This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ntBKF3Fdefja7SgRQzGE87v1lOA.roa File: ntBKF3Fdefja7SgRQzGE87v1lOA.roa (raw, json) Hash identifier: Gd4UhBL+3npDkkEb/fzaE3vDltsd+ZaWqnyHPjSjjr8= Subject key identifier: 9E:D0:4A:17:71:5D:79:F8:DA:ED:28:11:43:31:84:F3:BB:F5:94:E0 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 01869E22DA05CA1096AB34F7CDFF74428755 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ntBKF3Fdefja7SgRQzGE87v1lOA.roa Signing time: Wed 01 Mar 2023 17:05:29 +0000 ROA not before: Wed 01 Mar 2023 17:05:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:9e21:ff45/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:9e:22:da:05:ca:10:96:ab:34:f7:cd:ff:74:42:87:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Mar 1 17:05:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=9ed04a17715d79f8daed2811433184f3bbf594e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:31:96:ca:69:6c:32:a8:d0:b3:3b:7a:4a: f9:92:11:be:c3:00:de:5a:84:7e:7f:06:f5:8b:a2: 22:9e:cb:7c:b0:17:28:dc:49:b6:90:4c:5e:1d:43: 43:db:bb:fb:e5:58:d0:26:4b:2d:08:46:d8:1a:df: 1b:0a:17:b6:42:8a:a7:27:bc:4a:af:d1:8d:6c:3d: ea:33:25:4a:b0:0f:e4:2e:f8:e3:0f:27:7a:95:51: cc:4c:96:7c:40:14:6c:37:26:37:50:f6:1c:0e:23: 2d:b7:49:4b:65:6b:b4:39:9f:96:4a:3a:b0:84:aa: 12:9f:e3:2b:78:70:f3:50:f5:55:b6:11:27:d5:4f: 5f:bc:01:87:1b:3a:d5:50:7c:5f:e1:6a:f5:d7:62: bd:8e:c5:4c:28:5a:da:8b:d5:ad:f7:e4:ea:ee:c0: ca:41:a9:62:92:45:d8:df:18:23:64:4b:91:62:fd: 08:2b:1e:75:fc:59:3b:8b:6d:c6:77:c1:ad:11:ee: c7:b3:8e:45:c4:06:ce:f5:92:7f:7d:3b:e3:af:60: 5c:45:c5:f8:af:68:f2:bf:73:fa:3c:ed:d1:3c:11: 8f:d6:22:e2:50:88:27:df:de:8a:a3:9f:4c:66:2e: 55:3f:aa:6b:d3:35:ca:68:6f:a9:5a:d7:1c:75:4a: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D0:4A:17:71:5D:79:F8:DA:ED:28:11:43:31:84:F3:BB:F5:94:E0 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ntBKF3Fdefja7SgRQzGE87v1lOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 81:86:22:00:62:4c:2b:e3:e8:8e:34:5a:61:77:93:07:a9:e5: 95:79:65:1f:3a:a9:66:a4:55:e0:b0:48:0a:cc:1a:64:a6:e0: 91:49:cd:dd:3c:69:c9:d6:0d:4a:91:93:c7:87:e4:8e:fe:24: 9a:4d:c2:fa:51:18:17:e6:3d:fa:06:b1:5a:ae:a7:e4:25:b9: b3:93:01:fe:39:a7:c2:fd:d8:50:09:7d:51:c7:81:02:2b:4c: 2a:dc:c6:50:e8:09:1e:9f:5b:25:9e:75:7b:56:6e:3c:56:87: 0a:da:e6:5f:89:7c:a8:d2:6f:5f:98:98:1b:7b:91:c5:84:b1: 6f:db:d7:f8:40:76:39:57:3f:18:2c:13:ba:d7:5a:ce:7b:8e: c0:72:e8:a3:4e:da:fa:dc:c9:17:46:31:11:26:f1:cc:eb:4d: ea:df:00:8e:ec:7f:ab:df:b9:c8:00:e8:ac:f2:18:c6:a3:3c: 04:d1:f8:84:59:4d:b9:bd:81:bf:6e:61:ff:ec:90:1c:d1:38: 49:71:5a:c7:ee:2a:b2:49:46:2f:7e:0a:da:eb:e6:76:16:5c: 7c:e9:d2:3f:bd:a1:34:94:d1:80:c3:87:f7:ba:d4:1a:9c:71: 4e:f5:80:53:90:ff:cb:c9:dd:60:e1:1d:00:1a:be:30:eb:86: f2:e1:b9:63 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYaeItoFyhCWqzT3zf90QodVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMzAxMTcwNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWQwNGExNzcxNWQ3OWY4ZGFlZDI4MTE0MzMxODRmM2JiZjU5NGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApokxlsppbDKo0LM7ekr5khG+wwDe WoR+fwb1i6Iinst8sBco3Em2kExeHUND27v75VjQJkstCEbYGt8bChe2QoqnJ7xK r9GNbD3qMyVKsA/kLvjjDyd6lVHMTJZ8QBRsNyY3UPYcDiMtt0lLZWu0OZ+WSjqw hKoSn+MreHDzUPVVthEn1U9fvAGHGzrVUHxf4Wr112K9jsVMKFrai9Wt9+Tq7sDK QalikkXY3xgjZEuRYv0IKx51/Fk7i23Gd8GtEe7Hs45FxAbO9ZJ/fTvjr2BcRcX4 r2jyv3P6PO3RPBGP1iLiUIgn396Ko59MZi5VP6pr0zXKaG+pWtccdUr4/wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ7QShdxXXn42u0oEUMxhPO79ZTgMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvbnRCS0YzRmRlZmphN1NnUlF6R0U4N3YxbE9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIGGIgBiTCvj6I40WmF3 kwep5ZV5ZR86qWakVeCwSArMGmSm4JFJzd08acnWDUqRk8eH5I7+JJpNwvpRGBfm PfoGsVqup+QlubOTAf45p8L92FAJfVHHgQIrTCrcxlDoCR6fWyWedXtWbjxWhwra 5l+JfKjSb1+YmBt7kcWEsW/b1/hAdjlXPxgsE7rXWs57jsBy6KNO2vrcyRdGMREm 8czrTerfAI7sf6vfucgA6KzyGMajPATR+IRZTbm9gb9uYf/skBzROElxWsfuKrJJ Ri9+Ctrr5nYWXHzp0j+9oTSU0YDDh/e61BqccU71gFOQ/8vJ3WDhHQAavjDrhvLh uWM= -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:53 2025 by rpki-client