This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LZxp_arUUlKIs-S5Sezl3hsmUI.roa File: 3LZxp_arUUlKIs-S5Sezl3hsmUI.roa (raw, json) Hash identifier: S2l9QKczbP7A5pLZKh6y3gfJOg8LIE7PYpXKnClax20= Subject key identifier: DC:B6:71:A7:F6:AB:51:49:4A:22:CF:92:E5:27:B3:97:78:6C:99:42 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0186ACB9C928EF6653EE706C837B5C87DBA5 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LZxp_arUUlKIs-S5Sezl3hsmUI.roa Signing time: Sat 04 Mar 2023 13:05:02 +0000 ROA not before: Sat 04 Mar 2023 13:05:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 2001:67c:64:ffff:0:186:acb9:db4/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:ac:b9:c9:28:ef:66:53:ee:70:6c:83:7b:5c:87:db:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Mar 4 13:05:02 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=dcb671a7f6ab51494a22cf92e527b397786c9942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:1f:27:e8:6a:b5:49:1f:b5:c8:9c:9c:c8: 4e:78:82:5a:78:be:fe:10:76:62:a6:f6:37:b9:80: 49:c0:31:f5:0f:12:63:5e:64:5b:f3:1f:3f:a2:c8: c9:df:68:8a:2e:2a:6b:e2:02:4e:6c:85:e4:e8:e5: 06:60:e5:10:7b:1d:dc:6a:eb:4b:8d:74:d4:c3:1d: 0f:fa:4e:66:29:94:67:1d:c1:58:9e:30:39:d0:ad: bd:2a:88:ee:95:4c:50:d5:c3:f0:dd:b2:1b:35:0c: e8:ab:84:30:2f:15:11:8e:0a:13:cb:98:7e:73:82: 64:7c:0e:20:6c:42:1d:17:0f:9b:93:c9:3f:d5:9a: fe:7a:e7:c7:91:53:50:62:c1:2b:99:a5:86:2f:92: ff:57:02:2c:80:12:0a:63:06:cf:f1:f1:c3:5b:10: 12:75:f6:6c:cc:9d:db:11:06:10:95:15:f8:93:5b: f6:4a:b7:30:38:ea:0a:bb:22:f1:5f:1d:fc:82:5e: 76:9d:3f:35:10:0b:e9:bc:ae:06:a5:48:bd:1c:5a: 56:b9:3c:38:36:1a:ff:e4:50:f5:29:ac:d0:8d:f9: 05:28:ae:db:de:00:73:d6:3e:cf:8e:5e:9d:dd:f8: c8:f3:95:be:bd:1a:19:30:91:db:35:13:7f:6b:18: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B6:71:A7:F6:AB:51:49:4A:22:CF:92:E5:27:B3:97:78:6C:99:42 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3LZxp_arUUlKIs-S5Sezl3hsmUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 71:7e:ab:84:93:ce:00:d8:7f:4a:29:75:ba:1d:dc:66:34:2c: f5:e9:8d:4c:2b:6e:11:dd:1b:38:91:cd:96:30:46:dd:4e:fa: 80:0b:ca:df:74:09:5d:c6:cd:42:be:f6:03:42:ad:a1:0f:27: 7c:57:33:fb:c9:2e:ed:f9:be:be:f1:ce:1b:46:53:07:6f:7a: 0d:a2:54:3b:aa:43:36:b4:f1:a0:47:5f:f4:a2:87:85:3c:b3: 50:07:0e:2e:85:40:c9:39:9c:1b:bf:9b:a2:ad:08:a4:99:a8: 0b:55:52:f0:5f:1d:dd:78:c3:08:87:6b:33:8d:ba:c6:fb:61: 75:bb:61:1c:3a:06:d3:73:62:86:be:52:2d:21:ae:1e:fb:49: 67:c1:f9:b5:fa:67:f7:ff:27:b9:92:f5:37:08:43:01:92:ef: 72:2b:a4:81:02:de:4e:65:9f:d1:70:5d:56:8c:08:89:97:ad: 50:4e:84:2c:d0:27:34:d6:fd:96:03:8c:4c:53:e4:2d:04:4a: 69:f6:2d:06:d3:cb:62:b1:44:c7:45:2f:a9:1c:3f:23:0c:a8: e0:f3:06:f4:af:7c:e7:38:48:66:76:11:7c:f6:2d:7e:7f:76: a7:c7:b8:bf:4c:73:4f:b3:40:61:2e:83:b0:fe:33:7d:c3:49: c7:0c:08:bf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYasucko72ZT7nBsg3tch9ulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMzA0MTMwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2I2NzFhN2Y2YWI1MTQ5NGEyMmNmOTJlNTI3YjM5Nzc4NmM5OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR8fJ+hqtUkftcicnMhOeIJaeL7+ EHZipvY3uYBJwDH1DxJjXmRb8x8/osjJ32iKLipr4gJObIXk6OUGYOUQex3cautL jXTUwx0P+k5mKZRnHcFYnjA50K29KojulUxQ1cPw3bIbNQzoq4QwLxURjgoTy5h+ c4JkfA4gbEIdFw+bk8k/1Zr+eufHkVNQYsErmaWGL5L/VwIsgBIKYwbP8fHDWxAS dfZszJ3bEQYQlRX4k1v2SrcwOOoKuyLxXx38gl52nT81EAvpvK4GpUi9HFpWuTw4 Nhr/5FD1KazQjfkFKK7b3gBz1j7Pjl6d3fjI85W+vRoZMJHbNRN/axg5rQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNy2caf2q1FJSiLPkuUns5d4bJlCMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvM0xaeHBfYXJVVWxLSXMtUzVTZXpsM2hzbVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHF+q4STzgDYf0opdbod 3GY0LPXpjUwrbhHdGziRzZYwRt1O+oALyt90CV3GzUK+9gNCraEPJ3xXM/vJLu35 vr7xzhtGUwdveg2iVDuqQza08aBHX/Sih4U8s1AHDi6FQMk5nBu/m6KtCKSZqAtV UvBfHd14wwiHazONusb7YXW7YRw6BtNzYoa+Ui0hrh77SWfB+bX6Z/f/J7mS9TcI QwGS73IrpIEC3k5ln9FwXVaMCImXrVBOhCzQJzTW/ZYDjExT5C0ESmn2LQbTy2Kx RMdFL6kcPyMMqODzBvSvfOc4SGZ2EXz2LX5/dqfHuL9Mc0+zQGEug7D+M33DSccM CL8= -----END CERTIFICATE-----Generated at Wed Dec 31 05:55:18 2025 by rpki-client