This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ma-z7POM7EsexQ-7QJAmbx0oJF0.roa File: ma-z7POM7EsexQ-7QJAmbx0oJF0.roa (raw, json) Hash identifier: 4lcpnwQop6T9JhPgwMJcjRT6ArsfuUqirgIMTjd9zMA= Subject key identifier: 99:AF:B3:EC:F3:8C:EC:4B:1E:C5:0F:BB:40:90:26:6F:1D:28:24:5D Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189691A20A60950FC5E1594C28BAA819826 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ma-z7POM7EsexQ-7QJAmbx0oJF0.roa Signing time: Tue 18 Jul 2023 13:04:27 +0000 ROA not before: Tue 18 Jul 2023 13:04:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128 2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128 2001:67c:64:ffff:0:189:6919:fb19/128 maxlen: 128 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128 2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128 2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:69:1a:20:a6:09:50:fc:5e:15:94:c2:8b:aa:81:98:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jul 18 13:04:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=99afb3ecf38cec4b1ec50fbb4090266f1d28245d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:dd:c7:5a:c7:b5:19:d4:a7:b9:34:90:3f: 2f:42:7b:94:fd:a0:cd:d0:95:91:63:7c:d5:ce:3c: 3a:bc:7f:49:fd:c4:dc:03:c6:9b:82:8d:d2:da:ef: d1:03:97:ec:de:c3:92:5e:ce:f9:15:64:92:f3:03: 0d:dc:77:ab:47:47:1d:3a:85:2e:76:84:ba:10:52: 03:06:fb:bb:0c:37:5c:bd:48:77:b1:89:49:75:7f: a0:27:56:f3:75:df:83:4a:0e:31:a8:d4:bd:72:e4: 83:ef:f2:ef:af:95:01:51:35:d5:bf:9b:bc:f3:08: 87:13:e1:81:7e:d1:14:72:b6:50:b9:9c:42:73:18: 1b:e2:cc:1f:b0:0f:09:a1:95:23:a1:3e:fd:6e:a4: d2:65:46:bd:12:7e:a1:72:9a:1e:51:b1:9f:98:3b: 97:4f:d6:42:e1:cb:fb:89:f5:fa:a9:b5:b8:4b:76: f1:77:67:4d:d0:be:cb:98:22:b1:87:65:4b:89:6c: a5:61:b9:56:7e:cf:4c:37:b4:d7:30:85:a6:18:20: 9d:f9:54:d4:08:69:a1:fd:95:94:22:e0:f9:d6:67: ea:b2:ff:8a:dc:e6:46:53:41:02:2b:00:d6:e0:9c: ed:93:ed:58:db:cc:d1:02:a3:e4:a5:bf:eb:31:f7: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AF:B3:EC:F3:8C:EC:4B:1E:C5:0F:BB:40:90:26:6F:1D:28:24:5D X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ma-z7POM7EsexQ-7QJAmbx0oJF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 45:0a:4a:d8:6b:f0:14:8a:e4:f6:8a:77:03:e8:c1:55:55:89: 75:c1:b3:49:d8:57:29:b4:6f:ba:36:a2:fc:72:fc:f5:59:ba: 12:46:e5:e7:66:e4:ef:7a:0d:d8:d7:68:79:76:4a:b4:8b:6a: 99:38:84:37:a0:8b:48:a9:00:35:fb:0a:73:c9:dd:07:25:d2: c1:1e:1c:4e:b3:88:7e:b6:0d:57:27:cd:96:b6:f3:85:67:4a: 8e:65:ce:12:42:2c:46:8f:01:19:d3:64:d1:0d:cd:98:b5:31: 14:5f:61:33:91:d3:18:fb:3e:24:fe:b7:52:0d:e4:3b:f3:1a: 90:a7:27:6d:30:40:67:51:f6:a0:17:5b:8e:56:cd:29:b5:0c: 4a:d2:f2:07:aa:44:68:26:d5:52:28:86:4b:c0:ba:54:ce:74: 23:05:5b:a3:bc:bd:d2:48:41:cd:5f:25:6e:fe:1e:cb:57:87: c2:7b:bb:20:65:b5:a5:4d:62:e1:1b:b1:6a:58:67:46:94:4a: 79:4f:45:dd:67:af:90:25:0b:4a:9d:94:98:e4:d8:96:04:9b: 82:a9:5e:2d:54:08:f4:c1:52:d3:6e:f0:99:ac:f6:c7:cb:df: f0:3d:ec:62:eb:a0:79:ce:36:c1:fe:99:81:60:5e:5e:e6:73: f3:73:bc:93 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYlpGiCmCVD8XhWUwouqgZgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwNzE4MTMwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWFmYjNlY2YzOGNlYzRiMWVjNTBmYmI0MDkwMjY2ZjFkMjgyNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Ddx1rHtRnUp7k0kD8vQnuU/aDN 0JWRY3zVzjw6vH9J/cTcA8abgo3S2u/RA5fs3sOSXs75FWSS8wMN3HerR0cdOoUu doS6EFIDBvu7DDdcvUh3sYlJdX+gJ1bzdd+DSg4xqNS9cuSD7/Lvr5UBUTXVv5u8 8wiHE+GBftEUcrZQuZxCcxgb4swfsA8JoZUjoT79bqTSZUa9En6hcpoeUbGfmDuX T9ZC4cv7ifX6qbW4S3bxd2dN0L7LmCKxh2VLiWylYblWfs9MN7TXMIWmGCCd+VTU CGmh/ZWUIuD51mfqsv+K3OZGU0ECKwDW4Jztk+1Y28zRAqPkpb/rMfciGQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJmvs+zzjOxLHsUPu0CQJm8dKCRdMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvbWEtejdQT003RXNleFEtN1FKQW1ieDBvSkYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEUKSthr8BSK5PaKdwPo wVVViXXBs0nYVym0b7o2ovxy/PVZuhJG5edm5O96DdjXaHl2SrSLapk4hDegi0ip ADX7CnPJ3Qcl0sEeHE6ziH62DVcnzZa284VnSo5lzhJCLEaPARnTZNENzZi1MRRf YTOR0xj7PiT+t1IN5DvzGpCnJ20wQGdR9qAXW45WzSm1DErS8geqRGgm1VIohkvA ulTOdCMFW6O8vdJIQc1fJW7+HstXh8J7uyBltaVNYuEbsWpYZ0aUSnlPRd1nr5Al C0qdlJjk2JYEm4KpXi1UCPTBUtNu8Jms9sfL3/A97GLroHnONsH+mYFgXl7mc/Nz vJM= -----END CERTIFICATE-----Generated at Sun Jan 11 23:28:48 2026 by rpki-client