This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgb8hjb8fA-Z-QIlK0kINxB0BYI.roa File: qgb8hjb8fA-Z-QIlK0kINxB0BYI.roa (raw, json) Hash identifier: o15doH8oJCYsHIx2/cwBJpDWapyDXAhVSdkG1KGJ4q8= Subject key identifier: AA:06:FC:86:36:FC:7C:0F:99:F9:02:25:2B:49:08:37:10:74:05:82 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0189CD869AEA9FE2860FAD3BFAF083A2A7FB Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgb8hjb8fA-Z-QIlK0kINxB0BYI.roa Signing time: Mon 07 Aug 2023 01:04:58 +0000 ROA not before: Mon 07 Aug 2023 01:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128 2001:67c:64:ffff:0:189:cd86:31e9/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:cd:86:9a:ea:9f:e2:86:0f:ad:3b:fa:f0:83:a2:a7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Aug 7 01:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=aa06fc8636fc7c0f99f902252b49083710740582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:79:cc:d1:d9:c1:ec:0b:e2:94:2b:a9:ae:42: e6:39:04:88:26:93:60:6c:cc:8a:2f:9d:7b:56:1e: 4e:d2:d2:e5:df:a5:a9:0a:4a:26:83:7f:d5:9f:52: 50:69:95:3b:dd:82:df:30:e9:53:fd:ff:c5:fd:c0: 93:76:4c:07:10:5a:df:fa:d7:3c:2b:5b:78:23:87: 89:6f:ff:21:a1:b3:04:88:04:67:18:f3:21:2f:6a: 27:4e:ed:80:e0:98:49:89:f5:0a:b3:de:81:ee:79: a2:f3:86:6a:29:17:18:a3:c2:8d:34:ec:cb:c6:ef: 76:10:a7:df:0a:25:80:3e:2f:64:3b:cd:74:d8:47: df:d1:b1:14:72:6f:31:79:92:9b:98:05:35:29:23: c0:c4:b6:c6:2b:5f:81:bd:11:ce:1f:80:0c:bf:13: 08:f7:7e:81:f0:41:ab:07:49:50:32:4c:13:c1:92: 22:20:70:9a:f7:68:cf:b1:76:92:43:f1:3c:d4:4c: 1d:4c:d0:df:5f:f6:6b:3e:a4:7d:ce:7e:cf:70:52: 17:50:f0:b2:04:d1:80:fb:dc:db:ad:ad:85:ca:a2: 4b:a0:55:75:b1:a2:1f:0c:e6:99:3a:fe:11:a9:20: 42:3b:7e:a8:57:08:29:d2:9c:a5:6c:53:c4:5c:a9: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:FC:86:36:FC:7C:0F:99:F9:02:25:2B:49:08:37:10:74:05:82 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgb8hjb8fA-Z-QIlK0kINxB0BYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 13:1e:bf:30:ee:02:ca:5c:3e:f1:03:e5:c3:41:df:a2:e5:d8: b1:55:b6:6b:ee:0e:e6:04:cb:9b:51:01:aa:30:02:a1:29:57: a8:b3:08:a1:64:db:71:bb:52:28:68:68:22:a2:3e:16:18:c8: ac:53:24:27:99:02:45:1d:3e:ff:52:3e:11:d7:b0:3d:fd:ff: 03:6e:1c:50:d8:f8:f8:d6:e9:ab:31:de:cf:0d:9d:7c:dc:a1: ed:52:e0:1b:ed:b8:a8:63:3e:3b:4e:b2:5f:c4:f4:31:fb:11: 08:a1:c4:bf:38:3f:f3:7c:65:87:26:99:ea:37:44:a1:7e:c3: 64:bd:69:12:f3:9b:30:6d:2e:11:4b:0d:ef:e8:0f:bd:b7:b5: 53:31:11:71:d5:ba:7f:6e:d2:24:cc:43:15:3f:92:0b:e7:9f: ef:8a:ee:1f:46:6f:fb:ad:15:02:f5:dc:8c:4e:5b:13:d6:82: c7:b7:91:e3:c1:96:b6:ae:df:21:8b:d4:39:e0:8f:97:a2:82: a4:cb:96:48:59:75:3a:ce:b5:2c:5c:a4:d5:3c:c3:99:d5:9b: d5:b9:20:39:8a:60:c0:a3:4f:e4:1c:c1:cb:00:e0:dd:55:bc: bc:42:f0:10:a4:2e:f5:96:69:0f:e1:21:fb:02:91:bf:95:6c: 65:fe:4f:fe -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYnNhprqn+KGD607+vCDoqf7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwODA3MDEwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTA2ZmM4NjM2ZmM3YzBmOTlmOTAyMjUyYjQ5MDgzNzEwNzQwNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHnM0dnB7AvilCuprkLmOQSIJpNg bMyKL517Vh5O0tLl36WpCkomg3/Vn1JQaZU73YLfMOlT/f/F/cCTdkwHEFrf+tc8 K1t4I4eJb/8hobMEiARnGPMhL2onTu2A4JhJifUKs96B7nmi84ZqKRcYo8KNNOzL xu92EKffCiWAPi9kO8102Eff0bEUcm8xeZKbmAU1KSPAxLbGK1+BvRHOH4AMvxMI 936B8EGrB0lQMkwTwZIiIHCa92jPsXaSQ/E81EwdTNDfX/ZrPqR9zn7PcFIXUPCy BNGA+9zbra2FyqJLoFV1saIfDOaZOv4RqSBCO36oVwgp0pylbFPEXKnIvQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKoG/IY2/HwPmfkCJStJCDcQdAWCMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEvcWdiOGhqYjhmQS1aLVFJbEswa0lOeEIwQllJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABMevzDuAspcPvED5cNB 36Ll2LFVtmvuDuYEy5tRAaowAqEpV6izCKFk23G7UihoaCKiPhYYyKxTJCeZAkUd Pv9SPhHXsD39/wNuHFDY+PjW6asx3s8NnXzcoe1S4BvtuKhjPjtOsl/E9DH7EQih xL84P/N8ZYcmmeo3RKF+w2S9aRLzmzBtLhFLDe/oD723tVMxEXHVun9u0iTMQxU/ kgvnn++K7h9Gb/utFQL13IxOWxPWgse3kePBlrau3yGL1Dngj5eigqTLlkhZdTrO tSxcpNU8w5nVm9W5IDmKYMCjT+QcwcsA4N1VvLxC8BCkLvWWaQ/hIfsCkb+VbGX+ T/4= -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:23 2025 by rpki-client