This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQDjnQqvjGaRGqWs30LQN5xw9Ok.roa File: lQDjnQqvjGaRGqWs30LQN5xw9Ok.roa (raw, json) Hash identifier: 8OJjFYLskRSN7Qs2QiwhbLEjLQHD+ZePMRVp1s/uDzU= Subject key identifier: 95:00:E3:9D:0A:AF:8C:66:91:1A:A5:AC:DF:42:D0:37:9C:70:F4:E9 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 018A3B2DEB28C756847ACE832635EC1CE471 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQDjnQqvjGaRGqWs30LQN5xw9Ok.roa Signing time: Mon 28 Aug 2023 08:06:19 +0000 ROA not before: Mon 28 Aug 2023 08:06:19 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18a:3b2d:21e/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:3b:2d:eb:28:c7:56:84:7a:ce:83:26:35:ec:1c:e4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 28 08:06:19 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=9500e39d0aaf8c66911aa5acdf42d0379c70f4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:c0:97:2c:23:b0:29:c4:ce:cd:42:5b:92: 09:d1:9f:c2:03:e4:af:f3:7c:52:1f:5d:94:0d:94: 03:18:8d:e6:99:bc:69:1c:2e:0f:a7:cd:8c:a3:fb: a1:3c:29:07:ca:a6:8a:be:5c:d3:d0:26:3f:27:d5: 8d:33:d2:7a:8e:e5:a8:56:aa:56:43:57:fb:55:67: 79:c1:36:ff:3a:d6:e5:09:06:80:d4:2c:11:9e:f9: 8d:84:59:fe:6d:13:97:7e:4b:f7:67:7d:af:3d:22: 7f:7d:04:b8:b2:1e:7e:99:a0:a9:65:51:b1:92:1f: d0:b6:73:8f:43:0b:36:de:14:84:34:59:3e:22:3b: 63:ef:26:25:01:aa:38:f5:b2:e4:a5:f0:7e:62:df: 7f:60:fd:66:fe:70:a5:02:37:f4:cb:06:85:34:50: d8:3c:93:d2:a7:e8:0a:d7:a5:e0:21:a3:d7:5b:30: e3:93:5b:93:05:91:77:7c:e9:c9:f1:ad:25:f3:bd: 59:fc:68:aa:79:bc:12:72:ec:b1:2d:0e:fb:97:ce: 9f:39:cc:73:68:f6:2f:6b:28:96:20:18:e5:23:8b: f4:96:ed:65:59:5a:d6:3d:9c:3b:b6:c9:fe:a6:ce: 3e:4c:e1:c5:e2:27:d5:1c:1e:3c:2a:f7:e7:20:55: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:00:E3:9D:0A:AF:8C:66:91:1A:A5:AC:DF:42:D0:37:9C:70:F4:E9 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQDjnQqvjGaRGqWs30LQN5xw9Ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 45:de:8c:ac:68:1a:ac:d2:0a:e2:0b:c6:cd:bb:bb:43:50:24: 9c:8c:9a:91:63:97:c7:1d:73:48:17:05:dc:0d:75:27:36:22: 76:63:7c:44:35:e9:4e:ce:d5:0d:d7:c9:96:51:0a:7d:1b:98: 64:10:f7:5a:76:94:8e:75:ca:11:93:1a:49:ad:dd:d1:5f:4b: 1b:3e:32:35:09:d9:b1:59:45:c1:fa:32:08:3d:ef:ab:2a:bf: 66:7c:b5:72:3e:70:db:b7:b4:5c:b4:b0:94:8b:60:0e:f5:52: 39:8e:6a:48:91:a6:c3:0e:4b:aa:f2:9e:60:0a:38:7d:d1:7b: fc:77:ea:95:94:f7:c4:3a:5f:d5:b0:85:70:79:f8:a8:fe:86: b4:33:67:8d:f6:99:60:1d:9c:af:c9:ed:9a:0a:b5:54:fc:32: 9e:2f:24:cc:5c:21:d1:eb:14:c4:e8:74:db:e1:11:12:51:25: ee:86:b8:15:09:e8:e8:c1:7c:09:b8:94:3a:2e:81:8f:76:4b: 9d:5f:d6:16:28:0a:1a:18:25:0b:49:b5:db:e9:59:81:6c:d2: b4:a4:d4:5c:bd:33:78:fe:c8:1d:f7:22:85:64:2e:e7:ad:71: e7:9f:f4:3d:db:6e:7e:0c:b8:dd:ef:84:a8:fa:47:12:fc:2c: 8b:2b:fa:97 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYo7Lesox1aEes6DJjXsHORxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODI4MDgwNjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTAwZTM5ZDBhYWY4YzY2OTExYWE1YWNkZjQyZDAzNzljNzBmNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqjAlywjsCnEzs1CW5IJ0Z/CA+Sv 83xSH12UDZQDGI3mmbxpHC4Pp82Mo/uhPCkHyqaKvlzT0CY/J9WNM9J6juWoVqpW Q1f7VWd5wTb/OtblCQaA1CwRnvmNhFn+bROXfkv3Z32vPSJ/fQS4sh5+maCpZVGx kh/QtnOPQws23hSENFk+Ijtj7yYlAao49bLkpfB+Yt9/YP1m/nClAjf0ywaFNFDY PJPSp+gK16XgIaPXWzDjk1uTBZF3fOnJ8a0l871Z/GiqebwScuyxLQ77l86fOcxz aPYvayiWIBjlI4v0lu1lWVrWPZw7tsn+ps4+TOHF4ifVHB48KvfnIFUYFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJUA450Kr4xmkRqlrN9C0DeccPTpMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvbFFEam5RcXZqR2FSR3FXczMwTFFONXh3OU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEXejKxoGqzSCuILxs27 u0NQJJyMmpFjl8cdc0gXBdwNdSc2InZjfEQ16U7O1Q3XyZZRCn0bmGQQ91p2lI51 yhGTGkmt3dFfSxs+MjUJ2bFZRcH6Mgg976sqv2Z8tXI+cNu3tFy0sJSLYA71UjmO akiRpsMOS6rynmAKOH3Re/x36pWU98Q6X9WwhXB5+Kj+hrQzZ432mWAdnK/J7ZoK tVT8Mp4vJMxcIdHrFMTodNvhERJRJe6GuBUJ6OjBfAm4lDougY92S51f1hYoChoY JQtJtdvpWYFs0rSk1Fy9M3j+yB33IoVkLuetceef9D3bbn4MuN3vhKj6RxL8LIsr +pc= -----END CERTIFICATE-----Generated at Wed Dec 31 21:09:23 2025 by rpki-client