This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ov_EFB0dUf-2KssApjGGgzw-yMc.roa File: Ov_EFB0dUf-2KssApjGGgzw-yMc.roa (raw, json) Hash identifier: I1wcyVESc8du9uhMtuuwjQ+mGtxIJJ4caZ8LNR4cPRw= Subject key identifier: 3A:FF:C4:14:1D:1D:51:FF:B6:2A:CB:00:A6:31:86:83:3C:3E:C8:C7 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01867F0594F3A7F10ADC8F05BC036F69C4FA Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ov_EFB0dUf-2KssApjGGgzw-yMc.roa Signing time: Thu 23 Feb 2023 16:05:17 +0000 ROA not before: Thu 23 Feb 2023 16:05:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:7f05:d73/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:7f:05:94:f3:a7:f1:0a:dc:8f:05:bc:03:6f:69:c4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 23 16:05:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=3affc4141d1d51ffb62acb00a63186833c3ec8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:f4:89:7a:dd:6b:79:97:ed:f4:0d:79:b7: 15:85:23:50:59:99:be:53:61:a6:74:eb:42:34:6a: cf:3a:b8:68:5f:0a:3d:16:27:2b:24:28:ba:4c:e7: 05:3a:82:c0:35:2b:54:9c:05:c1:4c:b6:c0:13:c1: b5:50:59:f0:8c:1d:1b:0d:dd:a5:c4:31:48:ce:4f: eb:7b:27:e9:ce:5f:f1:18:9f:bc:c8:12:e5:0c:13: 22:85:0f:82:8f:41:26:9d:17:f4:e6:8e:56:52:45: 3a:e3:7c:05:ee:42:3e:16:0f:6b:e9:75:62:aa:b8: 93:76:d3:05:20:14:22:d2:0a:00:1e:96:5c:ed:9b: 6b:c7:41:d8:b1:0d:b4:e9:79:07:35:9c:e7:3e:c6: 36:1f:21:79:ad:f5:48:12:88:25:f4:4e:5d:a0:d9: 21:2c:73:02:4c:3d:53:d5:fb:35:ef:79:98:52:ea: d9:6c:a3:05:ea:3a:85:3e:1a:99:d0:38:95:0f:56: 32:d8:57:b0:a3:b1:16:47:a0:5b:eb:21:65:56:07: f0:74:e4:f4:63:42:7f:6d:b1:41:9e:0e:ef:12:6d: ba:14:bc:31:f7:01:e1:34:1a:36:7d:b7:ac:31:ca: d2:48:cb:3f:8f:4f:06:9c:74:a0:ff:b0:22:f8:44: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FF:C4:14:1D:1D:51:FF:B6:2A:CB:00:A6:31:86:83:3C:3E:C8:C7 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ov_EFB0dUf-2KssApjGGgzw-yMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 7f:de:0c:02:57:c1:d8:91:9f:3f:9f:92:14:06:e3:c7:57:56: 94:8d:e1:db:3b:a4:6a:cd:76:7f:2b:9f:09:6d:df:ca:41:0f: 0a:a4:09:77:9a:b1:0c:ea:57:70:09:d2:59:9b:23:b1:6d:0d: d1:f6:6e:41:3c:cc:b0:91:c7:20:19:b2:40:d2:2e:65:ba:cb: c9:fe:29:1d:8b:40:43:48:95:17:6d:59:50:16:a0:62:1f:37: 5f:e0:12:0b:a3:fc:f1:39:95:7e:11:7c:09:31:5b:1f:5f:35: 1a:d6:72:d4:86:87:1a:3d:48:5a:89:d6:87:fb:b3:7e:3f:60: 0b:f3:1c:21:e3:b3:d5:4c:c8:5f:94:46:c3:a8:d2:7b:18:94: 67:d9:13:dd:80:2f:2b:72:f1:ea:fa:2c:e5:ba:da:b2:bb:b3: 51:de:5f:bb:6f:99:e4:36:dd:b3:df:75:7e:8f:5b:c4:04:ef: c4:b0:f2:28:f9:a2:7d:05:f5:55:a7:40:9a:61:e9:15:52:8b: 25:67:96:c4:e9:d1:98:a0:c9:32:a7:c3:36:57:69:fb:53:d7: 08:ba:9a:49:0c:4a:e8:15:6d:e8:35:35:02:3d:2c:29:a8:2d: 92:6d:69:87:b8:91:f3:ac:9c:5a:05:c1:2c:3a:0a:44:dc:6d: a4:39:a1:25 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZ/BZTzp/EK3I8FvANvacT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjIzMTYwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWZmYzQxNDFkMWQ1MWZmYjYyYWNiMDBhNjMxODY4MzNjM2VjOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4b0iXrda3mX7fQNebcVhSNQWZm+ U2GmdOtCNGrPOrhoXwo9FicrJCi6TOcFOoLANStUnAXBTLbAE8G1UFnwjB0bDd2l xDFIzk/reyfpzl/xGJ+8yBLlDBMihQ+Cj0EmnRf05o5WUkU643wF7kI+Fg9r6XVi qriTdtMFIBQi0goAHpZc7Ztrx0HYsQ206XkHNZznPsY2HyF5rfVIEogl9E5doNkh LHMCTD1T1fs173mYUurZbKMF6jqFPhqZ0DiVD1Yy2Fewo7EWR6Bb6yFlVgfwdOT0 Y0J/bbFBng7vEm26FLwx9wHhNBo2fbesMcrSSMs/j08GnHSg/7Ai+ESQKwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDr/xBQdHVH/tirLAKYxhoM8PsjHMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvT3ZfRUZCMGRVZi0yS3NzQXBqR0dnencteU1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH/eDAJXwdiRnz+fkhQG 48dXVpSN4ds7pGrNdn8rnwlt38pBDwqkCXeasQzqV3AJ0lmbI7FtDdH2bkE8zLCR xyAZskDSLmW6y8n+KR2LQENIlRdtWVAWoGIfN1/gEguj/PE5lX4RfAkxWx9fNRrW ctSGhxo9SFqJ1of7s34/YAvzHCHjs9VMyF+URsOo0nsYlGfZE92ALyty8er6LOW6 2rK7s1HeX7tvmeQ23bPfdX6PW8QE78Sw8ij5on0F9VWnQJph6RVSiyVnlsTp0Zig yTKnwzZXaftT1wi6mkkMSugVbeg1NQI9LCmoLZJtaYe4kfOsnFoFwSw6CkTcbaQ5 oSU= -----END CERTIFICATE-----Generated at Thu Jan 1 11:04:45 2026 by rpki-client