This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2TGpoje99x5637jhFU6HyWtXAeA.roa File: 2TGpoje99x5637jhFU6HyWtXAeA.roa (raw, json) Hash identifier: eCwUpyRbRNUkiJXgVHPSEFEq46ETNYfwdK1aWwO5heY= Subject key identifier: D9:31:A9:A2:37:BD:F7:1E:7A:DF:B8:E1:15:4E:87:C9:6B:57:01:E0 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018E92AE5F8FFEF9AEF3D66F45F4E5FCA635 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2TGpoje99x5637jhFU6HyWtXAeA.roa Signing time: Sun 31 Mar 2024 04:04:45 +0000 ROA not before: Sun 31 Mar 2024 04:04:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128 2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128 2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128 2001:67c:64:ffff:0:18e:92ae:12b7/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:92:ae:5f:8f:fe:f9:ae:f3:d6:6f:45:f4:e5:fc:a6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Mar 31 04:04:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=d931a9a237bdf71e7adfb8e1154e87c96b5701e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:3d:5a:cd:e0:69:13:e0:28:22:30:d4:36: cc:c3:73:4d:81:b8:11:d8:8f:4f:79:1d:36:e7:d1: d6:e1:d8:12:eb:10:15:82:9d:3d:de:2e:c6:67:41: 15:ed:37:e7:2e:d7:ce:ec:87:17:af:59:b1:e3:b4: 16:be:c7:64:f7:97:72:80:2c:88:1d:62:ce:5a:35: 06:42:d2:cc:6a:11:17:d6:b0:d7:b5:d3:83:e6:b3: dd:67:43:1d:86:8a:fc:ee:47:bb:50:80:49:f8:dd: 2f:8e:f5:d0:5c:71:4f:0d:b4:7a:20:a9:c4:83:e9: b5:80:39:bd:c4:2e:59:79:e6:99:da:3e:b6:19:8a: 2f:99:f8:ca:af:d4:85:9f:84:74:4f:97:66:af:15: 49:7d:d1:a9:7a:9b:46:d7:4c:fa:37:fb:02:a7:66: e0:fd:d5:8c:0e:64:1e:2f:cb:ec:a7:34:62:40:0e: 06:59:fe:ce:9a:e0:fe:16:d6:a7:1e:dd:33:8d:e9: e0:f1:ac:89:f3:3f:87:a9:b6:59:e8:a2:c6:92:dc: 04:2e:36:6f:74:3f:68:1b:60:1c:65:12:5e:d3:55: 06:47:44:a1:1c:fa:b8:8c:af:57:bb:8f:2f:fc:05: cb:4e:a4:41:6e:fb:71:17:4b:2f:fa:06:ff:cc:53: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:A9:A2:37:BD:F7:1E:7A:DF:B8:E1:15:4E:87:C9:6B:57:01:E0 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2TGpoje99x5637jhFU6HyWtXAeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 86:a2:83:e0:92:ef:fd:7b:d7:79:d6:c7:cb:71:ef:fc:7a:63: b0:78:98:5f:b1:2a:81:ed:ea:d6:1f:63:27:48:32:cc:99:57: f0:78:c7:b3:75:81:6f:2d:26:17:16:8b:2b:41:81:f4:a7:a0: 9c:4f:ef:a0:00:5a:fa:3e:b0:37:21:f7:d6:fa:3a:75:c5:e1: 63:da:30:dc:98:13:f4:29:11:29:f2:1c:ae:be:7e:00:0a:9c: 2d:35:c5:6e:10:69:a7:10:56:e6:d4:08:30:b5:7e:94:ee:1f: 2c:75:bd:33:16:d5:37:b2:33:7b:b5:1c:52:ef:58:6b:7f:79: 41:fd:db:d4:0c:b7:d8:da:b7:9e:21:c6:a6:c3:13:39:a6:1a: 73:62:10:2e:83:37:50:5d:bf:3f:6d:06:1e:19:67:f8:d7:ab: 8e:31:24:4e:5f:26:05:20:43:d2:3e:cd:9e:12:bd:ba:78:a8: f5:51:53:18:af:89:e1:b9:fe:e9:67:7a:4f:06:a7:56:74:b2: e9:a2:22:c0:a4:e3:ac:21:d4:84:db:ab:09:18:ee:18:4d:2f: cf:ca:f0:ab:be:21:a4:3e:17:4d:6c:32:91:df:70:eb:b2:72: 0d:91:de:67:14:95:9f:d2:96:0c:04:b6:6f:52:55:07:3b:f8: 22:97:53:43 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY6Srl+P/vmu89ZvRfTl/KY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMzMxMDQwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTMxYTlhMjM3YmRmNzFlN2FkZmI4ZTExNTRlODdjOTZiNTcwMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr89Ws3gaRPgKCIw1DbMw3NNgbgR 2I9PeR0259HW4dgS6xAVgp093i7GZ0EV7TfnLtfO7IcXr1mx47QWvsdk95dygCyI HWLOWjUGQtLMahEX1rDXtdOD5rPdZ0Mdhor87ke7UIBJ+N0vjvXQXHFPDbR6IKnE g+m1gDm9xC5ZeeaZ2j62GYovmfjKr9SFn4R0T5dmrxVJfdGpeptG10z6N/sCp2bg /dWMDmQeL8vspzRiQA4GWf7OmuD+FtanHt0zjeng8ayJ8z+HqbZZ6KLGktwELjZv dD9oG2AcZRJe01UGR0ShHPq4jK9Xu48v/AXLTqRBbvtxF0sv+gb/zFNNZwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNkxqaI3vfceet+44RVOh8lrVwHgMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvMlRHcG9qZTk5eDU2MzdqaEZVNkh5V3RYQWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIaig+CS7/1713nWx8tx 7/x6Y7B4mF+xKoHt6tYfYydIMsyZV/B4x7N1gW8tJhcWiytBgfSnoJxP76AAWvo+ sDch99b6OnXF4WPaMNyYE/QpESnyHK6+fgAKnC01xW4QaacQVubUCDC1fpTuHyx1 vTMW1TeyM3u1HFLvWGt/eUH929QMt9jat54hxqbDEzmmGnNiEC6DN1Bdvz9tBh4Z Z/jXq44xJE5fJgUgQ9I+zZ4Svbp4qPVRUxivieG5/ulnek8Gp1Z0sumiIsCk46wh 1ITbqwkY7hhNL8/K8Ku+IaQ+F01sMpHfcOuycg2R3mcUlZ/SlgwEtm9SVQc7+CKX U0M= -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:16 2025 by rpki-client