This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YHXh3ZUCbqcJ0d8Ot21hSbhRsyY.roa File: YHXh3ZUCbqcJ0d8Ot21hSbhRsyY.roa (raw, json) Hash identifier: 0IIyhHRFu4qzvzV4pSnuro3Lz7iBTRCV349zjjY0mT4= Subject key identifier: 60:75:E1:DD:95:02:6E:A7:09:D1:DF:0E:B7:6D:61:49:B8:51:B3:26 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01861E7BB803CE3E196901424CCD6708EC6A Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YHXh3ZUCbqcJ0d8Ot21hSbhRsyY.roa Signing time: Sat 04 Feb 2023 22:11:09 +0000 ROA not before: Sat 04 Feb 2023 22:11:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:1e:7b:b8:03:ce:3e:19:69:01:42:4c:cd:67:08:ec:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 4 22:11:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6075e1dd95026ea709d1df0eb76d6149b851b326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:ef:09:a5:ce:ed:2e:32:0c:bb:4d:b4:3b: fb:91:e2:ec:ea:1b:b2:58:8e:ba:e2:48:57:59:53: 08:1d:79:67:f2:ad:87:d5:85:26:b7:e5:77:b8:d5: 51:96:45:a8:af:6f:c7:59:06:cd:a6:f7:a4:17:60: ce:2e:1e:dc:0f:ce:59:17:68:9f:0b:05:7d:33:18: 05:5a:d0:82:21:1e:45:1b:55:94:e8:84:a7:bb:d1: 19:50:63:1f:b2:e3:27:de:5e:55:e6:41:c8:b1:16: fe:1c:37:36:d4:23:af:00:a0:08:07:c7:ba:3a:02: fb:6e:31:ec:5d:25:1c:68:f7:f9:fd:5d:c0:fa:dd: fd:36:09:a2:64:11:79:2b:bb:4f:37:d5:e1:e5:a4: aa:7d:fd:ba:20:e4:1c:ce:70:55:7c:5d:fa:d9:79: 94:8d:ad:f1:c0:41:f4:9c:66:c8:80:1d:01:25:b8: 40:7e:ff:d7:14:36:67:64:d3:f4:04:74:66:f9:5c: 37:ca:69:d0:59:aa:d8:25:90:7e:42:0d:c6:9a:7e: 74:11:58:dc:21:c0:a2:ac:ae:96:46:42:b5:c3:39: 85:24:25:a8:84:48:df:8f:d3:05:ca:e9:64:b6:7b: cb:72:6c:49:8b:57:bc:cb:40:cf:8b:49:53:2b:02: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:75:E1:DD:95:02:6E:A7:09:D1:DF:0E:B7:6D:61:49:B8:51:B3:26 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YHXh3ZUCbqcJ0d8Ot21hSbhRsyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 1d:11:74:c2:1c:2c:d6:a8:a7:e2:55:c3:fc:e3:b2:bd:c7:01: 8b:06:7b:ff:5d:62:08:0a:07:46:45:e4:a5:18:92:77:21:0c: b8:b3:18:39:43:6b:b1:6b:24:41:b7:7a:22:03:f4:10:21:12: 86:47:72:45:1f:85:f3:c5:3e:19:e8:a3:ed:fb:f2:e5:be:35: e8:f2:19:1f:8d:92:1f:2f:cb:20:1f:0f:62:a8:fe:77:ac:f7: dd:f8:82:4c:dc:ea:3b:26:be:3d:e9:00:f8:b8:f9:d7:d7:6e: ab:77:14:06:bb:49:68:53:66:da:41:00:86:88:be:44:61:c9: 94:26:41:08:23:7a:7a:a1:01:43:d1:15:08:8e:9d:0b:6f:24: 08:ed:e3:af:cc:95:2d:d5:99:d4:b0:6c:60:1f:7c:52:c9:bd: be:af:24:85:36:fd:5c:7c:30:43:71:b9:3f:58:d6:15:4e:71: 5d:99:23:08:32:a5:7f:1f:2f:39:3e:8e:b9:dd:7e:2b:2a:e8: 24:5f:4e:36:1f:ba:8c:87:66:13:42:95:ac:23:89:4a:6b:93: 4d:f9:ac:ee:45:9e:af:01:0e:43:01:fc:5b:bb:c4:e0:12:11: c1:72:85:dc:01:41:d5:1c:49:5d:12:52:65:bf:49:e1:24:2b: 05:a4:2e:e1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYYee7gDzj4ZaQFCTM1nCOxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjA0MjIxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDc1ZTFkZDk1MDI2ZWE3MDlkMWRmMGViNzZkNjE0OWI4NTFiMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8HvCaXO7S4yDLtNtDv7keLs6huy WI664khXWVMIHXln8q2H1YUmt+V3uNVRlkWor2/HWQbNpvekF2DOLh7cD85ZF2if CwV9MxgFWtCCIR5FG1WU6ISnu9EZUGMfsuMn3l5V5kHIsRb+HDc21COvAKAIB8e6 OgL7bjHsXSUcaPf5/V3A+t39NgmiZBF5K7tPN9Xh5aSqff26IOQcznBVfF362XmU ja3xwEH0nGbIgB0BJbhAfv/XFDZnZNP0BHRm+Vw3ymnQWarYJZB+Qg3Gmn50EVjc IcCirK6WRkK1wzmFJCWohEjfj9MFyulktnvLcmxJi1e8y0DPi0lTKwKQcQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGB14d2VAm6nCdHfDrdtYUm4UbMmMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvWUhYaDNaVUNicWNKMGQ4T3QyMWhTYmhSc3lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB0RdMIcLNaop+JVw/zj sr3HAYsGe/9dYggKB0ZF5KUYknchDLizGDlDa7FrJEG3eiID9BAhEoZHckUfhfPF Phnoo+378uW+NejyGR+Nkh8vyyAfD2Ko/nes9934gkzc6jsmvj3pAPi4+dfXbqt3 FAa7SWhTZtpBAIaIvkRhyZQmQQgjenqhAUPRFQiOnQtvJAjt46/MlS3VmdSwbGAf fFLJvb6vJIU2/Vx8MENxuT9Y1hVOcV2ZIwgypX8fLzk+jrndfisq6CRfTjYfuoyH ZhNClawjiUprk035rO5Fnq8BDkMB/Fu7xOASEcFyhdwBQdUcSV0SUmW/SeEkKwWk LuE= -----END CERTIFICATE-----Generated at Mon Jan 12 22:14:40 2026 by rpki-client