This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpSkDrvFV-leh0VavUCpT5_xiI8.roa File: cpSkDrvFV-leh0VavUCpT5_xiI8.roa (raw, json) Hash identifier: NlgEJZiNLy9IcG3Onq5zAY5zBgQUdv97YK/F7JifMa8= Subject key identifier: 72:94:A4:0E:BB:C5:57:E9:5E:87:45:5A:BD:40:A9:4F:9F:F1:88:8F Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189FF852C340131BDBAC549F03C1FA123D1 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpSkDrvFV-leh0VavUCpT5_xiI8.roa Signing time: Wed 16 Aug 2023 18:04:24 +0000 ROA not before: Wed 16 Aug 2023 18:04:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:189:ff85:2694/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:ff:85:2c:34:01:31:bd:ba:c5:49:f0:3c:1f:a1:23:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 16 18:04:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=7294a40ebbc557e95e87455abd40a94f9ff1888f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:ad:45:66:7f:dd:ae:02:82:f4:1b:0b:70: 91:fd:84:6f:b7:e4:ea:68:20:64:3f:d6:24:76:cf: ee:04:4c:28:2e:af:4d:49:6f:46:9c:df:f1:84:c6: 00:b6:c0:28:2e:32:cf:a0:86:41:c6:93:82:a2:50: a9:62:de:32:60:0e:33:9f:0c:cd:ec:c6:79:78:09: c2:94:64:70:9b:a8:bd:9e:ed:d7:64:ff:ae:92:4e: 07:96:15:11:45:23:c4:85:46:83:ef:4f:d3:76:46: 9d:2f:82:d1:ff:e0:fd:d5:96:ac:d1:25:4b:30:ad: f4:f5:d1:85:9e:b7:9a:cd:5c:ab:e5:c2:74:12:d1: f4:9e:86:5a:a3:96:3f:eb:29:e2:f5:11:ec:df:ba: d3:f7:b0:2f:9c:c3:97:1c:72:20:75:6e:de:13:a3: 87:38:ea:50:58:4f:a8:a1:aa:82:b3:05:ca:22:ec: db:39:66:40:9a:9c:d9:91:93:99:a2:1a:eb:05:95: 0e:74:b7:38:5e:97:7a:00:31:49:96:97:58:94:c2: 45:01:c3:7a:db:74:56:bc:4d:06:ed:ea:85:ea:36: bb:58:27:84:93:88:4c:c2:76:de:aa:ed:3d:68:43: b6:86:70:84:b8:2c:7f:c7:7c:fb:30:e1:ac:26:dc: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:A4:0E:BB:C5:57:E9:5E:87:45:5A:BD:40:A9:4F:9F:F1:88:8F X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpSkDrvFV-leh0VavUCpT5_xiI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption b2:3d:c1:7c:cd:a8:cc:7c:eb:46:fa:65:0e:13:2c:90:98:c1: 82:3d:36:b1:ee:8c:e6:40:6a:7f:70:51:24:fe:4b:21:19:26: f3:ae:23:e5:f7:8f:ef:8a:9d:5f:06:43:f9:28:c9:e3:60:12: 99:43:90:d3:d8:54:d4:de:16:56:93:35:a3:ac:a3:54:e7:76: 28:bb:42:f2:5c:cc:34:b6:c2:7f:b8:a8:c2:4e:17:36:cc:b8: a9:b7:fe:d5:db:7e:ae:60:43:fb:e2:46:e2:d0:10:85:e8:bd: 41:56:a1:68:6d:68:c9:c6:67:fa:69:58:35:bd:22:e9:b5:26: 38:5c:ef:81:cc:95:41:8c:d0:c8:54:9d:85:8d:30:e1:0b:8f: e5:e3:bc:35:fd:d2:80:91:0c:60:12:a9:28:c9:db:d3:65:40: 93:67:8f:02:45:cc:25:54:d4:40:21:42:6d:74:ae:c4:b1:55: 31:8b:39:51:b1:86:28:a4:69:b6:a4:a9:98:3f:63:c2:be:6e: 17:50:63:15:17:a6:3b:74:d8:1d:43:34:2d:01:bb:1d:db:ed: e7:22:e7:48:22:c4:7c:ce:68:ee:af:67:85:9c:ad:8c:4f:90: 9c:d9:48:8f:8e:02:e3:ac:52:41:af:09:e1:0d:ca:a0:ea:a1: 94:ff:58:95 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYn/hSw0ATG9usVJ8DwfoSPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODE2MTgwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjk0YTQwZWJiYzU1N2U5NWU4NzQ1NWFiZDQwYTk0ZjlmZjE4ODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAetRWZ/3a4CgvQbC3CR/YRvt+Tq aCBkP9Ykds/uBEwoLq9NSW9GnN/xhMYAtsAoLjLPoIZBxpOColCpYt4yYA4znwzN 7MZ5eAnClGRwm6i9nu3XZP+ukk4HlhURRSPEhUaD70/TdkadL4LR/+D91Zas0SVL MK309dGFnreazVyr5cJ0EtH0noZao5Y/6yni9RHs37rT97AvnMOXHHIgdW7eE6OH OOpQWE+ooaqCswXKIuzbOWZAmpzZkZOZohrrBZUOdLc4Xpd6ADFJlpdYlMJFAcN6 23RWvE0G7eqF6ja7WCeEk4hMwnbequ09aEO2hnCEuCx/x3z7MOGsJtzsnwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHKUpA67xVfpXodFWr1AqU+f8YiPMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvY3BTa0RydkZWLWxlaDBWYXZVQ3BUNV94aUk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALI9wXzNqMx860b6ZQ4T LJCYwYI9NrHujOZAan9wUST+SyEZJvOuI+X3j++KnV8GQ/koyeNgEplDkNPYVNTe FlaTNaOso1Tndii7QvJczDS2wn+4qMJOFzbMuKm3/tXbfq5gQ/viRuLQEIXovUFW oWhtaMnGZ/ppWDW9Ium1Jjhc74HMlUGM0MhUnYWNMOELj+XjvDX90oCRDGASqSjJ 29NlQJNnjwJFzCVU1EAhQm10rsSxVTGLOVGxhiikabakqZg/Y8K+bhdQYxUXpjt0 2B1DNC0Bux3b7eci50gixHzOaO6vZ4WcrYxPkJzZSI+OAuOsUkGvCeENyqDqoZT/ WJU= -----END CERTIFICATE-----Generated at Mon Jan 12 13:49:22 2026 by rpki-client