This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdZ2Urs1CnsLMNRGr60bFsSIIlY.roa File: bdZ2Urs1CnsLMNRGr60bFsSIIlY.roa (raw, json) Hash identifier: nbqCM9wPcGtLw55wM7bLfQkyjA1VVICW0p6EYTGvNgI= Subject key identifier: 6D:D6:76:52:BB:35:0A:7B:0B:30:D4:46:AF:AD:1B:16:C4:88:22:56 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A205B2AA15C878BFD1C591B5D53AC3619 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdZ2Urs1CnsLMNRGr60bFsSIIlY.roa Signing time: Wed 23 Aug 2023 03:06:00 +0000 ROA not before: Wed 23 Aug 2023 03:06:00 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:18a:205a:4b9b/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:20:5b:2a:a1:5c:87:8b:fd:1c:59:1b:5d:53:ac:36:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 23 03:06:00 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6dd67652bb350a7b0b30d446afad1b16c4882256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4a:dd:2c:8d:05:f4:08:7e:9c:34:1c:90:6d: 8a:b2:97:ed:45:c8:93:82:7f:79:2a:f4:4c:ef:4a: a1:37:84:84:e9:6f:40:95:74:7c:58:78:19:04:6c: c4:f6:4b:95:15:ef:fb:39:db:54:ba:09:80:f8:8b: 0f:38:5a:f0:80:50:aa:6c:e7:bb:9d:21:8a:c7:a1: d6:5e:a0:ad:97:9e:b9:68:c9:f1:47:c5:74:e0:82: 3f:e4:24:00:87:f5:26:4f:e6:92:d4:c6:fc:3e:75: 97:f4:d8:bf:a0:0c:98:b5:3e:19:aa:02:1b:c6:bd: 03:65:81:33:0b:69:29:6e:eb:9a:5f:65:49:ff:27: 0b:ff:da:8d:7b:c1:0d:9d:6d:c3:71:c4:27:90:b5: a1:56:01:94:e2:e6:2d:d5:8a:7d:6a:05:18:00:c3: 41:46:ac:ed:17:af:97:0b:3c:f2:19:f6:95:1a:12: 0c:ec:ac:0b:a6:b5:ef:0d:17:14:03:53:e5:48:18: 4b:97:b9:f4:63:05:e3:96:1d:67:21:a3:a5:d0:89: 5a:48:3d:2f:7d:67:90:a7:b9:e2:4f:e4:74:42:ff: 10:80:65:a7:1d:93:77:00:f2:6a:84:33:25:9c:0a: ed:e8:e0:82:5a:a3:54:6b:81:0c:ff:80:3e:00:c9: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:76:52:BB:35:0A:7B:0B:30:D4:46:AF:AD:1B:16:C4:88:22:56 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdZ2Urs1CnsLMNRGr60bFsSIIlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 64:48:b8:3e:d2:5c:fa:2c:82:fb:63:6c:9a:f6:0e:51:5b:2e: 7b:75:c6:c7:aa:14:67:e0:d3:f0:3a:36:7e:3a:9f:75:ce:34: 38:d8:37:35:07:16:33:9a:0c:16:ee:37:97:5d:5f:78:df:25: 1d:61:3a:22:60:b5:0b:3a:1f:8f:55:6c:f3:b5:fa:c4:bf:cc: 45:8c:90:2a:d6:05:fd:ee:f6:eb:60:61:17:6b:79:3a:c6:d7: bb:30:c7:aa:99:62:78:8f:ae:11:c1:7e:bc:7c:57:d7:5c:f3: a5:66:1c:b2:69:57:6b:c2:f6:60:55:ec:17:44:cc:72:6c:b7: ed:a0:88:38:c1:ea:c6:4b:ac:5f:a1:51:14:f8:7d:95:ae:1f: 8c:c8:97:d9:da:6a:7d:3f:29:cf:26:c8:23:6c:35:06:29:db: 6a:76:71:91:6f:a4:2c:d9:e3:a2:77:9c:52:cf:d2:27:a0:c3: f0:aa:fd:5c:8a:84:c4:f6:d9:2a:4b:82:81:db:1e:38:c1:67: d0:cb:52:a8:c6:d0:0f:9c:b7:dc:c1:3f:ca:0d:2a:d3:b8:15: d8:69:85:3a:ad:e1:36:4b:3b:a0:de:b9:1f:f9:ea:ca:cc:74: df:ee:69:5a:30:d6:3a:c3:06:e9:c6:60:f8:4e:cc:14:d0:aa: 73:a6:fd:24 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYogWyqhXIeL/RxZG11TrDYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODIzMDMwNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGQ2NzY1MmJiMzUwYTdiMGIzMGQ0NDZhZmFkMWIxNmM0ODgyMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUrdLI0F9Ah+nDQckG2KspftRciT gn95KvRM70qhN4SE6W9AlXR8WHgZBGzE9kuVFe/7OdtUugmA+IsPOFrwgFCqbOe7 nSGKx6HWXqCtl565aMnxR8V04II/5CQAh/UmT+aS1Mb8PnWX9Ni/oAyYtT4ZqgIb xr0DZYEzC2kpbuuaX2VJ/ycL/9qNe8ENnW3DccQnkLWhVgGU4uYt1Yp9agUYAMNB RqztF6+XCzzyGfaVGhIM7KwLprXvDRcUA1PlSBhLl7n0YwXjlh1nIaOl0IlaSD0v fWeQp7niT+R0Qv8QgGWnHZN3APJqhDMlnArt6OCCWqNUa4EM/4A+AMl/XwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG3WdlK7NQp7CzDURq+tGxbEiCJWMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvYmRaMlVyczFDbnNMTU5SR3I2MGJGc1NJSWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGRIuD7SXPosgvtjbJr2 DlFbLnt1xseqFGfg0/A6Nn46n3XONDjYNzUHFjOaDBbuN5ddX3jfJR1hOiJgtQs6 H49VbPO1+sS/zEWMkCrWBf3u9utgYRdreTrG17swx6qZYniPrhHBfrx8V9dc86Vm HLJpV2vC9mBV7BdEzHJst+2giDjB6sZLrF+hURT4fZWuH4zIl9naan0/Kc8myCNs NQYp22p2cZFvpCzZ46J3nFLP0iegw/Cq/VyKhMT22SpLgoHbHjjBZ9DLUqjG0A+c t9zBP8oNKtO4FdhphTqt4TZLO6DeuR/56srMdN/uaVow1jrDBunGYPhOzBTQqnOm /SQ= -----END CERTIFICATE-----Generated at Fri Dec 26 07:48:19 2025 by rpki-client