This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CNbHM9dMMMuf9kqQgqa-72fOO3c.roa File: CNbHM9dMMMuf9kqQgqa-72fOO3c.roa (raw, json) Hash identifier: 7THb3nY74bf/OuDUU5UFpBy1cT6Vt+4neQ+c1ydfl6M= Subject key identifier: 08:D6:C7:33:D7:4C:30:CB:9F:F6:4A:90:82:A6:BE:EF:67:CE:3B:77 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018883B8E452D277B0C88C04A86B77520E3D Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CNbHM9dMMMuf9kqQgqa-72fOO3c.roa Signing time: Sun 04 Jun 2023 00:05:12 +0000 ROA not before: Sun 04 Jun 2023 00:05:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128 2001:67c:64:ffff:0:188:83b8:3ccc/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:83:b8:e4:52:d2:77:b0:c8:8c:04:a8:6b:77:52:0e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jun 4 00:05:12 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=08d6c733d74c30cb9ff64a9082a6beef67ce3b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:75:1c:37:da:eb:a8:39:a2:70:ab:eb:2b: c2:cb:24:b2:48:84:d6:b4:28:6a:c1:eb:72:5d:f8: 4d:99:76:3f:27:5c:1a:29:0e:b4:07:7a:80:de:07: ec:7b:8e:5d:7e:36:6a:3f:11:f4:fc:a7:9b:26:25: b4:db:d0:16:d4:7f:ac:70:92:ba:a3:4e:f0:06:c5: df:2d:0a:f9:4a:7b:a4:84:e1:5b:8d:6d:5b:bf:17: 43:1a:f1:28:ad:3f:88:57:b0:0d:cc:e4:9a:ba:83: 00:9e:a4:32:91:b4:51:d3:cc:c9:c1:86:6f:02:3e: dc:4a:c3:90:4d:96:0d:97:fd:70:7b:0d:a9:6c:0c: de:6f:33:e5:86:81:11:7c:7a:8f:97:32:22:b9:bb: da:3a:a0:97:2b:45:05:e3:b1:c4:0c:7a:0c:b3:35: 77:d4:b6:aa:e4:6a:7d:07:c6:11:fa:24:3c:17:76: 61:49:98:3f:48:b2:04:e9:af:99:ee:d6:31:e1:ea: dc:b1:f3:43:38:3a:16:5c:29:32:f7:1e:45:12:6e: 43:7b:ac:11:d2:93:33:2c:b5:e2:96:1c:d7:1b:ec: aa:d6:77:3b:a7:98:51:d4:37:dc:df:02:d7:3c:d3: 1f:e9:ca:4e:c8:0b:47:c7:69:3f:56:3a:ea:18:6e: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:C7:33:D7:4C:30:CB:9F:F6:4A:90:82:A6:BE:EF:67:CE:3B:77 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CNbHM9dMMMuf9kqQgqa-72fOO3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 5d:b1:0d:71:3b:28:ee:e5:7d:7e:5a:d6:6b:05:87:a0:ab:0b: ab:c6:47:0c:7e:27:2c:8b:98:1f:61:95:53:24:93:56:e8:b2: 80:02:25:93:65:e4:b6:ea:e2:45:40:09:c0:a9:d6:45:fe:3a: 4d:49:6f:d7:68:39:dc:5b:10:3f:f9:0f:92:e9:8c:db:30:b7: 60:f2:4f:1e:31:fc:97:d9:56:2f:66:97:7d:cc:28:5c:3d:ef: 73:c6:03:55:3e:21:3e:f9:f3:9b:0f:b5:4e:22:a4:14:75:8f: c7:2c:31:3d:59:c7:f4:f9:cd:68:61:69:67:b3:d8:21:5a:49: 1b:22:f5:27:3d:00:51:d5:1a:d6:ca:23:cc:81:a0:f4:89:c2: 88:49:6d:49:9f:b4:31:5f:65:a9:04:9f:0e:d9:1f:24:f8:99: ee:0d:8b:6a:43:d1:42:ed:5a:09:09:c3:88:10:82:9c:23:13: 8a:ea:cf:a5:0e:45:01:ce:b9:20:55:83:7b:a0:2a:dc:73:75: a0:bd:18:e9:65:78:1a:22:b2:28:a5:01:ec:35:ca:86:04:97: 62:78:e1:45:9e:b0:1c:10:72:d6:e5:ce:66:2f:29:6a:98:c4: da:6c:7f:18:77:c2:77:ed:af:77:ee:8b:0e:df:bf:b1:9e:b7: 6d:b6:70:e3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYiDuORS0newyIwEqGt3Ug49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNjA0MDAwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGQ2YzczM2Q3NGMzMGNiOWZmNjRhOTA4MmE2YmVlZjY3Y2UzYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiup1HDfa66g5onCr6yvCyySySITW tChqwetyXfhNmXY/J1waKQ60B3qA3gfse45dfjZqPxH0/KebJiW029AW1H+scJK6 o07wBsXfLQr5SnukhOFbjW1bvxdDGvEorT+IV7ANzOSauoMAnqQykbRR08zJwYZv Aj7cSsOQTZYNl/1wew2pbAzebzPlhoERfHqPlzIiubvaOqCXK0UF47HEDHoMszV3 1Laq5Gp9B8YR+iQ8F3ZhSZg/SLIE6a+Z7tYx4ercsfNDODoWXCky9x5FEm5De6wR 0pMzLLXilhzXG+yq1nc7p5hR1Dfc3wLXPNMf6cpOyAtHx2k/VjrqGG7dkQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAjWxzPXTDDLn/ZKkIKmvu9nzjt3MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvQ05iSE05ZE1NTXVmOWtxUWdxYS03MmZPTzNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF2xDXE7KO7lfX5a1msF h6CrC6vGRwx+JyyLmB9hlVMkk1bosoACJZNl5Lbq4kVACcCp1kX+Ok1Jb9doOdxb ED/5D5LpjNswt2DyTx4x/JfZVi9ml33MKFw973PGA1U+IT7585sPtU4ipBR1j8cs MT1Zx/T5zWhhaWez2CFaSRsi9Sc9AFHVGtbKI8yBoPSJwohJbUmftDFfZakEnw7Z HyT4me4Ni2pD0ULtWgkJw4gQgpwjE4rqz6UORQHOuSBVg3ugKtxzdaC9GOlleBoi siilAew1yoYEl2J44UWesBwQctblzmYvKWqYxNpsfxh3wnftr3fuiw7fv7Get222 cOM= -----END CERTIFICATE-----Generated at Sat Dec 20 16:46:03 2025 by rpki-client