This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Esj5CzbYU4K6Y8e8G3NzQB6pnOA.roa File: Esj5CzbYU4K6Y8e8G3NzQB6pnOA.roa (raw, json) Hash identifier: Wil+IKXWOFRxIOfWx3V3A16TiX6U5Ad7FDs7r9Y2vuk= Subject key identifier: 12:C8:F9:0B:36:D8:53:82:BA:63:C7:BC:1B:73:73:40:1E:A9:9C:E0 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189C4159EC0096A1F08B1E63AB776F6D5CE Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Esj5CzbYU4K6Y8e8G3NzQB6pnOA.roa Signing time: Sat 05 Aug 2023 05:04:58 +0000 ROA not before: Sat 05 Aug 2023 05:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:189:c415:2830/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:c4:15:9e:c0:09:6a:1f:08:b1:e6:3a:b7:76:f6:d5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 5 05:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=12c8f90b36d85382ba63c7bc1b7373401ea99ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:62:72:9b:fb:28:dd:3b:c5:be:cd:dc:b5: a9:4c:da:96:df:09:df:c4:24:02:ca:8b:de:3d:84: ad:f1:18:62:6f:6e:b2:47:44:b8:f1:ee:fc:83:ee: 31:e3:22:54:a9:e7:87:3c:0c:ff:63:4e:85:36:ae: dd:cb:29:29:15:47:1f:55:8a:78:4a:e7:7c:cf:91: 8d:28:8e:2a:2a:3f:d1:3f:97:80:ae:96:15:fe:c7: 59:d0:1b:c6:fb:99:b1:6a:98:c9:8d:ec:7d:04:52: 24:ac:70:d3:74:51:f3:26:ff:70:e2:1a:9b:8b:c6: 2e:ad:bc:36:ae:b9:2f:9f:d2:a3:1a:9e:79:f1:31: d2:ad:d4:5b:c0:31:3a:4b:53:6f:06:7e:e0:b6:ab: a8:4b:9b:a2:25:23:e7:71:0d:43:e8:4e:f7:e4:1c: 70:d3:75:c8:46:1e:20:e2:34:20:41:df:f5:f7:05: fc:22:d2:ec:74:4b:12:73:76:3a:2a:c2:8e:91:98: 33:2f:8d:23:05:fe:a7:08:ca:9f:40:27:c2:49:c8: 39:1f:97:27:f2:ac:fb:b1:27:53:37:b0:70:27:0c: f7:28:61:7d:f2:5b:03:16:0c:37:90:1a:03:bd:e9: 44:79:1e:f8:b2:f2:27:d2:e9:cc:9d:4c:66:9b:32: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C8:F9:0B:36:D8:53:82:BA:63:C7:BC:1B:73:73:40:1E:A9:9C:E0 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Esj5CzbYU4K6Y8e8G3NzQB6pnOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 2f:ad:ea:8c:c8:47:ef:bc:41:9c:e8:05:be:ad:63:71:92:77: 35:46:34:ea:a4:60:ba:90:39:cb:5d:7d:74:e8:96:1f:b4:dd: 5c:af:5b:a3:eb:45:b7:2b:82:94:dd:b5:6f:1c:8c:d2:ef:0c: b9:6b:30:2e:d1:d6:dc:95:73:10:03:e1:6c:33:80:5c:84:db: 80:33:74:2f:db:a0:ed:43:22:dd:9c:23:0f:1a:68:af:56:ef: f4:28:bb:36:07:99:d3:d5:3a:cf:2b:39:16:d2:b4:cb:5c:8e: fd:b5:a7:d9:c8:ab:af:9d:4f:0b:3c:57:50:e3:80:94:9c:4e: b5:d3:a2:3d:d3:ee:82:71:2d:f0:ba:71:65:ac:f7:9c:bd:a5: 1f:83:02:dd:29:0b:bf:af:4a:2c:02:d4:82:72:ba:6a:69:4c: 4e:4d:8a:d2:c0:e1:15:49:0d:e7:60:ec:ad:f1:a5:75:5d:a1: 86:ae:a0:09:83:69:4f:29:f1:cb:c4:c2:b1:c0:0f:fa:fa:7e: f3:c0:57:7d:ce:cf:ed:ca:73:28:07:1c:64:d1:ff:54:a2:72: 0c:05:51:40:ea:1f:b0:82:53:b2:5a:3a:c6:62:cd:64:37:35: cd:f7:b8:82:33:1a:3a:65:8c:c0:ef:75:ed:f8:98:19:12:9c: 5c:bd:18:b7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYnEFZ7ACWofCLHmOrd29tXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODA1MDUwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmM4ZjkwYjM2ZDg1MzgyYmE2M2M3YmMxYjczNzM0MDFlYTk5Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh5icpv7KN07xb7N3LWpTNqW3wnf xCQCyovePYSt8Rhib26yR0S48e78g+4x4yJUqeeHPAz/Y06FNq7dyykpFUcfVYp4 Sud8z5GNKI4qKj/RP5eArpYV/sdZ0BvG+5mxapjJjex9BFIkrHDTdFHzJv9w4hqb i8Yurbw2rrkvn9KjGp558THSrdRbwDE6S1NvBn7gtquoS5uiJSPncQ1D6E735Bxw 03XIRh4g4jQgQd/19wX8ItLsdEsSc3Y6KsKOkZgzL40jBf6nCMqfQCfCScg5H5cn 8qz7sSdTN7BwJwz3KGF98lsDFgw3kBoDvelEeR74svIn0unMnUxmmzKFawIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBLI+Qs22FOCumPHvBtzc0AeqZzgMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvRXNqNUN6YllVNEs2WThlOEczTnpRQjZwbk9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC+t6ozIR++8QZzoBb6t Y3GSdzVGNOqkYLqQOctdfXTolh+03VyvW6PrRbcrgpTdtW8cjNLvDLlrMC7R1tyV cxAD4WwzgFyE24AzdC/boO1DIt2cIw8aaK9W7/QouzYHmdPVOs8rORbStMtcjv21 p9nIq6+dTws8V1DjgJScTrXToj3T7oJxLfC6cWWs95y9pR+DAt0pC7+vSiwC1IJy umppTE5NitLA4RVJDedg7K3xpXVdoYauoAmDaU8p8cvEwrHAD/r6fvPAV33Oz+3K cygHHGTR/1SicgwFUUDqH7CCU7JaOsZizWQ3Nc33uIIzGjpljMDvde34mBkSnFy9 GLc= -----END CERTIFICATE-----Generated at Wed Dec 31 23:30:48 2025 by rpki-client