This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3YmymjwCTi2jJFA-rDo0cHRwRU.roa File: c3YmymjwCTi2jJFA-rDo0cHRwRU.roa (raw, json) Hash identifier: htibsfc1DLaBgRyaGvHrYtOrD1FQHOXXnqqjDHhFE+8= Subject key identifier: 73:76:26:CA:68:F0:09:38:B6:8C:91:40:FA:B0:E8:D1:C1:D1:C1:15 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A0DE682029E550A9406E6E9E48684077B Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3YmymjwCTi2jJFA-rDo0cHRwRU.roa Signing time: Sat 19 Aug 2023 13:05:24 +0000 ROA not before: Sat 19 Aug 2023 13:05:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:de5:9f31/128 maxlen: 128 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:0d:e6:82:02:9e:55:0a:94:06:e6:e9:e4:86:84:07:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 19 13:05:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=737626ca68f00938b68c9140fab0e8d1c1d1c115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:9c:4a:d7:26:df:bf:31:a1:70:8f:ef:90: e7:ff:1d:ea:db:8d:b7:c3:1c:5e:1a:b5:0c:49:34: 8a:81:e5:00:b0:f8:66:24:63:61:70:99:2e:8b:58: 46:dc:ea:b1:85:1f:43:6b:7e:2d:e2:32:d8:7d:84: 46:80:a1:b0:2b:55:ca:6a:b1:ca:49:ca:fe:41:66: 28:95:90:ed:c0:18:ce:9a:de:82:bf:62:45:6c:8c: 60:d3:00:5e:94:c2:a5:78:b9:db:69:f8:21:d3:e4: df:a0:05:8a:5a:d2:22:5f:c6:bb:82:f7:7f:bd:63: ff:9c:e8:0f:21:dc:50:98:f0:e3:11:10:ef:68:fb: c7:cc:b6:f4:11:54:01:56:86:ed:42:13:75:40:d8: 8b:e7:a9:7c:a6:a5:89:ba:55:c6:17:e4:5e:b2:fb: b9:03:de:dc:43:6a:53:2d:b4:5d:2d:b6:31:b6:f6: 1a:9e:ab:49:74:a7:4f:3e:59:cf:ee:ab:1a:b0:2c: 87:29:4d:37:cd:b7:d0:e8:b3:fe:47:3c:75:21:ef: 20:af:99:a7:17:ce:34:07:29:48:66:f9:71:3f:ec: 8d:d0:24:f8:4f:d9:ad:01:c7:72:32:4f:1f:21:9e: 43:4f:a0:07:97:32:86:af:64:8a:69:3f:b8:41:9c: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:76:26:CA:68:F0:09:38:B6:8C:91:40:FA:B0:E8:D1:C1:D1:C1:15 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c3YmymjwCTi2jJFA-rDo0cHRwRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption a0:d4:0a:98:4a:01:b1:65:59:e7:a4:1f:8c:1b:e7:0d:37:7c: 05:d7:f3:b3:21:09:91:b9:ea:1e:27:fe:1f:34:4a:10:77:06: 29:0b:f7:ba:6a:a9:6e:e8:5c:39:b8:13:3d:30:1f:08:51:48: 3f:cc:d1:ac:54:fa:34:ae:b0:3b:08:8a:8a:c4:4f:11:f8:fa: 5b:4d:52:91:81:e6:6b:43:f8:1a:d6:b5:a6:06:2b:fa:74:56: c2:ed:95:5b:b5:9d:49:ec:90:6d:6c:2d:06:09:53:42:eb:95: 45:f0:45:f3:b2:66:d9:e2:7c:d7:ff:6c:b8:da:79:d3:fc:c1: b3:02:1f:ac:0c:ae:5f:db:54:ec:56:b4:a3:15:2f:f5:72:03: 9c:3e:fb:a0:b2:17:d5:ff:c9:97:42:fb:ab:fa:53:b6:ec:ab: 59:5f:5a:1e:37:95:ed:cf:1c:19:ee:87:75:0b:72:bf:a5:bb: a0:ae:f5:08:b2:d0:ed:da:8a:9a:5a:48:c4:c6:30:a4:07:c0: f9:ce:91:e6:1e:89:10:00:06:24:68:bb:6d:9e:6c:25:2a:b4: 6b:6c:44:b9:f6:06:ab:9f:ee:de:dc:2f:b3:31:5b:fd:2c:bb: 91:70:ac:c4:9a:37:f0:aa:c6:41:c3:3a:a3:9c:30:2a:19:87: a6:06:0d:fc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYoN5oICnlUKlAbm6eSGhAd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE5MTMwNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mzc2MjZjYTY4ZjAwOTM4YjY4YzkxNDBmYWIwZThkMWMxZDFjMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnScStcm378xoXCP75Dn/x3q2423 wxxeGrUMSTSKgeUAsPhmJGNhcJkui1hG3OqxhR9Da34t4jLYfYRGgKGwK1XKarHK Scr+QWYolZDtwBjOmt6Cv2JFbIxg0wBelMKleLnbafgh0+TfoAWKWtIiX8a7gvd/ vWP/nOgPIdxQmPDjERDvaPvHzLb0EVQBVobtQhN1QNiL56l8pqWJulXGF+Resvu5 A97cQ2pTLbRdLbYxtvYanqtJdKdPPlnP7qsasCyHKU03zbfQ6LP+Rzx1Ie8gr5mn F840BylIZvlxP+yN0CT4T9mtAcdyMk8fIZ5DT6AHlzKGr2SKaT+4QZxzoQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHN2Jspo8Ak4toyRQPqw6NHB0cEVMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvYzNZbXltandDVGkyakpGQS1yRG8wY0hSd1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKDUCphKAbFlWeekH4wb 5w03fAXX87MhCZG56h4n/h80ShB3BikL97pqqW7oXDm4Ez0wHwhRSD/M0axU+jSu sDsIiorETxH4+ltNUpGB5mtD+BrWtaYGK/p0VsLtlVu1nUnskG1sLQYJU0LrlUXw RfOyZtnifNf/bLjaedP8wbMCH6wMrl/bVOxWtKMVL/VyA5w++6CyF9X/yZdC+6v6 U7bsq1lfWh43le3PHBnuh3ULcr+lu6Cu9Qiy0O3aippaSMTGMKQHwPnOkeYeiRAA BiRou22ebCUqtGtsRLn2Bquf7t7cL7MxW/0su5FwrMSaN/CqxkHDOqOcMCoZh6YG Dfw= -----END CERTIFICATE-----Generated at Thu Dec 25 00:58:57 2025 by rpki-client