This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NUrsF28Dh6S1OhP2jYJFnmDcZRU.roa File: NUrsF28Dh6S1OhP2jYJFnmDcZRU.roa (raw, json) Hash identifier: 2x5QTW0exLSsUMIMHjH5ptOYSN/0TOFCdlSmhSPTqdk= Subject key identifier: 35:4A:EC:17:6F:03:87:A4:B5:3A:13:F6:8D:82:45:9E:60:DC:65:15 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A073F9FB70A923A993873031DE8043F50 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NUrsF28Dh6S1OhP2jYJFnmDcZRU.roa Signing time: Fri 18 Aug 2023 06:05:24 +0000 ROA not before: Fri 18 Aug 2023 06:05:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:18a:73e:c477/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:07:3f:9f:b7:0a:92:3a:99:38:73:03:1d:e8:04:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 18 06:05:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=354aec176f0387a4b53a13f68d82459e60dc6515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:b5:f2:c5:72:4a:a0:7a:e3:5c:25:2b:76: 45:d7:1f:b8:2e:bc:1d:fd:9c:87:a6:1b:6f:67:31: aa:04:c2:b9:4e:c4:a3:5e:f9:61:a0:48:3b:a6:56: ab:6c:1a:bf:c3:8f:6e:e6:16:72:24:1e:46:a6:84: 40:f0:7f:6d:90:24:99:27:d9:3e:91:75:28:0a:3b: d4:45:2e:c7:a1:8e:39:bc:f9:ea:f3:a5:fa:b2:33: 93:0b:d7:3a:6d:52:77:83:96:5c:0e:0e:a1:19:e7: 57:f2:2d:9a:2c:88:f7:10:51:09:54:60:05:a8:c6: ea:63:2b:aa:6f:68:fb:96:14:f3:b3:62:3f:f8:90: c0:df:6b:2f:52:98:30:5a:71:9e:93:2d:80:95:51: b0:2b:0a:a6:18:5b:db:02:c3:d5:e4:af:48:85:c9: 4e:33:16:8b:41:69:12:41:de:aa:58:6a:0e:82:2d: 52:4e:f2:fc:50:56:9a:66:04:e7:67:66:c6:83:5f: 9f:22:89:da:2c:d4:44:13:9f:3c:d5:b5:be:6b:1e: 88:96:7f:01:f2:5a:45:8b:23:a8:f2:26:d2:1b:1b: 7a:41:aa:02:21:90:fc:bc:e9:9d:d9:29:59:97:35: e2:0a:f4:4f:5b:5e:68:94:5b:ac:30:c3:78:c9:f5: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4A:EC:17:6F:03:87:A4:B5:3A:13:F6:8D:82:45:9E:60:DC:65:15 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NUrsF28Dh6S1OhP2jYJFnmDcZRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 9b:f4:c7:8c:38:fb:1c:a6:34:3f:7a:99:bb:3e:a8:12:3c:c9: 31:f2:02:c2:8e:b8:33:e3:4f:3e:c7:2b:d2:42:d3:0f:28:c9: b1:3c:1d:ee:ea:43:89:c9:17:d2:d2:f8:b9:36:c8:37:16:0f: e4:79:f1:8f:6c:0c:42:de:10:d3:7f:73:f6:24:f4:d4:6b:d7: 1a:a6:c5:04:f1:79:16:7d:2b:60:db:00:5b:40:a3:40:02:49: 3e:ff:93:e7:7e:c3:43:b1:76:8f:bf:45:51:be:31:f7:dd:56: 03:03:83:b1:f7:9e:82:7e:89:91:45:05:d9:95:ab:3d:b3:65: 60:29:7f:e9:f8:ce:52:08:cd:83:48:50:61:a4:f6:39:87:68: 2d:bd:19:29:9c:70:56:86:61:d6:39:ea:30:60:3b:8e:db:27: 9d:3f:76:c5:ec:65:7e:74:14:4c:f4:ce:6a:33:11:ea:e8:74: 0e:6f:d8:54:ef:7f:12:63:a8:79:ca:39:e9:4a:52:69:ff:7f: e6:25:c2:f5:09:bf:2d:70:d3:8d:d8:c5:f5:7f:fe:97:ca:56: f6:22:99:54:a2:a4:a2:f9:c7:68:9e:e9:5e:82:2a:ae:52:b9: 6f:c8:be:80:42:45:55:b4:f8:54:6c:6a:1e:c8:f1:49:2a:3e: d2:17:6d:87 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYoHP5+3CpI6mThzAx3oBD9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE4MDYwNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTRhZWMxNzZmMDM4N2E0YjUzYTEzZjY4ZDgyNDU5ZTYwZGM2NTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotq18sVySqB641wlK3ZF1x+4Lrwd /ZyHphtvZzGqBMK5TsSjXvlhoEg7plarbBq/w49u5hZyJB5GpoRA8H9tkCSZJ9k+ kXUoCjvURS7HoY45vPnq86X6sjOTC9c6bVJ3g5ZcDg6hGedX8i2aLIj3EFEJVGAF qMbqYyuqb2j7lhTzs2I/+JDA32svUpgwWnGeky2AlVGwKwqmGFvbAsPV5K9IhclO MxaLQWkSQd6qWGoOgi1STvL8UFaaZgTnZ2bGg1+fIonaLNREE5881bW+ax6Iln8B 8lpFiyOo8ibSGxt6QaoCIZD8vOmd2SlZlzXiCvRPW15olFusMMN4yfVChwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDVK7BdvA4ektToT9o2CRZ5g3GUVMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvTlVyc0YyOERoNlMxT2hQMmpZSkZubURjWlJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJv0x4w4+xymND96mbs+ qBI8yTHyAsKOuDPjTz7HK9JC0w8oybE8He7qQ4nJF9LS+Lk2yDcWD+R58Y9sDELe ENN/c/Yk9NRr1xqmxQTxeRZ9K2DbAFtAo0ACST7/k+d+w0Oxdo+/RVG+MffdVgMD g7H3noJ+iZFFBdmVqz2zZWApf+n4zlIIzYNIUGGk9jmHaC29GSmccFaGYdY56jBg O47bJ50/dsXsZX50FEz0zmozEerodA5v2FTvfxJjqHnKOelKUmn/f+YlwvUJvy1w 043YxfV//pfKVvYimVSipKL5x2ie6V6CKq5SuW/IvoBCRVW0+FRsah7I8UkqPtIX bYc= -----END CERTIFICATE-----Generated at Sun Jan 11 06:50:57 2026 by rpki-client