This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LO9T-QmtWFrEaznl2mIhDQnHMwM.roa File: LO9T-QmtWFrEaznl2mIhDQnHMwM.roa (raw, json) Hash identifier: h/kwWNQTuTBXlqpZzJEdD2+2SJS1kbTjz0BbCtVhTMA= Subject key identifier: 2C:EF:53:F9:09:AD:58:5A:C4:6B:39:E5:DA:62:21:0D:09:C7:33:03 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0188D98D6DFD2AAF574BD84353669162FE28 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LO9T-QmtWFrEaznl2mIhDQnHMwM.roa Signing time: Tue 20 Jun 2023 16:05:04 +0000 ROA not before: Tue 20 Jun 2023 16:05:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:188:d98c:a6ae/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:d9:8d:6d:fd:2a:af:57:4b:d8:43:53:66:91:62:fe:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jun 20 16:05:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=2cef53f909ad585ac46b39e5da62210d09c73303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:52:06:09:39:68:8c:00:a2:e1:85:e0:a7: b3:b4:df:e4:56:5e:19:0f:69:45:68:6a:1e:cd:21: 1b:63:58:1c:8f:b2:5d:1b:c3:5c:76:ae:39:d2:fa: c4:6e:68:42:15:84:5f:a3:23:86:5d:f3:c7:5e:db: 7e:59:0c:a9:2d:c1:87:4b:57:8d:f0:2d:34:10:1b: 20:b6:c0:73:e8:7b:39:72:ab:fa:da:13:b0:e7:21: f8:00:0c:ec:ab:76:2a:c6:e2:a4:04:9b:5c:b4:17: 6e:59:d0:8b:fa:1e:eb:06:a3:69:31:8d:16:8c:11: 50:73:45:d6:68:98:be:92:f8:e9:02:84:85:39:c3: ac:d1:75:da:d4:cf:e0:d8:9a:77:f9:6d:5e:6d:bd: df:ad:9c:de:d0:4d:38:d6:b6:17:79:09:e5:e7:dd: 14:46:66:f9:76:ac:a8:ac:b3:57:db:cb:c8:02:95: fc:57:b0:47:dd:c1:72:48:17:01:2e:aa:13:a8:95: f5:3d:6e:05:75:3f:b7:7f:df:ac:9f:00:56:79:1f: e5:89:ad:2d:db:f5:cf:6f:0b:d8:a4:4c:df:ff:20: 77:ce:3c:ac:b0:e9:56:cc:96:b5:59:22:eb:f3:f8: 1c:9d:70:6f:99:1f:e0:8f:f4:99:86:8b:78:56:15: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EF:53:F9:09:AD:58:5A:C4:6B:39:E5:DA:62:21:0D:09:C7:33:03 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LO9T-QmtWFrEaznl2mIhDQnHMwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 48:ac:e6:61:c9:5a:2f:31:16:89:e5:0d:f1:2b:f0:8f:ca:a0: a5:9b:37:0f:b4:ac:f3:3b:e9:fb:07:58:22:18:59:03:55:ce: cc:f6:40:41:82:d3:70:64:e9:c9:98:42:51:ff:4b:f7:e5:bf: 71:28:29:3c:12:dc:9b:9f:90:6a:25:a9:47:d5:d7:52:c6:aa: e8:59:89:0c:cc:6e:6c:b9:82:53:9e:3b:4f:45:41:a3:b2:8b: ff:e7:30:42:bd:b8:24:43:b1:20:15:b6:83:88:da:78:e2:c2: e1:e4:64:84:60:c1:8d:06:aa:bc:9d:01:7a:72:c3:11:fa:31: 37:ed:29:93:44:8f:b0:7d:fa:f8:c1:be:93:4d:34:38:d9:5d: 89:25:f4:35:4c:d4:c7:4b:38:04:11:68:8d:b6:d0:4f:13:1c: 42:cf:81:85:89:82:1a:26:4e:bc:7f:52:41:a4:a5:6a:b9:2a: 93:bd:db:02:93:81:94:e0:e5:05:7e:60:ff:d6:71:91:7d:da: 52:59:1a:93:ad:4f:83:25:e5:81:54:09:9c:71:17:5e:50:86: b2:77:9d:ca:13:ec:e2:b9:be:c0:f3:36:e2:a8:cf:03:74:09: 84:07:22:87:3d:f4:4c:3f:97:86:50:6c:93:9d:fd:1d:9c:b9: cc:38:ea:de -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYjZjW39Kq9XS9hDU2aRYv4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNjIwMTYwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2VmNTNmOTA5YWQ1ODVhYzQ2YjM5ZTVkYTYyMjEwZDA5YzczMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhpSBgk5aIwAouGF4KeztN/kVl4Z D2lFaGoezSEbY1gcj7JdG8Ncdq450vrEbmhCFYRfoyOGXfPHXtt+WQypLcGHS1eN 8C00EBsgtsBz6Hs5cqv62hOw5yH4AAzsq3YqxuKkBJtctBduWdCL+h7rBqNpMY0W jBFQc0XWaJi+kvjpAoSFOcOs0XXa1M/g2Jp3+W1ebb3frZze0E041rYXeQnl590U Rmb5dqyorLNX28vIApX8V7BH3cFySBcBLqoTqJX1PW4FdT+3f9+snwBWeR/lia0t 2/XPbwvYpEzf/yB3zjyssOlWzJa1WSLr8/gcnXBvmR/gj/SZhot4VhVMDwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCzvU/kJrVhaxGs55dpiIQ0JxzMDMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvTE85VC1RbXRXRnJFYXpubDJtSWhEUW5ITXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEis5mHJWi8xFonlDfEr 8I/KoKWbNw+0rPM76fsHWCIYWQNVzsz2QEGC03Bk6cmYQlH/S/flv3EoKTwS3Juf kGolqUfV11LGquhZiQzMbmy5glOeO09FQaOyi//nMEK9uCRDsSAVtoOI2njiwuHk ZIRgwY0GqrydAXpywxH6MTftKZNEj7B9+vjBvpNNNDjZXYkl9DVM1MdLOAQRaI22 0E8THELPgYWJghomTrx/UkGkpWq5KpO92wKTgZTg5QV+YP/WcZF92lJZGpOtT4Ml 5YFUCZxxF15QhrJ3ncoT7OK5vsDzNuKozwN0CYQHIoc99Ew/l4ZQbJOd/R2cucw4 6t4= -----END CERTIFICATE-----Generated at Thu Dec 25 07:22:43 2025 by rpki-client