This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dLHdyAOQUTtYNtf8yFpfRvuYSlU.roa File: dLHdyAOQUTtYNtf8yFpfRvuYSlU.roa (raw, json) Hash identifier: O5oTnXXGVafZbRQp81fqaF0uXAZDsuu4wb8FrqjYIs8= Subject key identifier: 74:B1:DD:C8:03:90:51:3B:58:36:D7:FC:C8:5A:5F:46:FB:98:4A:55 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0186EABD697BFE9B71982C3992AD7D8CDAD6 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dLHdyAOQUTtYNtf8yFpfRvuYSlU.roa Signing time: Thu 16 Mar 2023 14:05:27 +0000 ROA not before: Thu 16 Mar 2023 14:05:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:186:eabc:7f9e/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:ea:bd:69:7b:fe:9b:71:98:2c:39:92:ad:7d:8c:da:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Mar 16 14:05:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=74b1ddc80390513b5836d7fcc85a5f46fb984a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:ba:9d:89:56:e3:f0:f4:1a:6b:4e:fb:62: 58:7d:6b:5a:c6:37:30:da:57:26:9f:2f:e9:f8:d4: 56:1d:40:86:9d:6b:cd:bf:36:8f:b3:47:7e:fd:ea: c9:7f:9e:61:06:2d:ed:40:c4:0c:6a:bd:5d:e8:71: 3a:3d:08:7b:5e:98:82:eb:2f:a3:cd:f3:01:26:b3: ec:cc:be:ad:93:f0:99:02:ab:c9:96:65:52:80:30: a5:33:b7:9c:e9:02:6f:07:98:e9:3b:e9:d1:c2:f4: f3:5a:dc:9b:8d:50:13:f5:73:77:f7:da:09:23:18: 24:36:d7:2e:b1:30:52:6f:4a:6f:9a:00:e9:92:cc: 0a:60:f7:da:15:4e:55:32:e5:7e:af:f9:3e:39:bb: 31:46:80:cd:e3:48:92:ea:bd:fd:03:22:f0:4d:0c: 9b:72:45:21:3a:51:a3:93:03:1b:09:2e:b6:f6:eb: f0:23:5c:32:b8:b3:2c:c1:81:ec:97:25:13:8a:96: 5d:e1:57:ce:a1:32:20:48:81:0a:1b:65:3a:3f:b5: 58:34:42:d6:f0:f4:4d:04:d2:ac:06:63:d1:b9:4c: 3d:07:ea:ac:8b:70:9a:26:b4:08:3a:54:91:83:2d: f4:4d:a8:51:ff:39:04:19:25:82:ac:c6:c3:53:3f: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:DD:C8:03:90:51:3B:58:36:D7:FC:C8:5A:5F:46:FB:98:4A:55 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dLHdyAOQUTtYNtf8yFpfRvuYSlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 8a:87:89:aa:48:2b:11:f6:cf:d3:e6:81:f0:e3:17:f8:c0:37: 87:61:60:05:f2:ad:90:07:7e:1a:2b:73:71:c5:1e:75:a0:b7: 52:41:28:5e:bc:1d:99:59:23:b6:05:09:8f:b1:46:64:05:bd: f4:9c:45:75:33:e7:2c:88:26:cf:b8:d4:91:72:28:83:00:8e: ae:14:f1:15:a7:75:9c:32:b1:41:12:f1:89:36:1c:cf:b0:86: df:40:22:2c:ab:4c:3a:3f:4f:1f:8c:54:f0:a4:d1:48:f3:71: 92:f2:aa:2b:04:40:10:63:84:54:53:eb:1e:79:c3:23:bd:66: df:74:7b:6c:30:67:80:7a:9f:ae:5b:99:6c:6e:47:f1:55:69: b8:e1:8b:9f:bf:db:3d:ee:ba:91:81:20:a8:da:e5:37:bb:f3: 0a:9b:a6:94:da:b4:3d:75:69:26:46:ac:f9:37:f0:eb:1a:a2: 21:3f:d1:a0:11:b1:ce:c1:f0:e5:48:7a:99:1f:9d:3c:79:9e: f5:ff:18:07:6a:39:eb:b6:4a:46:68:44:a8:d9:d9:28:63:da: 3c:00:25:07:0c:a9:f1:f9:89:0f:a3:12:4f:61:49:27:98:c7: 13:cb:bf:99:6c:24:4f:f3:69:ea:3f:b1:df:d9:48:9e:4b:70: b7:98:61:3a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYbqvWl7/ptxmCw5kq19jNrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMzE2MTQwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGIxZGRjODAzOTA1MTNiNTgzNmQ3ZmNjODVhNWY0NmZiOTg0YTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueG6nYlW4/D0GmtO+2JYfWtaxjcw 2lcmny/p+NRWHUCGnWvNvzaPs0d+/erJf55hBi3tQMQMar1d6HE6PQh7XpiC6y+j zfMBJrPszL6tk/CZAqvJlmVSgDClM7ec6QJvB5jpO+nRwvTzWtybjVAT9XN399oJ IxgkNtcusTBSb0pvmgDpkswKYPfaFU5VMuV+r/k+ObsxRoDN40iS6r39AyLwTQyb ckUhOlGjkwMbCS629uvwI1wyuLMswYHslyUTipZd4VfOoTIgSIEKG2U6P7VYNELW 8PRNBNKsBmPRuUw9B+qsi3CaJrQIOlSRgy30TahR/zkEGSWCrMbDUz9mkwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHSx3cgDkFE7WDbX/MhaX0b7mEpVMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvZExIZHlBT1FVVHRZTnRmOHlGcGZSdnVZU2xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIqHiapIKxH2z9PmgfDj F/jAN4dhYAXyrZAHfhorc3HFHnWgt1JBKF68HZlZI7YFCY+xRmQFvfScRXUz5yyI Js+41JFyKIMAjq4U8RWndZwysUES8Yk2HM+wht9AIiyrTDo/Tx+MVPCk0UjzcZLy qisEQBBjhFRT6x55wyO9Zt90e2wwZ4B6n65bmWxuR/FVabjhi5+/2z3uupGBIKja 5Te78wqbppTatD11aSZGrPk38OsaoiE/0aARsc7B8OVIepkfnTx5nvX/GAdqOeu2 SkZoRKjZ2Shj2jwAJQcMqfH5iQ+jEk9hSSeYxxPLv5lsJE/zaeo/sd/ZSJ5LcLeY YTo= -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:13 2025 by rpki-client