This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41O7Khbg4oRdXu9VXgbfWyMevLM.roa File: 41O7Khbg4oRdXu9VXgbfWyMevLM.roa (raw, json) Hash identifier: /CaWFW+cNtCzCtTuQyYgJ13Tw6bpUOsdNarkEKxB8b4= Subject key identifier: E3:53:BB:2A:16:E0:E2:84:5D:5E:EF:55:5E:06:DF:5B:23:1E:BC:B3 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0188A042CD0A1EE81328AED5557701B0A79E Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41O7Khbg4oRdXu9VXgbfWyMevLM.roa Signing time: Fri 09 Jun 2023 13:05:12 +0000 ROA not before: Fri 09 Jun 2023 13:05:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:188:a042:13c4/128 maxlen: 128 2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:a0:42:cd:0a:1e:e8:13:28:ae:d5:55:77:01:b0:a7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jun 9 13:05:12 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=e353bb2a16e0e2845d5eef555e06df5b231ebcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:8e:c7:f9:96:1e:e8:47:bd:0b:18:af:4a: 42:e1:6e:f5:d0:ad:ec:5a:9a:ce:0e:a3:d8:5b:94: 15:d8:dc:34:34:8b:40:84:b7:d9:89:da:ea:39:b6: 55:df:af:da:73:d8:92:e0:d5:28:52:a8:0b:0e:47: ad:36:f9:46:49:3a:71:4b:31:41:5b:22:fe:66:fa: 75:ed:f7:ac:a9:ba:32:ee:a9:54:0e:73:ab:c3:a6: 46:d2:9e:4c:c6:30:5e:7b:34:1f:28:cb:6f:64:6d: 66:e4:2b:a4:42:45:bc:8f:e0:c8:af:48:81:2d:7c: bd:17:4b:fe:17:e1:c7:01:4a:fd:ce:d5:c0:8b:df: 34:54:be:42:35:04:a0:80:07:a7:5b:31:ba:67:b1: 1b:2a:a1:46:4a:66:da:95:a1:71:0b:2a:93:52:fd: af:5a:f9:4e:d9:ce:2d:52:4e:88:ba:06:a9:e8:7b: fa:2f:25:b6:cc:3a:26:c2:b5:8e:d2:31:92:7a:43: df:4a:13:d5:ab:1a:bb:8d:b7:cb:4f:6a:99:31:c2: 54:90:93:fe:10:94:75:44:24:2d:ba:f2:f9:bd:d0: e3:d8:1d:f8:85:71:2a:82:d8:b3:9a:82:d0:60:d6: 36:20:a9:27:e4:09:10:8f:2a:74:a5:84:27:66:11: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:53:BB:2A:16:E0:E2:84:5D:5E:EF:55:5E:06:DF:5B:23:1E:BC:B3 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41O7Khbg4oRdXu9VXgbfWyMevLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption a3:fc:2c:49:65:87:41:1d:68:ac:a6:62:42:b6:7a:28:51:ff: 26:8a:b7:89:16:2c:16:62:7e:71:9e:13:c7:a5:f1:12:ad:90: d5:dd:80:25:de:d0:fc:e8:36:58:29:d0:67:1c:ce:8e:64:1f: 88:d3:22:1d:8f:b9:73:7f:72:8d:3d:2a:aa:24:d6:9d:5d:bc: 2d:16:3d:fe:e6:7f:b1:6e:e2:1a:26:9c:2d:94:6e:f9:66:d3: c6:88:77:ee:d2:1d:81:0b:6a:65:42:5d:21:04:66:c4:0d:21: ca:bd:35:db:7d:7d:58:db:16:bf:35:8b:2d:7a:a7:c0:bb:fe: 72:a4:67:b8:29:22:d5:cf:fb:03:e3:86:25:32:c8:d3:81:45: 88:04:28:23:f9:c8:9f:90:82:d0:9e:bc:af:aa:69:a1:94:56: 9f:af:e6:94:35:07:d0:85:8c:69:20:d8:63:51:5a:3c:dd:be: c8:98:6a:eb:a0:0c:21:4c:7f:35:31:92:1a:75:a6:f0:5e:23: 35:9c:35:04:61:e3:a9:a5:83:2d:1d:14:9d:aa:e5:86:3d:94: 0f:be:4d:59:48:ee:58:e2:b7:9f:d9:5e:31:95:ab:d5:26:43: af:42:48:f8:48:54:0a:1b:88:1e:c5:6b:83:fa:9c:78:4f:3b: 5a:a5:e5:a1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYigQs0KHugTKK7VVXcBsKeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNjA5MTMwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzUzYmIyYTE2ZTBlMjg0NWQ1ZWVmNTU1ZTA2ZGY1YjIzMWViY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEOOx/mWHuhHvQsYr0pC4W710K3s WprODqPYW5QV2Nw0NItAhLfZidrqObZV36/ac9iS4NUoUqgLDketNvlGSTpxSzFB WyL+Zvp17fesqboy7qlUDnOrw6ZG0p5MxjBeezQfKMtvZG1m5CukQkW8j+DIr0iB LXy9F0v+F+HHAUr9ztXAi980VL5CNQSggAenWzG6Z7EbKqFGSmbalaFxCyqTUv2v WvlO2c4tUk6Iugap6Hv6LyW2zDomwrWO0jGSekPfShPVqxq7jbfLT2qZMcJUkJP+ EJR1RCQtuvL5vdDj2B34hXEqgtizmoLQYNY2IKkn5AkQjyp0pYQnZhFZOQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFONTuyoW4OKEXV7vVV4G31sjHryzMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvNDFPN0toYmc0b1JkWHU5VlhnYmZXeU1ldkxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKP8LEllh0EdaKymYkK2 eihR/yaKt4kWLBZifnGeE8el8RKtkNXdgCXe0PzoNlgp0Gcczo5kH4jTIh2PuXN/ co09Kqok1p1dvC0WPf7mf7Fu4homnC2Ubvlm08aId+7SHYELamVCXSEEZsQNIcq9 Ndt9fVjbFr81iy16p8C7/nKkZ7gpItXP+wPjhiUyyNOBRYgEKCP5yJ+QgtCevK+q aaGUVp+v5pQ1B9CFjGkg2GNRWjzdvsiYauugDCFMfzUxkhp1pvBeIzWcNQRh46ml gy0dFJ2q5YY9lA++TVlI7ljit5/ZXjGVq9UmQ69CSPhIVAobiB7Fa4P6nHhPO1ql 5aE= -----END CERTIFICATE-----Generated at Thu Jan 1 03:52:20 2026 by rpki-client