This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VkpsJh-HlTc4PC7PJyDe1OD4pog.roa File: VkpsJh-HlTc4PC7PJyDe1OD4pog.roa (raw, json) Hash identifier: IgG6Z76DXAc6Axgt9Yo+ip3ve73FxEVf+n9SiSqb7M8= Subject key identifier: 56:4A:6C:26:1F:87:95:37:38:3C:2E:CF:27:20:DE:D4:E0:F8:A6:88 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01866DDA226D9E86355E07852FA90B1AFCA0 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VkpsJh-HlTc4PC7PJyDe1OD4pog.roa Signing time: Mon 20 Feb 2023 08:04:17 +0000 ROA not before: Mon 20 Feb 2023 08:04:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:6dda:17a9/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:6d:da:22:6d:9e:86:35:5e:07:85:2f:a9:0b:1a:fc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 20 08:04:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=564a6c261f879537383c2ecf2720ded4e0f8a688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:8d:ff:0e:81:db:9e:51:45:0d:9c:85:d4: 4e:85:d8:66:a6:22:78:dd:fa:a0:2a:72:88:d2:31: 6c:9b:c6:87:7e:63:a2:1c:f2:2e:ba:18:98:e3:e2: 80:4c:0f:6e:51:03:c5:00:aa:89:56:19:66:18:a4: ba:ac:20:a1:db:57:52:4b:a2:49:6a:56:c7:9d:e6: 40:9a:39:44:78:dc:eb:2a:88:65:a1:0b:d0:a8:a1: f4:57:49:0a:e4:bf:42:11:c5:fe:78:04:8b:07:7f: 1c:06:a2:da:de:9e:ae:09:29:b7:e9:15:b7:94:c5: c0:d2:e4:77:fe:88:67:04:67:3e:ce:fa:df:9d:d0: c3:94:14:78:52:c8:c8:f7:18:60:02:74:6b:a6:7f: a5:e5:b3:d6:a6:0f:76:b9:8a:6e:8c:06:85:ae:4b: 81:6a:49:7a:75:5e:66:19:c2:20:4d:b3:53:0c:79: f8:8f:e1:c9:28:70:b9:68:a9:6e:6c:fb:4d:1f:ee: f1:b6:fc:dc:90:bb:76:bb:ac:4b:d0:3e:c7:e5:4e: 6c:48:2f:69:b8:f2:8a:f9:e7:13:a7:94:a1:dd:14: e7:68:b8:5b:2f:2c:dd:f3:88:de:81:eb:b3:7b:0e: d5:49:c8:08:40:9c:20:cc:d8:ce:c4:f6:12:22:72: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4A:6C:26:1F:87:95:37:38:3C:2E:CF:27:20:DE:D4:E0:F8:A6:88 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VkpsJh-HlTc4PC7PJyDe1OD4pog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 9e:28:63:88:48:18:6f:2a:84:e3:4f:d7:3c:9e:ee:b6:31:b6: e7:5a:88:74:41:2e:b0:b9:1d:d6:37:60:34:d2:7a:75:70:bb: f1:d9:05:fc:46:2b:4a:c5:23:63:4a:d9:84:5f:d4:02:c9:57: ec:6f:df:61:00:16:1c:16:d8:b3:67:e3:b9:8a:2d:0b:ef:4f: 73:d9:55:6e:24:80:e2:4f:d5:40:1b:b3:f7:93:9f:c1:62:de: 66:1e:f7:43:b8:6e:69:15:83:5e:f4:31:b3:ca:b5:1d:f8:c7: 30:8c:b9:19:2c:88:73:87:f1:2a:80:eb:f2:75:69:ac:aa:11: 4f:cd:df:ee:e0:cb:7d:a4:54:58:bd:d5:52:5a:eb:8f:04:35: cc:0b:2e:db:8d:6b:47:3f:7d:3b:5f:cc:86:ea:25:e5:e7:e5: 17:c5:1c:3b:67:72:c6:d3:f5:cd:6a:08:05:64:f6:57:c0:2d: ad:6e:ac:f1:3e:70:93:93:09:8a:41:14:43:40:6a:04:aa:ec: 80:e5:a5:87:f7:55:2f:24:20:12:89:53:58:50:cc:3d:ff:b1: f1:ac:87:0b:e1:33:ca:3c:ed:c6:3d:60:55:f4:fc:08:c5:c4: 7e:b6:5f:bc:ad:e5:b5:3c:d2:23:72:b9:99:89:92:76:23:16: 52:f5:83:45 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZt2iJtnoY1XgeFL6kLGvygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjIwMDgwNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjRhNmMyNjFmODc5NTM3MzgzYzJlY2YyNzIwZGVkNGUwZjhhNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRmN/w6B255RRQ2chdROhdhmpiJ4 3fqgKnKI0jFsm8aHfmOiHPIuuhiY4+KATA9uUQPFAKqJVhlmGKS6rCCh21dSS6JJ albHneZAmjlEeNzrKohloQvQqKH0V0kK5L9CEcX+eASLB38cBqLa3p6uCSm36RW3 lMXA0uR3/ohnBGc+zvrfndDDlBR4UsjI9xhgAnRrpn+l5bPWpg92uYpujAaFrkuB akl6dV5mGcIgTbNTDHn4j+HJKHC5aKlubPtNH+7xtvzckLt2u6xL0D7H5U5sSC9p uPKK+ecTp5Sh3RTnaLhbLyzd84jegeuzew7VScgIQJwgzNjOxPYSInKFHQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFZKbCYfh5U3ODwuzycg3tTg+KaIMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvVmtwc0poLUhsVGM0UEM3UEp5RGUxT0Q0cG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ4oY4hIGG8qhONP1zye 7rYxtudaiHRBLrC5HdY3YDTSenVwu/HZBfxGK0rFI2NK2YRf1ALJV+xv32EAFhwW 2LNn47mKLQvvT3PZVW4kgOJP1UAbs/eTn8Fi3mYe90O4bmkVg170MbPKtR34xzCM uRksiHOH8SqA6/J1aayqEU/N3+7gy32kVFi91VJa648ENcwLLtuNa0c/fTtfzIbq JeXn5RfFHDtncsbT9c1qCAVk9lfALa1urPE+cJOTCYpBFENAagSq7IDlpYf3VS8k IBKJU1hQzD3/sfGshwvhM8o87cY9YFX0/AjFxH62X7yt5bU80iNyuZmJknYjFlL1 g0U= -----END CERTIFICATE-----Generated at Tue Jan 6 06:36:38 2026 by rpki-client