This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OWaYaCEH0hALrVItGyS38C5A0QU.roa File: OWaYaCEH0hALrVItGyS38C5A0QU.roa (raw, json) Hash identifier: mw2hzJVYnQOUjCSLLM0Vsgsz3VIij6eAHjHdD5CK9U4= Subject key identifier: 39:66:98:68:21:07:D2:10:0B:AD:52:2D:1B:24:B7:F0:2E:40:D1:05 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189D050B9295A0BC0AA3595D68B1EDD60C0 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OWaYaCEH0hALrVItGyS38C5A0QU.roa Signing time: Mon 07 Aug 2023 14:04:58 +0000 ROA not before: Mon 07 Aug 2023 14:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:189:d04f:fffa/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:d0:50:b9:29:5a:0b:c0:aa:35:95:d6:8b:1e:dd:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 7 14:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=396698682107d2100bad522d1b24b7f02e40d105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:21:94:8e:14:df:85:87:5a:56:29:41:24: 41:b9:ec:43:21:8c:95:c5:0f:68:c1:28:12:cb:9c: 98:99:d7:60:95:6b:be:63:3f:d3:96:34:42:61:17: f8:64:4c:40:73:2d:59:81:f9:67:5a:bd:b1:c6:89: 54:e7:0a:cf:e6:10:20:1f:1f:d4:9f:50:0b:6e:30: 2c:3b:0d:f1:66:93:6f:0e:3d:11:9b:58:b9:a5:94: 2e:df:5f:19:8e:17:41:1e:82:66:88:13:2a:b8:c6: a0:10:8f:a9:98:b4:cd:4f:a7:9c:d0:55:b2:ab:de: e8:ae:ee:f0:30:21:d0:69:5f:e5:b8:85:6f:48:b2: 08:e5:ab:3d:fe:82:19:ff:7f:2c:69:d1:7f:b2:81: d3:89:10:0e:07:1f:ed:6f:c0:1c:4e:76:8e:92:91: 7e:a7:7d:8e:6e:7a:00:5f:da:bd:51:25:10:f3:15: 03:25:88:48:34:6c:85:69:20:fc:cf:08:c8:29:96: a5:b6:db:df:b1:67:10:ba:39:ee:ed:ab:f9:cc:dd: 86:1e:6b:91:ef:08:fc:7f:5b:41:3c:94:42:f8:96: 38:b5:ed:90:df:dd:5b:f4:48:5f:22:f4:db:8f:fa: 01:4f:96:51:c9:e7:77:79:5e:c9:a6:f4:36:d5:b3: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:66:98:68:21:07:D2:10:0B:AD:52:2D:1B:24:B7:F0:2E:40:D1:05 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OWaYaCEH0hALrVItGyS38C5A0QU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 1f:e6:45:94:1f:ed:67:3f:4d:a3:fa:42:e4:c8:03:32:6d:22: 19:e3:05:a1:d2:6e:e5:57:e4:25:73:a9:eb:6a:95:d3:6b:e5: ad:19:1f:2e:63:80:3a:f7:63:31:ba:76:47:bb:1c:45:22:7c: d7:cb:4b:a2:82:16:9c:44:3c:58:76:62:8b:58:e8:ee:87:32: 98:9f:d5:c1:bc:e8:5c:56:bc:18:79:77:9b:f9:8a:b7:f3:ff: d3:72:36:b1:0b:d8:e0:95:b1:d2:7f:63:77:6b:07:51:08:b3: 1d:ed:1a:5b:77:f8:f7:0d:55:fb:fe:9c:a1:4a:19:21:74:47: b3:51:db:e1:82:86:6e:ac:26:0d:7c:39:52:18:01:38:cf:7b: c1:1c:58:1c:3a:cd:4d:5e:25:67:1c:b0:c2:56:0b:01:8c:81: 07:48:86:57:7a:9a:7d:a7:e1:f1:be:1c:6f:8d:48:7d:d0:7d: a8:fd:ce:d9:73:f9:39:a4:e6:02:51:fb:de:25:c3:9b:6c:c0: 7f:de:8e:1f:28:5a:dd:32:98:5a:60:a1:1b:d1:c3:ff:cc:89: 96:a5:80:31:a2:22:de:8f:5d:fd:f6:ed:5d:56:23:b0:0a:df: 6d:c3:5a:e9:43:e7:8c:02:0e:1d:f8:99:5d:fc:cb:d8:d2:5d: aa:89:79:a2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYnQULkpWgvAqjWV1ose3WDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODA3MTQwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTY2OTg2ODIxMDdkMjEwMGJhZDUyMmQxYjI0YjdmMDJlNDBkMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPIhlI4U34WHWlYpQSRBuexDIYyV xQ9owSgSy5yYmddglWu+Yz/TljRCYRf4ZExAcy1ZgflnWr2xxolU5wrP5hAgHx/U n1ALbjAsOw3xZpNvDj0Rm1i5pZQu318ZjhdBHoJmiBMquMagEI+pmLTNT6ec0FWy q97oru7wMCHQaV/luIVvSLII5as9/oIZ/38sadF/soHTiRAOBx/tb8AcTnaOkpF+ p32ObnoAX9q9USUQ8xUDJYhINGyFaSD8zwjIKZalttvfsWcQujnu7av5zN2GHmuR 7wj8f1tBPJRC+JY4te2Q391b9EhfIvTbj/oBT5ZRyed3eV7JpvQ21bOuhwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDlmmGghB9IQC61SLRskt/AuQNEFMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvT1dhWWFDRUgwaEFMclZJdEd5UzM4QzVBMFFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB/mRZQf7Wc/TaP6QuTI AzJtIhnjBaHSbuVX5CVzqetqldNr5a0ZHy5jgDr3YzG6dke7HEUifNfLS6KCFpxE PFh2YotY6O6HMpif1cG86FxWvBh5d5v5irfz/9NyNrEL2OCVsdJ/Y3drB1EIsx3t Glt3+PcNVfv+nKFKGSF0R7NR2+GChm6sJg18OVIYATjPe8EcWBw6zU1eJWccsMJW CwGMgQdIhld6mn2n4fG+HG+NSH3Qfaj9ztlz+Tmk5gJR+94lw5tswH/ejh8oWt0y mFpgoRvRw//MiZalgDGiIt6PXf327V1WI7AK323DWulD54wCDh34mV38y9jSXaqJ eaI= -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:53 2025 by rpki-client