: 68:db:32:fc:c4:e9:32:62:8b:22:0b:a3:5f:80:6d: 65:fc:cf:00:18:1e:bc:77:dd:55:dd:63:5b:48:34: 26:66:ab:b5:68:d0:d3:94:ef:c5:1f:d0:8f:42:0e: bb:18:63:00:b6:74:48:8a:26:10:85:db:f8:f2:74: 23:25:1d:a4:96:4e:95:8c:2f:05:dd:ba:c7:32:99: fb:11:2a:5a:a7:ba:4b:ba:e3:c1:3d:eb:7c:02:85: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F1:F9:C0:B7:55:EB:EA:3C:FE:7C:D9:D2:EA:0B:3B:11:7E:37:DB X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2vH5wLdV6-o8_nzZ0uoLOxF-N9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 43:29:7d:63:be:63:ef:92:31:e7:14:90:4d:ef:ac:42:8a:fe: 7b:ce:ca:a1:2c:12:7f:65:83:27:18:9c:77:9c:77:a2:1a:14: b9:35:99:6a:c0:88:90:ef:8d:37:70:96:22:72:8e:81:e8:fb: 39:0c:36:58:16:bc:ff:ec:84:ab:f3:ae:91:3b:b5:39:de:ec: 1d:3d:79:63:fd:6b:54:4a:5a:b6:e5:db:1b:6f:40:0c:db:7c: 66:2b:e7:b4:0c:7e:58:d7:ea:fe:9b:5f:5d:6e:31:e4:2d:4b: bc:fc:e7:ba:a4:26:c4:4a:4f:f8:9f:f1:77:3f:15:d5:ba:e3: 8b:cb:21:8a:d7:31:57:20:5e:eb:90:21:71:e4:44:d5:0f:c0: c8:18:6a:07:55:43:03:1f:71:a8:7b:a9:89:c4:44:d4:63:4f: 09:47:5c:74:d2:a8:fc:c5:9f:0c:26:14:34:92:d0:85:1d:5c: 29:f4:c4:35:e9:9f:db:59:af:ae:9e:b5:71:de:32:65:db:85: 1e:96:73:14:2a:78:24:91:10:61:6f:06:4e:ca:27:bb:e6:23: 2b:54:aa:85:f7:b8:20:8b:d1:e0:31:64:60:54:82:cb:10:84: 44:0b:df:1c:ed:b3:be:88:22:db:41:d5:8f:fb:ca:a5:59:8c: 74:16:b5:e1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYotObS3qj75kOkVgCRimrtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODI1MTUwNDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWYxZjljMGI3NTVlYmVhM2NmZTdjZDlkMmVhMGIzYjExN2UzN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO5MHNSQI2A7xyBbD+IAO31dJ1g8 8paPbq0KJw1usFQJmyf9LxTsPqJpdIgeaQyVRsRcpVUbX34bqFFnyxeGb+uP9cyI rBPlcY4yiM08Jxx6r/RY0u1daCzw+xqzAqFsuYde5gjhxDC9KRf/NW4Lf2DwnUCb QPynFdwGsqRdpRYOkdXwzsE8Q4WsFMVijWf8/AkgMNRwfjmV0ALjEYoH0jWOBnRo 2zL8xOkyYosiC6NfgG1l/M8AGB68d91V3WNbSDQmZqu1aNDTlO/FH9CPQg67GGMA tnRIiiYQhdv48nQjJR2klk6VjC8F3brHMpn7ESpap7pLuuPBPet8AoWdhQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNrx+cC3VevqPP582dLqCzsRfjfbMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvMnZINXdMZFY2LW84X256WjB1b0xPeEYtTjlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEMpfWO+Y++SMecUkE3v rEKK/nvOyqEsEn9lgycYnHecd6IaFLk1mWrAiJDvjTdwliJyjoHo+zkMNlgWvP/s hKvzrpE7tTne7B09eWP9a1RKWrbl2xtvQAzbfGYr57QMfljX6v6bX11uMeQtS7z8 57qkJsRKT/if8Xc/FdW644vLIYrXMVcgXuuQIXHkRNUPwMgYagdVQwMfcah7qYnE RNRjTwlHXHTSqPzFnwwmFDSS0IUdXCn0xDXpn9tZr66etXHeMmXbhR6WcxQqeCSR EGFvBk7KJ7vmIytUqoX3uCCL0eAxZGBUgssQhEQL3xzts76IIttB1Y/7yqVZjHQW teE= -----END CERTIFICATE-----Generated at Mon Dec 29 23:47:26 2025 by rpki-client