This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XEnLRWte0vHkt_wVRS4MvKiFW2M.roa File: XEnLRWte0vHkt_wVRS4MvKiFW2M.roa (raw, json) Hash identifier: pSPbRSYlOwirEm0ga3Vt1udgJYeegPEEdm4n2pkiFlg= Subject key identifier: 5C:49:CB:45:6B:5E:D2:F1:E4:B7:FC:15:45:2E:0C:BC:A8:85:5B:63 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01864D73A939EF2D366DC778D4C599975C00 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XEnLRWte0vHkt_wVRS4MvKiFW2M.roa Signing time: Tue 14 Feb 2023 01:04:30 +0000 ROA not before: Tue 14 Feb 2023 01:04:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:4d73:8c3c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:4d:73:a9:39:ef:2d:36:6d:c7:78:d4:c5:99:97:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 14 01:04:30 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=5c49cb456b5ed2f1e4b7fc15452e0cbca8855b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d0:9a:81:b3:33:80:96:8d:be:53:0d:b2:ba: 48:17:26:de:64:dc:66:96:3a:3f:1f:88:b1:db:fc: 93:51:92:5f:b2:5b:fd:8c:6b:08:13:1e:94:08:2c: ac:45:fb:b6:47:bf:55:05:dd:38:6a:55:29:4f:d3: 1e:2d:79:34:e6:5b:69:ec:9a:2f:41:d3:1f:09:5a: 5e:cb:08:53:1c:06:0c:b8:9c:da:0c:b9:98:36:f7: 4d:6a:6b:bf:a5:14:ba:32:64:94:91:24:42:b7:2f: b8:e5:69:82:e6:43:81:47:f7:4a:ee:57:b0:28:39: 11:20:37:b0:17:70:7c:d3:4f:1c:cd:c9:5d:18:3c: 11:de:c1:5f:24:f3:7a:b8:5b:db:02:9e:bc:23:d9: 0a:74:ea:49:a3:08:ec:fa:6a:b7:5e:d2:d6:62:6e: ce:e7:f9:df:94:a3:2a:5f:dd:97:1c:1f:1a:e6:4c: 30:2c:55:7a:6f:36:7f:17:6d:cc:47:a6:da:98:f5: af:d7:36:33:b9:52:45:6a:f7:f2:c8:b3:18:d5:15: a4:52:14:dc:86:44:8f:bb:c2:92:e3:0b:90:f4:3c: 7e:70:a3:89:85:09:cb:ff:30:66:95:ee:7d:bc:8f: cb:4f:a8:ad:b4:56:65:e1:5f:29:bc:0d:36:de:a1: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:49:CB:45:6B:5E:D2:F1:E4:B7:FC:15:45:2E:0C:BC:A8:85:5B:63 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XEnLRWte0vHkt_wVRS4MvKiFW2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 3d:93:da:b3:8a:93:a5:cc:6e:b8:05:07:92:84:f5:f9:36:21: e9:64:d0:06:fe:6c:0f:fd:2a:d4:e3:14:4d:75:8d:cb:51:94: d3:e6:30:cb:f3:27:71:91:23:e9:41:be:a0:0d:a2:a8:48:69: 4b:c2:ed:9b:8d:c9:af:eb:12:3e:46:32:0f:b9:7a:bf:8b:75: 00:88:f1:c8:4e:8e:a9:26:25:e6:10:83:07:5f:77:48:ea:e5: 52:db:a1:2b:8f:5c:56:b4:be:40:c2:c6:df:e9:43:bc:63:19: 92:74:06:9d:8f:e6:9d:30:f2:cd:ab:f5:1e:1a:ba:4d:6b:a5: 77:6a:8f:b1:35:fd:ad:87:eb:b9:9d:b0:b7:00:01:65:80:eb: 22:84:e9:63:55:9f:eb:e7:33:60:ec:b2:23:a0:73:9c:6a:b2: 27:a8:7d:f5:fd:e8:7a:8e:95:d8:29:ba:f9:5c:51:41:95:0b: d3:bd:92:88:45:cc:0c:5a:0d:a9:77:c5:28:ed:cf:92:d7:b9: ce:d9:e5:3c:2d:5b:ce:d1:13:ca:58:da:dd:e9:16:c7:b5:65: 01:fa:5b:53:13:92:95:fd:07:26:24:fc:cb:d1:72:fe:33:31: 43:d1:f6:e0:4d:8b:90:f6:42:7e:d1:3b:36:25:86:96:c1:3c: 98:36:78:57 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZNc6k57y02bcd41MWZl1wAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjE0MDEwNDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzQ5Y2I0NTZiNWVkMmYxZTRiN2ZjMTU0NTJlMGNiY2E4ODU1YjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktCagbMzgJaNvlMNsrpIFybeZNxm ljo/H4ix2/yTUZJfslv9jGsIEx6UCCysRfu2R79VBd04alUpT9MeLXk05ltp7Jov QdMfCVpeywhTHAYMuJzaDLmYNvdNamu/pRS6MmSUkSRCty+45WmC5kOBR/dK7lew KDkRIDewF3B8008czcldGDwR3sFfJPN6uFvbAp68I9kKdOpJowjs+mq3XtLWYm7O 5/nflKMqX92XHB8a5kwwLFV6bzZ/F23MR6bamPWv1zYzuVJFavfyyLMY1RWkUhTc hkSPu8KS4wuQ9Dx+cKOJhQnL/zBmle59vI/LT6ittFZl4V8pvA023qE5SQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFxJy0VrXtLx5Lf8FUUuDLyohVtjMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvWEVuTFJXdGUwdkhrdF93VlJTNE12S2lGVzJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD2T2rOKk6XMbrgFB5KE 9fk2Ielk0Ab+bA/9KtTjFE11jctRlNPmMMvzJ3GRI+lBvqANoqhIaUvC7ZuNya/r Ej5GMg+5er+LdQCI8chOjqkmJeYQgwdfd0jq5VLboSuPXFa0vkDCxt/pQ7xjGZJ0 Bp2P5p0w8s2r9R4auk1rpXdqj7E1/a2H67mdsLcAAWWA6yKE6WNVn+vnM2DssiOg c5xqsieoffX96HqOldgpuvlcUUGVC9O9kohFzAxaDal3xSjtz5LXuc7Z5TwtW87R E8pY2t3pFse1ZQH6W1MTkpX9ByYk/MvRcv4zMUPR9uBNi5D2Qn7ROzYlhpbBPJg2 eFc= -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:46 2025 by rpki-client