This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hXAbLMrWZBFsaAYNNZCEklK9zqs.roa File: hXAbLMrWZBFsaAYNNZCEklK9zqs.roa (raw, json) Hash identifier: Qil72ot2v0MRe7QxXvg6CXWk9nZ4eeM+mq3pRKXDvg4= Subject key identifier: 85:70:1B:2C:CA:D6:64:11:6C:68:06:0D:35:90:84:92:52:BD:CE:AB Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018644A8088271AC042340A83D4C534A8730 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hXAbLMrWZBFsaAYNNZCEklK9zqs.roa Signing time: Sun 12 Feb 2023 08:05:08 +0000 ROA not before: Sun 12 Feb 2023 08:05:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:44a7:2cb1/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:44:a8:08:82:71:ac:04:23:40:a8:3d:4c:53:4a:87:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 12 08:05:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=85701b2ccad664116c68060d3590849252bdceab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:41:25:4d:d2:f4:e0:22:3b:35:98:e5:9b: fc:b8:1d:82:2a:0b:d0:d0:64:37:c2:a4:8c:b9:60: 6c:93:89:ae:79:fc:cb:36:3d:ba:52:24:4e:79:e0: 63:f5:97:f2:3a:63:89:82:e6:10:83:58:fb:75:b2: 14:8f:ad:4b:d0:9b:6d:03:e0:e1:ef:78:f2:1b:b7: 19:f6:94:f6:31:96:c2:ec:27:82:30:eb:cc:22:65: c8:c5:10:cc:7f:13:1d:82:92:e2:d7:0c:bb:57:55: 62:3f:6a:31:ff:d3:ab:df:6c:3a:34:b5:fd:d0:f1: 13:37:a6:0f:2c:49:a9:24:90:99:f7:ee:55:10:f3: a6:19:8e:1b:93:14:0f:36:a1:ca:86:5d:cb:de:8f: 4d:3d:36:69:6c:e8:54:bf:6f:01:96:60:05:da:8d: 39:57:10:32:a8:ad:8d:3e:e6:89:f6:59:16:0d:b7: 78:ba:9a:83:a6:84:b3:3b:53:9c:0d:e5:0c:21:f1: 9c:86:f9:43:9f:c1:ec:61:d6:16:0b:f5:2f:3d:31: 1e:1e:6b:d3:91:e4:60:59:04:47:f0:a9:fd:ee:fd: 79:a3:cd:07:e0:01:25:01:c7:6a:fd:bd:de:19:69: 42:0b:ad:62:77:b2:5f:c0:1d:10:99:fd:fc:5f:61: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:1B:2C:CA:D6:64:11:6C:68:06:0D:35:90:84:92:52:BD:CE:AB X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hXAbLMrWZBFsaAYNNZCEklK9zqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 3a:05:e7:5b:77:59:f6:fe:c6:77:75:1e:a2:97:a5:7a:42:9c: 78:aa:3a:90:56:86:fb:9a:d7:38:e6:45:bb:33:36:94:fa:98: bc:49:df:4e:25:cd:96:2f:76:61:e0:5c:7a:38:93:4f:65:1a: 2b:49:08:d8:d7:f0:d9:c1:74:e8:02:63:38:ad:29:a8:30:16: 54:38:d1:dd:89:ed:d0:8d:b5:48:df:cb:81:e8:4d:6d:36:d7: c1:96:65:34:30:47:7d:39:b9:35:4b:ab:f2:03:7f:97:a8:75: a5:e9:ee:8c:fe:3a:90:0d:35:2a:f9:aa:19:02:b1:37:a3:08: c1:b0:c8:17:6e:53:89:77:1a:9d:58:6b:92:9c:47:4a:ad:0b: 66:3b:4b:7e:bd:e3:11:4f:14:06:7c:14:11:33:d1:ab:17:1a: be:91:a4:de:4b:de:83:8e:99:64:fd:71:32:78:c1:0e:54:6d: 0d:2e:04:56:0e:4d:f2:21:17:64:61:d0:21:e3:61:e1:4d:f1: 75:9c:10:55:59:d9:94:87:6f:4d:b5:be:cb:88:ca:ec:ec:cb: f6:ab:50:c6:dd:6d:b3:28:45:f7:c5:6f:87:e0:8d:24:31:74: 01:19:f6:0f:89:77:b4:9c:c8:f7:b5:ea:7b:1a:20:ed:42:6c: 61:04:8a:c9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYZEqAiCcawEI0CoPUxTSocwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjEyMDgwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTcwMWIyY2NhZDY2NDExNmM2ODA2MGQzNTkwODQ5MjUyYmRjZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwNBJU3S9OAiOzWY5Zv8uB2CKgvQ 0GQ3wqSMuWBsk4muefzLNj26UiROeeBj9ZfyOmOJguYQg1j7dbIUj61L0JttA+Dh 73jyG7cZ9pT2MZbC7CeCMOvMImXIxRDMfxMdgpLi1wy7V1ViP2ox/9Or32w6NLX9 0PETN6YPLEmpJJCZ9+5VEPOmGY4bkxQPNqHKhl3L3o9NPTZpbOhUv28BlmAF2o05 VxAyqK2NPuaJ9lkWDbd4upqDpoSzO1OcDeUMIfGchvlDn8HsYdYWC/UvPTEeHmvT keRgWQRH8Kn97v15o80H4AElAcdq/b3eGWlCC61id7JfwB0Qmf38X2EedwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIVwGyzK1mQRbGgGDTWQhJJSvc6rMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvaFhBYkxNcldaQkZzYUFZTk5aQ0VrbEs5enFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADoF51t3Wfb+xnd1HqKX pXpCnHiqOpBWhvua1zjmRbszNpT6mLxJ304lzZYvdmHgXHo4k09lGitJCNjX8NnB dOgCYzitKagwFlQ40d2J7dCNtUjfy4HoTW0218GWZTQwR305uTVLq/IDf5eodaXp 7oz+OpANNSr5qhkCsTejCMGwyBduU4l3Gp1Ya5KcR0qtC2Y7S3694xFPFAZ8FBEz 0asXGr6RpN5L3oOOmWT9cTJ4wQ5UbQ0uBFYOTfIhF2Rh0CHjYeFN8XWcEFVZ2ZSH b021vsuIyuzsy/arUMbdbbMoRffFb4fgjSQxdAEZ9g+Jd7ScyPe16nsaIO1CbGEE isk= -----END CERTIFICATE-----Generated at Sun Dec 28 23:40:56 2025 by rpki-client