This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x7HFMyifgLYcUgtlWgZ6lLZ34SE.roa File: x7HFMyifgLYcUgtlWgZ6lLZ34SE.roa (raw, json) Hash identifier: 8lTfMwbG5k6sWryFFzBbppbZ3zSP+7TfCol8lS2qShI= Subject key identifier: C7:B1:C5:33:28:9F:80:B6:1C:52:0B:65:5A:06:7A:94:B6:77:E1:21 Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0186921D8BCF3619981D18711CD1DD5EBCE0 Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x7HFMyifgLYcUgtlWgZ6lLZ34SE.roa Signing time: Mon 27 Feb 2023 09:04:15 +0000 ROA not before: Mon 27 Feb 2023 09:04:15 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128 2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128 2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128 2001:67c:64:ffff:0:186:921d:7f92/128 maxlen: 128 2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:92:1d:8b:cf:36:19:98:1d:18:71:1c:d1:dd:5e:bc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Feb 27 09:04:15 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=c7b1c533289f80b61c520b655a067a94b677e121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:67:f1:ae:ac:06:33:cf:a1:de:c4:27:21: c7:4a:f9:de:ba:63:0b:72:72:aa:4b:58:85:0d:f3: 29:d5:20:ee:9c:95:db:d5:d6:78:6e:58:c9:f3:19: 83:69:aa:71:6a:c8:0e:55:24:8a:c4:64:42:db:f7: 28:3f:f8:32:39:9e:95:f2:0f:83:0c:fa:52:84:26: 86:32:d7:d4:ff:99:c0:1b:e2:ef:a9:7a:fb:eb:20: d8:63:60:13:83:02:1f:11:4a:12:b5:b8:b1:8d:38: 0c:ad:aa:1f:6c:7b:e0:66:15:e2:56:a5:54:f4:2a: 8c:74:6c:37:3c:02:59:f2:2c:03:dd:f7:1e:8f:f3: 37:25:8f:cd:95:88:fd:84:9c:24:e5:cd:5b:cc:d1: f3:6b:c9:76:da:b2:d0:56:ac:ed:6b:90:04:fe:13: 6d:29:ef:56:e3:9c:1a:85:5f:fe:31:01:48:e2:73: 11:ec:d9:5c:87:25:42:3e:5a:0c:7b:e0:f0:31:6d: ae:26:e1:1c:c9:a3:c7:00:6a:fa:fa:a1:91:96:75: 5b:37:a7:86:34:01:41:96:f0:92:05:ca:7c:ff:1f: f0:6c:17:ea:7b:e6:77:88:27:96:87:88:e8:dc:ad: 90:76:e0:70:87:20:20:63:3d:01:22:b2:f9:de:69: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B1:C5:33:28:9F:80:B6:1C:52:0B:65:5A:06:7A:94:B6:77:E1:21 X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x7HFMyifgLYcUgtlWgZ6lLZ34SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 8c:49:e9:7e:70:57:61:33:f6:7e:58:16:89:e2:9d:61:04:e0: 5c:00:ad:e9:8f:c0:e9:a1:9f:6e:54:9b:f8:41:33:ad:49:28: 96:e5:14:73:5b:2e:35:ca:6e:8c:54:cd:3c:e5:c7:aa:09:16: 7f:c4:25:ee:b4:68:32:b5:7d:ff:a1:b5:f6:83:16:9b:90:98: 07:f1:6b:9b:42:11:ea:74:4d:85:83:46:89:e1:6b:26:27:8e: 33:94:39:f9:22:8f:14:f6:b7:67:01:17:1c:78:4b:f8:1a:e6: f1:3e:0a:9e:7c:b2:36:37:96:65:06:f3:6d:5d:f3:22:1e:5b: d3:6c:b2:a8:34:3b:af:13:18:cf:72:7f:ef:ae:63:66:f3:89: 6d:23:6b:fb:28:0d:59:68:97:25:ea:f2:35:0c:5a:15:dc:c0: 6e:c2:bb:20:a4:31:ec:d1:ea:12:d7:a0:62:86:ff:74:7d:22: d8:0a:d0:b5:6e:59:7b:e6:ae:b7:0b:da:7c:67:15:5d:2e:0b: 0c:80:a9:c7:4c:9b:b7:6c:57:39:08:85:80:6f:2f:31:d7:8e: 65:e5:ee:03:5f:b0:e8:02:a3:3a:36:a2:a1:2d:b4:68:5b:bb: 54:b0:28:bd:ef:83:83:cb:be:33:72:a2:81:56:c2:55:a0:53: 81:56:eb:58 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYaSHYvPNhmYHRhxHNHdXrzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMjI3MDkwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2IxYzUzMzI4OWY4MGI2MWM1MjBiNjU1YTA2N2E5NGI2NzdlMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqJn8a6sBjPPod7EJyHHSvneumML cnKqS1iFDfMp1SDunJXb1dZ4bljJ8xmDaapxasgOVSSKxGRC2/coP/gyOZ6V8g+D DPpShCaGMtfU/5nAG+LvqXr76yDYY2ATgwIfEUoStbixjTgMraofbHvgZhXiVqVU 9CqMdGw3PAJZ8iwD3fcej/M3JY/NlYj9hJwk5c1bzNHza8l22rLQVqzta5AE/hNt Ke9W45wahV/+MQFI4nMR7NlchyVCPloMe+DwMW2uJuEcyaPHAGr6+qGRlnVbN6eG NAFBlvCSBcp8/x/wbBfqe+Z3iCeWh4jo3K2QduBwhyAgYz0BIrL53mmx6QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMexxTMon4C2HFILZVoGepS2d+EhMB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEveDdIRk15aWZnTFljVWd0bFdnWjZsTFozNFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIxJ6X5wV2Ez9n5YFoni nWEE4FwAremPwOmhn25Um/hBM61JKJblFHNbLjXKboxUzTzlx6oJFn/EJe60aDK1 ff+htfaDFpuQmAfxa5tCEep0TYWDRonhayYnjjOUOfkijxT2t2cBFxx4S/ga5vE+ Cp58sjY3lmUG821d8yIeW9Nssqg0O68TGM9yf++uY2bziW0ja/soDVlolyXq8jUM WhXcwG7CuyCkMezR6hLXoGKG/3R9ItgK0LVuWXvmrrcL2nxnFV0uCwyAqcdMm7ds VzkIhYBvLzHXjmXl7gNfsOgCozo2oqEttGhbu1SwKL3vg4PLvjNyooFWwlWgU4FW 61g= -----END CERTIFICATE-----Generated at Wed Dec 31 07:23:01 2025 by rpki-client