This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iW6ZBjwO_qSgG3xuMuoQL4rMBx4.roa File: iW6ZBjwO_qSgG3xuMuoQL4rMBx4.roa (raw, json) Hash identifier: cNdsULiGk4ctuDzrtF4Qt+RMTbuebOhrjBCsAzHOv+o= Subject key identifier: 89:6E:99:06:3C:0E:FE:A4:A0:1B:7C:6E:32:EA:10:2F:8A:CC:07:1E Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018934883D36525F1B12D014D171C597F5BE Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iW6ZBjwO_qSgG3xuMuoQL4rMBx4.roa Signing time: Sat 08 Jul 2023 08:04:51 +0000 ROA not before: Sat 08 Jul 2023 08:04:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:189:3488:13b5/128 maxlen: 128 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:34:88:3d:36:52:5f:1b:12:d0:14:d1:71:c5:97:f5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 8 08:04:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=896e99063c0efea4a01b7c6e32ea102f8acc071e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:1b:9e:2d:4d:c6:74:1d:6d:b7:a3:6a:15: 30:01:18:67:08:8a:10:3c:d7:7e:42:e5:59:72:33: 1e:da:cf:91:fd:c8:d0:0d:b6:3d:89:6b:81:e1:2e: 94:f8:4b:53:ba:fc:f1:f8:29:2f:a4:22:24:a8:ef: 13:bc:6a:94:e7:e2:06:b6:93:1b:c0:1e:e5:05:67: 8a:35:69:6f:38:df:8d:52:24:97:59:d5:ea:67:54: ab:a4:6b:95:dd:56:de:9d:55:c5:07:37:9d:ce:d2: 1a:df:a6:98:78:a5:f9:3d:ea:bc:8f:7a:da:69:3f: d4:bd:c6:82:32:07:71:04:b9:af:b9:77:c6:9d:0d: 4c:4b:40:0a:c8:e2:89:be:66:de:d8:68:12:27:94: 1d:c8:a9:07:5f:89:50:6c:9c:c1:1d:52:af:5e:e8: a0:6d:eb:7d:af:26:e5:43:8b:d5:e8:2d:37:45:7c: cf:2e:14:33:c2:8b:8f:ab:f5:02:bc:84:3a:e0:a5: a1:dd:7e:0f:ed:27:5b:27:f6:c8:46:9a:2d:d5:71: 47:7d:81:1f:d3:51:69:d4:c6:03:50:0b:4f:e8:e6: e7:9a:47:a0:f9:56:cb:23:4d:6a:03:de:e3:68:5e: 1b:27:a9:1c:90:04:ec:86:ff:55:af:70:45:4d:ac: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6E:99:06:3C:0E:FE:A4:A0:1B:7C:6E:32:EA:10:2F:8A:CC:07:1E X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iW6ZBjwO_qSgG3xuMuoQL4rMBx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 6c:56:86:c4:80:f5:ef:99:bb:09:28:8d:67:a9:9f:3c:ea:c6: fc:5a:cb:cd:92:37:ee:8c:81:29:fd:66:8b:35:f8:30:d3:40: 06:77:d2:80:10:c1:70:1f:62:19:cb:19:a9:1f:1e:da:06:c3: 57:e5:31:73:93:28:f9:64:d6:fd:5d:0c:31:dd:93:46:35:f3: 27:ab:5a:86:74:84:c1:61:7e:8b:f2:33:81:54:15:1d:e6:85: 14:02:8f:ad:6d:f3:ae:4f:6f:db:bb:c4:10:9e:0b:a2:a7:76: e8:22:67:ed:29:4e:4b:f9:1d:00:cd:21:1b:6b:ea:5b:46:29: 05:84:72:bc:17:9d:48:cd:aa:3f:2e:7f:bf:ad:bc:c4:bd:2a: e4:4f:97:c2:2e:d1:c1:7b:db:b1:53:3a:0b:85:8b:01:b9:71: a4:92:f9:a7:93:21:86:e8:a4:1c:76:67:fc:a7:a2:7f:c7:ff: 22:06:10:c5:9c:c7:74:72:f5:bc:b2:25:02:e3:8d:c4:07:62: 57:38:3e:e5:0e:e5:d2:31:95:c8:73:28:80:a9:68:17:78:ea: bf:d7:2d:fc:08:c3:91:65:7c:c6:f0:ce:a0:c6:16:61:ad:9e: 07:cc:1a:05:71:1a:de:f8:a7:89:78:6d:cf:a1:fe:45:0a:70: 8d:e7:7b:88 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYk0iD02Ul8bEtAU0XHFl/W+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNzA4MDgwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTZlOTkwNjNjMGVmZWE0YTAxYjdjNmUzMmVhMTAyZjhhY2MwNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gkbni1NxnQdbbejahUwARhnCIoQ PNd+QuVZcjMe2s+R/cjQDbY9iWuB4S6U+EtTuvzx+CkvpCIkqO8TvGqU5+IGtpMb wB7lBWeKNWlvON+NUiSXWdXqZ1SrpGuV3VbenVXFBzedztIa36aYeKX5Peq8j3ra aT/UvcaCMgdxBLmvuXfGnQ1MS0AKyOKJvmbe2GgSJ5QdyKkHX4lQbJzBHVKvXuig bet9ryblQ4vV6C03RXzPLhQzwouPq/UCvIQ64KWh3X4P7SdbJ/bIRpot1XFHfYEf 01Fp1MYDUAtP6Obnmkeg+VbLI01qA97jaF4bJ6kckATshv9Vr3BFTawY5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIlumQY8Dv6koBt8bjLqEC+KzAceMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvaVc2WkJqd09fcVNnRzN4dU11b1FMNHJNQng0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGxWhsSA9e+ZuwkojWep nzzqxvxay82SN+6MgSn9Zos1+DDTQAZ30oAQwXAfYhnLGakfHtoGw1flMXOTKPlk 1v1dDDHdk0Y18yerWoZ0hMFhfovyM4FUFR3mhRQCj61t865Pb9u7xBCeC6Kndugi Z+0pTkv5HQDNIRtr6ltGKQWEcrwXnUjNqj8uf7+tvMS9KuRPl8Iu0cF727FTOguF iwG5caSS+aeTIYbopBx2Z/ynon/H/yIGEMWcx3Ry9byyJQLjjcQHYlc4PuUO5dIx lchzKICpaBd46r/XLfwIw5FlfMbwzqDGFmGtngfMGgVxGt74p4l4bc+h/kUKcI3n e4g= -----END CERTIFICATE-----Generated at Thu Dec 25 12:49:49 2025 by rpki-client