This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Csun3hqInkxzJ3svyivUVxVedlI.roa File: Csun3hqInkxzJ3svyivUVxVedlI.roa (raw, json) Hash identifier: GjyfJXXx9kbNLFvGD4dEL+gyHXBlZheH/ix+yZr8/Ag= Subject key identifier: 0A:CB:A7:DE:1A:88:9E:4C:73:27:7B:2F:CA:2B:D4:57:15:5E:76:52 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189970669FEA5569A94E5BB0D26FC90C850 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Csun3hqInkxzJ3svyivUVxVedlI.roa Signing time: Thu 27 Jul 2023 11:05:27 +0000 ROA not before: Thu 27 Jul 2023 11:05:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:189:9706:474f/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:97:06:69:fe:a5:56:9a:94:e5:bb:0d:26:fc:90:c8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 27 11:05:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=0acba7de1a889e4c73277b2fca2bd457155e7652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2a:dd:33:80:8a:ba:a5:7b:06:8c:59:61:b8: 9a:0f:46:59:a9:00:ad:0b:49:c5:01:9e:7a:c2:1e: d5:df:64:d4:60:27:bf:1a:bb:45:43:71:50:1e:2c: f1:c9:2a:da:35:66:72:19:fd:c8:b1:11:d3:df:4b: 63:50:57:b0:65:ec:a2:04:e2:db:be:1c:f4:1f:6b: 50:64:f3:32:e0:4f:89:32:f5:9d:e9:95:fc:06:c4: f0:98:c1:ec:5c:15:75:3c:52:0a:94:db:f1:a9:71: 3c:f0:7d:cb:95:58:b8:11:16:7e:fd:07:32:17:35: b4:1f:3a:8c:c4:c4:55:21:ff:76:9e:13:6a:7a:8c: bb:46:5d:6a:e2:ff:c5:03:a2:85:d0:68:53:bf:51: 5a:54:34:8b:35:fd:f8:cf:c9:13:c8:2e:fe:68:f9: ae:d8:9b:a6:d0:8d:fe:b5:23:b7:d1:df:17:77:ce: b2:f0:bd:f2:28:0f:16:00:18:b7:6e:18:d7:54:97: 3c:2c:f7:56:bd:ce:75:51:18:cf:19:18:55:cb:19: 36:58:5a:49:52:d0:54:d2:bf:2b:79:b3:2c:03:09: 45:3a:52:8b:c8:0a:71:9d:bc:15:a8:dd:d6:13:84: 52:6d:ef:14:cd:b0:c1:23:4a:4e:91:64:ed:5b:bd: 0f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CB:A7:DE:1A:88:9E:4C:73:27:7B:2F:CA:2B:D4:57:15:5E:76:52 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Csun3hqInkxzJ3svyivUVxVedlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 24:5f:59:50:ff:db:0d:fa:6e:88:cf:23:28:54:98:3f:62:4c: 2d:3e:a4:49:e3:69:33:7e:a2:4f:bf:51:0e:dc:b1:42:44:a9: db:a7:78:72:2b:52:4c:e7:b8:0e:9f:3b:c3:e9:2a:5b:7f:08: b3:8e:67:da:1a:1d:32:48:53:41:2e:45:b2:fc:cd:01:9d:6a: f4:90:82:dc:d4:bc:d2:cb:a7:cc:69:80:93:24:6a:76:76:6c: b6:6c:6f:9e:dd:0f:80:41:2f:48:62:0e:1c:85:de:0a:0f:b8: 4e:8e:e7:e4:7e:47:be:e2:60:df:ee:70:a0:ca:7a:e2:9c:bf: 3a:72:83:5c:93:22:8a:e5:87:63:0f:ef:5d:1f:4e:35:ec:99: 86:4d:a6:3a:13:d7:77:58:18:2d:08:81:4e:26:2a:09:6f:02: 25:9c:ed:c1:d7:4b:81:9d:87:9f:eb:c7:82:f2:be:e1:ac:2a: 43:01:b4:4b:88:39:f5:3f:6e:ca:31:1d:23:aa:6b:a7:a5:56: 79:77:4d:a5:a7:a4:b3:a3:48:a7:74:64:4f:4f:5f:e8:c9:37: 37:df:9a:e3:68:8f:c9:5a:d2:e4:e6:cf:b0:c5:ac:9f:f1:9e: de:49:12:5b:83:c1:bd:3a:b6:eb:60:a9:8a:20:b4:66:cc:38: 3a:d7:33:11 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYmXBmn+pVaalOW7DSb8kMhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNzI3MTEwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWNiYTdkZTFhODg5ZTRjNzMyNzdiMmZjYTJiZDQ1NzE1NWU3NjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhirdM4CKuqV7BoxZYbiaD0ZZqQCt C0nFAZ56wh7V32TUYCe/GrtFQ3FQHizxySraNWZyGf3IsRHT30tjUFewZeyiBOLb vhz0H2tQZPMy4E+JMvWd6ZX8BsTwmMHsXBV1PFIKlNvxqXE88H3LlVi4ERZ+/Qcy FzW0HzqMxMRVIf92nhNqeoy7Rl1q4v/FA6KF0GhTv1FaVDSLNf34z8kTyC7+aPmu 2Jum0I3+tSO30d8Xd86y8L3yKA8WABi3bhjXVJc8LPdWvc51URjPGRhVyxk2WFpJ UtBU0r8rebMsAwlFOlKLyApxnbwVqN3WE4RSbe8UzbDBI0pOkWTtW70PuwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFArLp94aiJ5Mcyd7L8or1FcVXnZSMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvQ3N1bjNocUlua3h6SjNzdnlpdlVWeFZlZGxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACRfWVD/2w36bojPIyhU mD9iTC0+pEnjaTN+ok+/UQ7csUJEqduneHIrUkznuA6fO8PpKlt/CLOOZ9oaHTJI U0EuRbL8zQGdavSQgtzUvNLLp8xpgJMkanZ2bLZsb57dD4BBL0hiDhyF3goPuE6O 5+R+R77iYN/ucKDKeuKcvzpyg1yTIorlh2MP710fTjXsmYZNpjoT13dYGC0IgU4m KglvAiWc7cHXS4Gdh5/rx4LyvuGsKkMBtEuIOfU/bsoxHSOqa6elVnl3TaWnpLOj SKd0ZE9PX+jJNzffmuNoj8la0uTmz7DFrJ/xnt5JEluDwb06tutgqYogtGbMODrX MxE= -----END CERTIFICATE-----Generated at Mon Dec 29 13:24:20 2025 by rpki-client