This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX5WQ_gpDMOZhD93FL3zWWP5MNU.roa File: AX5WQ_gpDMOZhD93FL3zWWP5MNU.roa (raw, json) Hash identifier: ax4K/U5IcrXqasZA7JSqtyiP+SqM8lRf8u/ETVYdJxw= Subject key identifier: 01:7E:56:43:F8:29:0C:C3:99:84:3F:77:14:BD:F3:59:63:F9:30:D5 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01864026771E7973E21256A523D8383C6BE6 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX5WQ_gpDMOZhD93FL3zWWP5MNU.roa Signing time: Sat 11 Feb 2023 11:05:08 +0000 ROA not before: Sat 11 Feb 2023 11:05:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:4025:9c35/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:40:26:77:1e:79:73:e2:12:56:a5:23:d8:38:3c:6b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 11 11:05:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=017e5643f8290cc399843f7714bdf35963f930d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:80:8f:80:f9:2b:96:ab:20:38:03:c1:2f: fd:cd:f8:5d:c4:86:54:b9:07:99:ee:e7:d8:63:f0: 2c:95:af:53:7f:93:49:bd:36:c8:09:75:e4:f1:d5: 33:4c:17:30:1a:c8:b9:f5:13:4d:d1:ed:71:93:76: eb:2d:da:49:72:d4:23:7e:82:ae:c8:83:73:0b:07: fa:f0:61:0f:7b:5b:ab:b3:a6:55:3b:cb:bb:b6:83: 63:5c:86:0d:a4:3b:da:65:2d:d7:0c:df:1a:c7:cf: 7e:6e:48:19:c3:e3:aa:21:58:b5:a5:4a:ee:45:92: 63:67:51:9a:fa:e6:1d:24:f9:12:f9:da:95:89:9b: 8b:15:9f:ac:2b:b9:48:0e:7f:16:98:06:8f:10:0a: 1a:a5:2e:fb:9f:c0:1d:46:72:1b:07:8d:1e:61:7e: 90:3f:d2:12:c2:b6:fb:c0:29:1e:7b:5e:97:1b:89: 51:ab:5f:55:61:74:ab:12:a2:80:c6:cb:5a:4e:a3: c0:67:24:31:dd:af:d1:1f:11:4d:a1:bf:df:43:8e: b6:d8:db:7b:0a:8e:f0:7b:cc:cf:b3:ed:2a:b0:e0: 0c:ad:51:10:90:e9:af:3b:d5:a9:56:40:08:1c:52: 2f:27:eb:d7:44:ea:44:79:3c:ba:dd:91:2e:bd:77: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7E:56:43:F8:29:0C:C3:99:84:3F:77:14:BD:F3:59:63:F9:30:D5 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX5WQ_gpDMOZhD93FL3zWWP5MNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 5f:a7:cf:2e:39:77:7f:4c:dd:ca:55:9e:71:f9:a0:15:71:d0: 02:e0:0a:04:51:d9:d1:b8:83:db:ab:00:1a:15:97:65:ec:70: 6c:d1:eb:6b:55:c9:f4:63:b1:78:da:97:9a:f1:67:e7:c5:79: f5:33:a2:18:6e:55:e2:33:ee:70:d5:5d:14:06:da:ee:13:02: 5e:ea:a9:c6:65:4a:8f:3e:5a:89:b3:94:b8:dc:c1:74:fa:58: 65:89:67:c2:66:4e:c5:55:b6:38:e7:bb:37:b3:92:05:06:f7: 69:53:72:61:e9:ca:f3:67:8a:1e:a5:ea:d4:7e:74:c8:eb:0b: 13:7f:74:d8:ed:61:62:01:a2:73:d3:a0:ef:e7:38:bc:8f:8b: 5c:49:68:b6:48:6b:8e:96:97:4f:71:ae:d4:5d:bf:e5:98:05: 0e:c3:51:b2:5e:43:db:b7:2a:00:39:ba:c2:68:3f:e7:68:85: 4e:f1:5b:08:79:de:14:db:35:b5:fa:c7:21:84:22:ae:ee:ab: a6:a0:b7:73:d1:07:78:db:b7:b6:6d:2f:c4:cf:6e:4f:29:35: 84:85:99:8e:59:ae:98:0d:33:f2:ad:df:01:ed:68:31:26:e3: b1:9a:d6:8f:d2:8a:58:7c:be:92:c8:2d:a2:e7:7c:14:e9:33: df:57:36:0d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZAJnceeXPiElalI9g4PGvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjExMTEwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTdlNTY0M2Y4MjkwY2MzOTk4NDNmNzcxNGJkZjM1OTYzZjkzMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhKAj4D5K5arIDgDwS/9zfhdxIZU uQeZ7ufYY/Asla9Tf5NJvTbICXXk8dUzTBcwGsi59RNN0e1xk3brLdpJctQjfoKu yINzCwf68GEPe1urs6ZVO8u7toNjXIYNpDvaZS3XDN8ax89+bkgZw+OqIVi1pUru RZJjZ1Ga+uYdJPkS+dqViZuLFZ+sK7lIDn8WmAaPEAoapS77n8AdRnIbB40eYX6Q P9ISwrb7wCkee16XG4lRq19VYXSrEqKAxstaTqPAZyQx3a/RHxFNob/fQ4622Nt7 Co7we8zPs+0qsOAMrVEQkOmvO9WpVkAIHFIvJ+vXROpEeTy63ZEuvXctEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAF+VkP4KQzDmYQ/dxS981lj+TDVMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvQVg1V1FfZ3BETU9aaEQ5M0ZMM3pXV1A1TU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF+nzy45d39M3cpVnnH5 oBVx0ALgCgRR2dG4g9urABoVl2XscGzR62tVyfRjsXjal5rxZ+fFefUzohhuVeIz 7nDVXRQG2u4TAl7qqcZlSo8+WomzlLjcwXT6WGWJZ8JmTsVVtjjnuzezkgUG92lT cmHpyvNnih6l6tR+dMjrCxN/dNjtYWIBonPToO/nOLyPi1xJaLZIa46Wl09xrtRd v+WYBQ7DUbJeQ9u3KgA5usJoP+dohU7xWwh53hTbNbX6xyGEIq7uq6agt3PRB3jb t7ZtL8TPbk8pNYSFmY5ZrpgNM/Kt3wHtaDEm47Ga1o/Silh8vpLILaLnfBTpM99X Ng0= -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:56 2025 by rpki-client