This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W97jAdp318Nu8rnAw4PjZbjMcQs.roa File: W97jAdp318Nu8rnAw4PjZbjMcQs.roa (raw, json) Hash identifier: NptuHO3st+gX+X9HezCCWFS/935giBXBXIoysFxIhk8= Subject key identifier: 5B:DE:E3:01:DA:77:D7:C3:6E:F2:B9:C0:C3:83:E3:65:B8:CC:71:0B Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A08515ED8B1BED9D765E2F661BB533F25 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W97jAdp318Nu8rnAw4PjZbjMcQs.roa Signing time: Fri 18 Aug 2023 11:04:25 +0000 ROA not before: Fri 18 Aug 2023 11:04:25 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:851:2d25/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:08:51:5e:d8:b1:be:d9:d7:65:e2:f6:61:bb:53:3f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 18 11:04:25 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=5bdee301da77d7c36ef2b9c0c383e365b8cc710b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:8e:d2:e6:76:20:da:12:fa:e0:ad:b8:63: fc:a2:86:04:5b:e3:ad:7a:76:2a:99:19:44:8b:f7: 56:22:a7:51:7f:53:70:90:79:84:20:a3:a2:50:cf: 69:c1:88:95:a8:59:4d:11:7e:7f:ea:c8:1b:05:39: df:4d:45:b4:45:5c:17:49:5a:75:b2:1a:bb:93:1a: b3:2f:fb:d7:df:33:10:36:3d:b2:19:9e:3f:8a:3b: 2c:d0:48:86:07:f9:62:c6:e7:f0:7d:18:da:d3:28: 54:ab:f3:33:50:01:0b:11:06:da:99:6f:5b:d1:84: 9a:1e:cb:4a:34:fd:ae:93:49:93:54:70:fa:ec:ee: 0e:84:79:83:ac:4a:a4:f6:1f:32:4e:53:ee:93:26: e9:6d:94:46:0e:af:86:57:01:2a:bf:b1:3d:1d:81: dc:c5:56:e2:09:86:ab:64:13:d3:ed:29:db:c1:17: 7e:08:0a:f7:72:29:fc:84:64:41:45:99:63:4a:49: 00:c5:74:61:8c:79:20:e9:c2:bd:3a:34:63:0d:f1: af:b8:f5:0a:bc:84:8e:d8:8c:3c:c9:95:d0:21:42: e7:fc:c0:26:bd:05:f9:60:57:b4:1a:d2:eb:56:a0: e5:00:02:03:5e:6b:77:c8:84:53:47:2c:1d:59:93: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DE:E3:01:DA:77:D7:C3:6E:F2:B9:C0:C3:83:E3:65:B8:CC:71:0B X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W97jAdp318Nu8rnAw4PjZbjMcQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 66:5c:a2:f6:8a:5c:be:52:dd:79:f8:64:59:e7:c0:7f:89:45: f5:67:d8:69:b6:28:1e:a2:8a:7d:b8:ec:ab:9e:33:d1:34:2f: fe:4f:e8:3e:ea:a9:54:e4:0a:be:6e:44:7b:71:96:e0:f2:25: 49:61:24:9f:8d:72:63:e9:bd:c1:0b:8f:d7:90:d3:e3:85:a2: 54:73:13:ce:3b:f4:a2:bc:94:ed:07:d0:3b:7c:08:b2:81:1c: aa:bf:13:b0:ab:bb:ac:f7:61:8b:5b:46:b7:09:18:86:12:24: b5:c1:a9:4a:96:f0:0d:33:68:48:78:47:b5:5e:47:3c:ee:e6: 05:72:55:ea:8b:07:ac:b8:a1:b8:55:ab:c3:7e:94:27:b1:e0: 59:19:81:9e:dd:b8:e1:e3:ae:20:dd:75:5f:7e:dd:b4:52:52: 50:3f:58:10:07:67:67:6e:f3:a2:62:12:a7:64:af:00:80:ca: 10:9c:6e:f3:c3:9d:34:a8:1e:fa:b2:ac:2f:58:e9:77:85:c9: 19:5b:d9:f1:59:ce:ac:75:ba:05:fa:73:8d:16:43:90:d5:73: 5d:75:f0:b9:38:37:bd:c5:58:fb:62:ef:96:0d:bd:c6:f1:bb: 5b:d1:6e:92:1d:c6:f3:45:fb:fa:e1:99:a7:5e:b0:b6:d1:e1: a0:0d:57:bf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYoIUV7Ysb7Z12Xi9mG7Uz8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE4MTEwNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmRlZTMwMWRhNzdkN2MzNmVmMmI5YzBjMzgzZTM2NWI4Y2M3MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi62O0uZ2INoS+uCtuGP8ooYEW+Ot enYqmRlEi/dWIqdRf1NwkHmEIKOiUM9pwYiVqFlNEX5/6sgbBTnfTUW0RVwXSVp1 shq7kxqzL/vX3zMQNj2yGZ4/ijss0EiGB/lixufwfRja0yhUq/MzUAELEQbamW9b 0YSaHstKNP2uk0mTVHD67O4OhHmDrEqk9h8yTlPukybpbZRGDq+GVwEqv7E9HYHc xVbiCYarZBPT7SnbwRd+CAr3cin8hGRBRZljSkkAxXRhjHkg6cK9OjRjDfGvuPUK vISO2Iw8yZXQIULn/MAmvQX5YFe0GtLrVqDlAAIDXmt3yIRTRywdWZN24wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFve4wHad9fDbvK5wMOD42W4zHELMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvVzk3akFkcDMxOE51OHJuQXc0UGpaYmpNY1FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGZcovaKXL5S3Xn4ZFnn wH+JRfVn2Gm2KB6iin247KueM9E0L/5P6D7qqVTkCr5uRHtxluDyJUlhJJ+NcmPp vcELj9eQ0+OFolRzE8479KK8lO0H0Dt8CLKBHKq/E7Cru6z3YYtbRrcJGIYSJLXB qUqW8A0zaEh4R7VeRzzu5gVyVeqLB6y4obhVq8N+lCex4FkZgZ7duOHjriDddV9+ 3bRSUlA/WBAHZ2du86JiEqdkrwCAyhCcbvPDnTSoHvqyrC9Y6XeFyRlb2fFZzqx1 ugX6c40WQ5DVc1118Lk4N73FWPti75YNvcbxu1vRbpIdxvNF+/rhmadesLbR4aAN V78= -----END CERTIFICATE-----Generated at Thu Jan 8 11:29:31 2026 by rpki-client