This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KeeqGNgRI7hnmuckl1hmgC50b_k.roa File: KeeqGNgRI7hnmuckl1hmgC50b_k.roa (raw, json) Hash identifier: 5Z/10Ujlz/UkV5VGdVq3cgWQgtlZEtBwimHLK7Oe3EM= Subject key identifier: 29:E7:AA:18:D8:11:23:B8:67:9A:E7:24:97:58:66:80:2E:74:6F:F9 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A0D78A5F35BE2737728B7CFE789BA23F2 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KeeqGNgRI7hnmuckl1hmgC50b_k.roa Signing time: Sat 19 Aug 2023 11:05:25 +0000 ROA not before: Sat 19 Aug 2023 11:05:25 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:d77:bb00/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:0d:78:a5:f3:5b:e2:73:77:28:b7:cf:e7:89:ba:23:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 19 11:05:25 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=29e7aa18d81123b8679ae724975866802e746ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:a2:fc:49:47:78:3e:cb:0f:01:1f:ad:54: 15:2e:42:8d:7d:4f:76:85:8b:ea:a1:c7:0f:c8:cb: 80:4f:2a:55:92:17:db:61:8f:ba:a7:60:38:eb:f3: 42:7b:0b:8d:55:6a:43:d5:10:25:bc:9d:83:63:9d: d2:d8:c1:07:d1:9e:5a:16:b0:49:40:41:e7:6a:3e: 7b:02:d5:51:72:d2:f2:ab:6e:c0:ab:9d:16:e9:62: 17:5d:5a:9f:13:3f:60:cd:35:08:b6:0a:c8:3a:51: ac:fe:a4:8d:74:f5:8d:3d:29:52:9d:81:a1:f4:42: 48:4e:72:bb:ad:c7:16:03:43:6c:c6:15:79:0c:bd: 88:c4:3d:f3:d4:24:7c:13:5e:9f:91:a6:79:88:a3: 1a:da:30:af:ae:0e:90:42:5d:9d:f7:f0:07:ec:15: eb:b9:1e:4c:73:f7:e1:6f:84:02:bd:3d:ae:26:12: cf:22:70:6a:73:68:0e:9e:98:d1:91:3a:cc:54:a1: 62:1d:ff:eb:fa:37:af:6a:49:38:85:68:75:85:73: d7:35:df:9a:15:d8:06:bb:36:5b:25:13:bb:cb:53: b4:d5:64:45:c7:be:13:3a:13:6d:54:66:85:c1:89: 2a:4a:f7:f9:78:e1:f9:b0:29:16:18:3f:cf:3a:13: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E7:AA:18:D8:11:23:B8:67:9A:E7:24:97:58:66:80:2E:74:6F:F9 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KeeqGNgRI7hnmuckl1hmgC50b_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 45:37:e8:fd:9f:75:1a:da:24:da:f5:9a:aa:ee:b9:ed:60:06: 28:67:72:98:7c:53:1a:0f:c6:91:51:94:98:08:9f:91:c5:b9: 79:32:fc:07:82:a0:7e:c7:26:06:4c:23:6c:56:23:29:9c:2f: 64:69:c2:c9:cb:f1:99:81:e2:c7:20:21:10:9d:c3:8a:7f:a2: 9e:bb:91:ce:12:87:a9:f6:87:9a:1f:05:45:5c:ee:66:06:dc: b9:07:e0:e4:25:25:b6:11:34:ab:3c:e9:0b:2b:78:c0:2c:d0: 0c:78:14:65:7a:b2:90:ed:c8:80:4c:51:f2:fe:5a:a2:f6:0e: b9:af:74:4d:b0:94:e7:2b:96:68:12:be:5e:1a:fa:10:5b:69: e2:39:bd:72:86:ef:ad:82:07:75:a1:57:61:5e:ba:4e:d1:81: 8e:92:ff:39:c4:ee:d8:28:97:4e:f6:fc:6d:89:62:53:c9:a3: 08:95:e0:91:c7:66:8d:60:ce:d2:be:39:8c:83:a6:7e:7a:cb: 67:46:f8:08:63:75:0a:0e:66:b7:3f:36:b4:50:54:e5:66:43: a4:24:b0:61:bb:68:b8:fd:61:ea:36:51:9f:6d:08:1c:62:a2: 1e:b0:e4:9a:dc:18:c4:3b:a4:44:1f:da:73:c4:d6:e6:8a:2c: 74:53:71:13 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYoNeKXzW+Jzdyi3z+eJuiPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE5MTEwNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWU3YWExOGQ4MTEyM2I4Njc5YWU3MjQ5NzU4NjY4MDJlNzQ2ZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKCi/ElHeD7LDwEfrVQVLkKNfU92 hYvqoccPyMuATypVkhfbYY+6p2A46/NCewuNVWpD1RAlvJ2DY53S2MEH0Z5aFrBJ QEHnaj57AtVRctLyq27Aq50W6WIXXVqfEz9gzTUItgrIOlGs/qSNdPWNPSlSnYGh 9EJITnK7rccWA0NsxhV5DL2IxD3z1CR8E16fkaZ5iKMa2jCvrg6QQl2d9/AH7BXr uR5Mc/fhb4QCvT2uJhLPInBqc2gOnpjRkTrMVKFiHf/r+jevakk4hWh1hXPXNd+a FdgGuzZbJRO7y1O01WRFx74TOhNtVGaFwYkqSvf5eOH5sCkWGD/POhNbawIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCnnqhjYESO4Z5rnJJdYZoAudG/5MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvS2VlcUdOZ1JJN2hubXVja2wxaG1nQzUwYl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEU36P2fdRraJNr1mqru ue1gBihncph8UxoPxpFRlJgIn5HFuXky/AeCoH7HJgZMI2xWIymcL2RpwsnL8ZmB 4scgIRCdw4p/op67kc4Sh6n2h5ofBUVc7mYG3LkH4OQlJbYRNKs86QsreMAs0Ax4 FGV6spDtyIBMUfL+WqL2DrmvdE2wlOcrlmgSvl4a+hBbaeI5vXKG762CB3WhV2Fe uk7RgY6S/znE7tgol072/G2JYlPJowiV4JHHZo1gztK+OYyDpn56y2dG+AhjdQoO Zrc/NrRQVOVmQ6QksGG7aLj9Yeo2UZ9tCBxioh6w5JrcGMQ7pEQf2nPE1uaKLHRT cRM= -----END CERTIFICATE-----Generated at Tue Dec 30 07:16:50 2025 by rpki-client