This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i5aLUWewosMqkoOw-MiGH2MZI30.roa File: i5aLUWewosMqkoOw-MiGH2MZI30.roa (raw, json) Hash identifier: cNB/MFqvdSZIhlpDP6S0vZkx7DYZlhfUjIib0wgTi3U= Subject key identifier: 8B:96:8B:51:67:B0:A2:C3:2A:92:83:B0:F8:C8:86:1F:63:19:23:7D Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01889B1CA6E859FFDE4EF590FAC3609D26E1 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i5aLUWewosMqkoOw-MiGH2MZI30.roa Signing time: Thu 08 Jun 2023 13:05:26 +0000 ROA not before: Thu 08 Jun 2023 13:05:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:188:9b1b:bc4e/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:9b:1c:a6:e8:59:ff:de:4e:f5:90:fa:c3:60:9d:26:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jun 8 13:05:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=8b968b5167b0a2c32a9283b0f8c8861f6319237d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:d9:2f:d7:ea:de:aa:e7:9a:3a:f8:35:91: 69:6e:48:cd:d2:52:2a:da:42:f5:ea:f3:d2:f6:00: 94:5a:8d:c2:b5:1e:ec:2b:d0:bb:e2:e9:0c:67:f8: 28:10:6c:f8:96:07:8d:d9:23:b2:e5:cb:eb:27:5d: b2:8e:c0:fd:3c:22:f1:aa:a4:27:9e:72:54:0a:3c: ac:ad:ea:78:d0:f2:5b:10:68:a2:78:f2:c4:f8:81: 03:ba:90:84:0b:ef:9f:c1:cf:34:35:d6:ce:18:5c: 55:09:85:01:07:54:12:29:2c:f9:6f:6e:ea:b2:c3: 1b:e3:a9:88:9d:2c:52:e3:35:7e:f0:e9:0b:e2:37: ef:2f:f8:26:e4:a1:ad:49:de:37:1b:f9:dc:13:76: 32:3b:99:e6:00:ca:22:90:b6:bd:d6:7d:8e:8d:e6: 45:11:72:b7:cd:77:19:d5:bf:dc:16:db:1c:e0:5e: e3:c3:74:a5:b6:81:01:87:ff:27:6f:f7:08:01:98: fc:6d:c8:2e:02:25:c3:5a:58:38:fe:e5:7d:e9:cc: 69:38:c4:e6:43:67:79:82:7c:f2:36:91:81:91:e2: b6:46:eb:31:2f:37:b2:58:47:b2:a1:09:a0:ca:7e: ca:66:d4:a4:83:08:3d:78:00:7f:c9:2d:1d:cc:d7: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:96:8B:51:67:B0:A2:C3:2A:92:83:B0:F8:C8:86:1F:63:19:23:7D X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i5aLUWewosMqkoOw-MiGH2MZI30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 0e:88:5b:5d:5a:70:48:6e:5a:39:34:50:ef:cf:1b:aa:02:05: 3f:1d:73:80:40:e4:4c:8c:22:2c:34:2c:0a:b6:e8:bd:c6:57: 79:22:33:2e:90:9c:7b:87:d8:b1:a8:55:2e:6e:d2:d1:9c:f1: 2b:b8:6e:ae:ad:a5:e7:16:13:b2:76:91:f2:86:4c:20:a7:a6: fb:2d:f6:9c:f2:74:c7:09:a8:b6:81:4a:ad:27:3e:38:83:6d: 01:5e:40:77:92:1b:69:21:71:0d:f4:a4:6c:39:fd:52:f3:a2: cf:96:a8:66:b7:c7:45:3d:b5:a1:fb:25:ac:ff:8f:49:b3:06: 15:00:63:5b:52:1b:85:d2:82:2d:67:27:c9:ea:16:22:40:70: fb:a7:d8:90:96:38:2b:14:1e:b1:b6:9d:77:36:d7:88:d6:d0: 97:1b:ad:bf:94:ba:c9:e2:af:91:4b:29:bb:46:7c:13:5a:b7: 14:ca:66:82:92:55:04:36:cd:1d:d9:1c:92:c7:44:1d:c5:19: 30:bb:3a:44:61:22:39:d8:69:0b:1e:e7:96:d0:42:4a:df:f4: fa:c0:d1:1f:7f:4d:b8:bd:96:93:4d:4a:e3:3a:32:91:04:d1: d3:32:ee:0f:ac:ab:77:a1:9c:1f:8d:df:a7:ea:38:b2:eb:f1: ee:0e:29:fa -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYibHKboWf/eTvWQ+sNgnSbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNjA4MTMwNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjk2OGI1MTY3YjBhMmMzMmE5MjgzYjBmOGM4ODYxZjYzMTkyMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWrZL9fq3qrnmjr4NZFpbkjN0lIq 2kL16vPS9gCUWo3CtR7sK9C74ukMZ/goEGz4lgeN2SOy5cvrJ12yjsD9PCLxqqQn nnJUCjysrep40PJbEGiiePLE+IEDupCEC++fwc80NdbOGFxVCYUBB1QSKSz5b27q ssMb46mInSxS4zV+8OkL4jfvL/gm5KGtSd43G/ncE3YyO5nmAMoikLa91n2OjeZF EXK3zXcZ1b/cFtsc4F7jw3SltoEBh/8nb/cIAZj8bcguAiXDWlg4/uV96cxpOMTm Q2d5gnzyNpGBkeK2RusxLzeyWEeyoQmgyn7KZtSkgwg9eAB/yS0dzNcNiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIuWi1FnsKLDKpKDsPjIhh9jGSN9MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvaTVhTFVXZXdvc01xa29Pdy1NaUdIMk1aSTMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA6IW11acEhuWjk0UO/P G6oCBT8dc4BA5EyMIiw0LAq26L3GV3kiMy6QnHuH2LGoVS5u0tGc8Su4bq6tpecW E7J2kfKGTCCnpvst9pzydMcJqLaBSq0nPjiDbQFeQHeSG2khcQ30pGw5/VLzos+W qGa3x0U9taH7Jaz/j0mzBhUAY1tSG4XSgi1nJ8nqFiJAcPun2JCWOCsUHrG2nXc2 14jW0Jcbrb+Uusnir5FLKbtGfBNatxTKZoKSVQQ2zR3ZHJLHRB3FGTC7OkRhIjnY aQse55bQQkrf9PrA0R9/Tbi9lpNNSuM6MpEE0dMy7g+sq3ehnB+N36fqOLLr8e4O Kfo= -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:59 2025 by rpki-client