This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuNwl5mETZlr-QSIJp4Td-qpxDw.roa File: xuNwl5mETZlr-QSIJp4Td-qpxDw.roa (raw, json) Hash identifier: sunWycu3fvDkbIXitADjvTC97sY1tG4C5tbKuUmik2o= Subject key identifier: C6:E3:70:97:99:84:4D:99:6B:F9:04:88:26:9E:13:77:EA:A9:C4:3C Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022 Certificate serial: 0185F8B680411B66A579A49F0342E555AE0D Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuNwl5mETZlr-QSIJp4Td-qpxDw.roa Signing time: Sat 28 Jan 2023 14:09:47 +0000 ROA not before: Sat 28 Jan 2023 14:09:47 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:f8:b6:80:41:1b:66:a5:79:a4:9f:03:42:e5:55:ae:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022 Validity Not Before: Jan 28 14:09:47 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=c6e3709799844d996bf90488269e1377eaa9c43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:07:b4:bb:fa:1d:83:14:cc:60:63:0c:09: a7:92:6a:60:9a:84:4c:32:d3:40:ed:1e:74:01:7e: 8b:c0:9f:f5:26:49:58:b8:48:8c:d9:99:07:1f:e8: bd:29:da:47:83:c9:02:8d:de:ac:73:11:3d:ca:9e: 51:db:7f:02:e1:6d:5f:ff:ff:5f:36:59:0f:8d:9c: a2:75:c6:b3:11:7d:a4:28:4d:3f:fc:fd:0c:d8:08: 3f:0c:f9:87:4e:6b:7b:6e:27:dc:2b:ef:72:c0:68: 8a:9b:ea:97:db:2f:62:34:81:6e:ad:e9:eb:bb:ff: 18:ba:8d:6f:33:94:f6:a4:c5:e1:d3:d6:a7:42:f7: e4:9d:05:6c:c9:05:9e:8c:fd:d9:83:a2:26:60:74: b9:c8:0f:e5:b8:81:1e:e8:5a:91:8a:9c:c4:68:65: 0a:7f:2c:f0:b2:87:fb:2d:5b:ab:54:bd:dc:73:16: 06:5d:9d:8a:a8:dc:7c:20:3b:a8:08:08:54:c5:49: 35:cb:29:90:06:c3:2b:95:44:58:6b:de:d9:b2:37: dc:58:4c:f2:17:f7:37:1f:9a:9d:1f:62:27:7c:69: 94:7f:2b:3d:1b:e7:fc:d0:ab:b0:dc:10:c0:7e:d8: 7a:6c:e2:d3:27:b6:8d:6a:5f:12:0a:20:ad:2a:2b: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E3:70:97:99:84:4D:99:6B:F9:04:88:26:9E:13:77:EA:A9:C4:3C X509v3 Authority Key Identifier: keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xuNwl5mETZlr-QSIJp4Td-qpxDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 8d:62:63:56:c8:32:b8:5e:7d:de:9b:08:ac:9c:ab:68:f7:ba: 05:2c:4f:58:9f:a2:e8:a4:43:c4:fc:f1:a4:d8:39:73:01:35: 77:6e:06:33:40:6a:6e:c6:2f:35:79:bf:ba:6d:4f:6c:2b:be: a3:b4:c1:b2:7f:2a:03:0b:d1:23:98:47:ec:9b:7b:91:2a:b3: 77:a2:d2:b3:10:66:b9:e7:dc:ad:05:68:5e:fa:1a:cc:96:a2: a6:e7:ce:1b:71:34:4b:f2:62:48:31:f3:8d:1c:bb:ce:8a:6f: 4e:ca:86:2a:f6:b1:97:70:79:26:e7:e2:e5:36:66:fe:3b:41: 65:f4:0b:0c:a4:b7:4f:16:5f:3d:b6:09:c0:05:9e:78:b6:68: 90:20:bd:d1:19:b1:47:06:4b:21:bb:06:25:6e:be:98:27:34: b0:10:e3:2f:91:c2:3b:85:fd:15:f7:19:76:54:2f:eb:84:21: 1b:7e:95:8b:2e:53:23:3f:d6:5d:ea:36:3c:73:ff:9a:79:58: 52:6b:e1:c9:b3:d4:c3:98:b0:79:1c:bb:60:8e:d5:8e:28:f5: 76:88:fe:ad:34:e3:b0:cd:aa:54:52:92:15:45:86:9a:59:75: b8:93:02:3d:25:31:c3:85:21:0f:a9:93:83:a2:a3:4e:43:c7: 65:f9:81:b1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYX4toBBG2aleaSfA0LlVa4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz MDgwMjIwHhcNMjMwMTI4MTQwOTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmUzNzA5Nzk5ODQ0ZDk5NmJmOTA0ODgyNjllMTM3N2VhYTljNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBAHtLv6HYMUzGBjDAmnkmpgmoRM MtNA7R50AX6LwJ/1JklYuEiM2ZkHH+i9KdpHg8kCjd6scxE9yp5R238C4W1f//9f NlkPjZyidcazEX2kKE0//P0M2Ag/DPmHTmt7bifcK+9ywGiKm+qX2y9iNIFurenr u/8Yuo1vM5T2pMXh09anQvfknQVsyQWejP3Zg6ImYHS5yA/luIEe6FqRipzEaGUK fyzwsof7LVurVL3ccxYGXZ2KqNx8IDuoCAhUxUk1yymQBsMrlURYa97ZsjfcWEzy F/c3H5qdH2InfGmUfys9G+f80Kuw3BDAfth6bOLTJ7aNal8SCiCtKishWQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMbjcJeZhE2Za/kEiCaeE3fqqcQ8MB8GA1UdIwQY MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt MWFiZTNhYzEwYWE2LzEveHVOd2w1bUVUWmxyLVFTSUpwNFRkLXFweER3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2 LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI1iY1bIMrhefd6bCKyc q2j3ugUsT1ifouikQ8T88aTYOXMBNXduBjNAam7GLzV5v7ptT2wrvqO0wbJ/KgML 0SOYR+ybe5Eqs3ei0rMQZrnn3K0FaF76GsyWoqbnzhtxNEvyYkgx840cu86Kb07K hir2sZdweSbn4uU2Zv47QWX0Cwykt08WXz22CcAFnni2aJAgvdEZsUcGSyG7BiVu vpgnNLAQ4y+RwjuF/RX3GXZUL+uEIRt+lYsuUyM/1l3qNjxz/5p5WFJr4cmz1MOY sHkcu2CO1Y4o9XaI/q0047DNqlRSkhVFhppZdbiTAj0lMcOFIQ+pk4Oio05Dx2X5 gbE= -----END CERTIFICATE-----Generated at Wed Dec 31 23:30:10 2025 by rpki-client