This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Efv2gCMNPHkcn0-cYqsXLA95Lnk.roa File: Efv2gCMNPHkcn0-cYqsXLA95Lnk.roa (raw, json) Hash identifier: iBrrEESVbJrVsmwRpQFSo8S8aQnXqRuCYc/l2SFNhNU= Subject key identifier: 11:FB:F6:80:23:0D:3C:79:1C:9F:4F:9C:62:AB:17:2C:0F:79:2E:79 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189F2A5C8D3D8A67A87801EF9A4FEF24A15 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Efv2gCMNPHkcn0-cYqsXLA95Lnk.roa Signing time: Mon 14 Aug 2023 06:04:58 +0000 ROA not before: Mon 14 Aug 2023 06:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 2001:67c:64:ffff:0:189:f2a5:41a9/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:f2:a5:c8:d3:d8:a6:7a:87:80:1e:f9:a4:fe:f2:4a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 14 06:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=11fbf680230d3c791c9f4f9c62ab172c0f792e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:a7:93:80:10:ea:70:f5:3f:1e:7d:da:13: 11:4f:da:c2:67:32:38:dd:59:f0:3c:c4:6d:67:26: da:d7:ea:30:bc:99:9d:2b:57:cc:02:21:bc:5a:60: 5d:05:88:02:3b:88:62:69:6f:3c:3e:81:a2:66:57: ef:73:aa:67:17:0b:61:9a:57:46:b1:d0:d9:06:8f: 04:03:0a:4a:90:d0:95:24:f9:db:ba:9d:d5:4f:85: db:d7:6a:ed:6e:f6:3b:bf:86:53:f2:fa:56:36:b1: dc:94:0b:d1:d5:94:ff:e3:18:cf:cd:0e:e7:be:9a: 5b:c0:8b:cd:b8:c6:92:3e:c8:71:ec:f4:6d:2f:9e: af:33:eb:a8:3c:83:ec:16:64:5c:00:22:fe:38:59: 33:8d:dd:4d:fa:aa:40:23:2f:2a:3f:d2:19:6f:c1: 01:c2:9f:37:ee:90:9c:62:84:9a:39:ff:96:74:bf: b0:5e:61:9f:8f:08:36:94:56:68:74:3b:00:55:a6: 95:ae:0b:1c:10:33:09:c4:57:9b:19:7d:ff:25:76: d8:e3:f3:7b:a2:1f:69:c3:51:dc:a0:b7:e3:f0:8e: 9c:bb:84:28:f2:0e:18:4f:d6:ac:59:5c:b2:68:31: 6a:24:95:e2:ec:29:61:5c:b2:fd:b4:e4:74:90:0b: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:F6:80:23:0D:3C:79:1C:9F:4F:9C:62:AB:17:2C:0F:79:2E:79 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Efv2gCMNPHkcn0-cYqsXLA95Lnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 2b:94:03:db:9f:69:5b:ff:49:76:00:d9:95:2d:da:6f:3b:61: 11:0b:77:01:9e:3a:6a:d4:14:88:30:8f:53:31:d1:7c:d8:fc: 75:0a:38:de:00:9b:10:71:0d:d7:72:db:de:e9:6f:98:13:7a: 6e:7f:87:cb:b0:e9:a4:34:41:90:cc:e9:ba:6e:51:55:f6:2a: 6a:10:e2:d7:fd:c6:7d:27:69:69:66:45:03:cf:4c:2b:47:0f: 1f:26:ff:57:2e:db:f4:c6:06:73:bc:60:18:93:74:b2:f8:2a: bb:0b:4d:b9:35:59:ce:66:05:84:4b:59:ec:e8:9c:33:1f:35: 2a:da:98:cd:76:f3:9e:cc:cf:e8:c8:d9:c1:96:20:ca:2d:31: a3:fe:7d:d1:4a:14:b8:ea:bc:6f:e7:a5:c6:1b:fa:81:8d:62: 02:fb:0b:54:35:31:9a:7d:08:c1:50:70:13:a2:c4:64:43:bf: 18:22:00:47:26:83:1e:9f:42:69:44:d8:5f:de:c3:3c:9e:d0: 87:66:db:d5:86:90:b2:ce:16:21:58:83:e2:52:52:23:8e:ab: 3a:65:de:06:05:d1:5f:4a:39:a3:76:5f:76:7b:e1:42:3d:1b: 1a:2f:66:82:0e:93:31:52:14:0b:cb:19:f5:d9:6d:dc:75:e7: 4d:df:c7:d7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYnypcjT2KZ6h4Ae+aT+8koVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE0MDYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWZiZjY4MDIzMGQzYzc5MWM5ZjRmOWM2MmFiMTcyYzBmNzkyZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheink4AQ6nD1Px592hMRT9rCZzI4 3VnwPMRtZyba1+owvJmdK1fMAiG8WmBdBYgCO4hiaW88PoGiZlfvc6pnFwthmldG sdDZBo8EAwpKkNCVJPnbup3VT4Xb12rtbvY7v4ZT8vpWNrHclAvR1ZT/4xjPzQ7n vppbwIvNuMaSPshx7PRtL56vM+uoPIPsFmRcACL+OFkzjd1N+qpAIy8qP9IZb8EB wp837pCcYoSaOf+WdL+wXmGfjwg2lFZodDsAVaaVrgscEDMJxFebGX3/JXbY4/N7 oh9pw1HcoLfj8I6cu4Qo8g4YT9asWVyyaDFqJJXi7ClhXLL9tOR0kAs6cQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBH79oAjDTx5HJ9PnGKrFywPeS55MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvRWZ2MmdDTU5QSGtjbjAtY1lxc1hMQTk1TG5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACuUA9ufaVv/SXYA2ZUt 2m87YRELdwGeOmrUFIgwj1Mx0XzY/HUKON4AmxBxDddy297pb5gTem5/h8uw6aQ0 QZDM6bpuUVX2KmoQ4tf9xn0naWlmRQPPTCtHDx8m/1cu2/TGBnO8YBiTdLL4KrsL Tbk1Wc5mBYRLWezonDMfNSramM12857Mz+jI2cGWIMotMaP+fdFKFLjqvG/npcYb +oGNYgL7C1Q1MZp9CMFQcBOixGRDvxgiAEcmgx6fQmlE2F/ewzye0Idm29WGkLLO FiFYg+JSUiOOqzpl3gYF0V9KOaN2X3Z74UI9GxovZoIOkzFSFAvLGfXZbdx1503f x9c= -----END CERTIFICATE-----Generated at Thu Jan 1 03:57:46 2026 by rpki-client