This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6QXmQvGjnqOPBs9xZqC5KERDb_Y.roa File: 6QXmQvGjnqOPBs9xZqC5KERDb_Y.roa (raw, json) Hash identifier: GCsZn+T5DeAyCY7e8ogpvyF91BncUKaM6Txj0vfr+Nc= Subject key identifier: E9:05:E6:42:F1:A3:9E:A3:8F:06:CF:71:66:A0:B9:28:44:43:6F:F6 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018CE77586B90DE951FB054029D5880028FA Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6QXmQvGjnqOPBs9xZqC5KERDb_Y.roa Signing time: Mon 08 Jan 2024 05:04:48 +0000 ROA not before: Mon 08 Jan 2024 05:04:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18c:e775:163d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:e7:75:86:b9:0d:e9:51:fb:05:40:29:d5:88:00:28:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Jan 8 05:04:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=e905e642f1a39ea38f06cf7166a0b92844436ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:3f:a0:e2:63:8d:dc:88:3f:f3:2f:fe:99: d4:c7:81:ac:9f:4b:6f:1e:97:76:d0:57:b8:58:92: d1:f2:d8:c2:7a:62:36:f7:83:fd:a5:5b:58:f5:57: 09:13:47:1c:b2:00:7b:e6:d3:ef:95:63:ec:c2:b1: 3c:4b:08:ec:8a:db:46:f0:cc:fc:74:4b:7e:97:d4: 60:4e:4c:7a:ad:19:bc:d1:dd:ba:7d:76:6e:f5:6d: 5e:e3:29:4a:91:04:37:ca:ab:31:3f:6c:29:b5:59: 3a:55:ad:ba:5d:cc:df:b0:64:6c:32:7a:cd:d6:86: 2e:ad:4d:53:b1:05:59:da:20:e6:36:a5:c7:3b:4f: 39:d0:11:d4:59:a6:bc:c6:9d:ed:b3:af:01:be:d6: 60:52:b8:e4:36:9f:30:35:d7:45:c3:da:c1:97:45: e2:9e:8a:69:f8:9f:19:cf:93:84:ab:cb:a6:96:ad: 0c:45:4d:f4:84:9b:84:d2:dc:cb:1c:9d:b9:4c:c0: 92:18:8b:ff:0d:5d:73:f7:f6:bc:ae:4c:2e:f0:40: bc:28:b3:e7:4b:e2:c6:01:a9:3b:d6:4d:23:af:26: da:e5:9d:17:bb:4a:a3:f8:36:c0:33:15:f0:77:aa: 5a:d1:7b:a9:df:af:89:aa:2f:b1:ca:59:90:fb:8a: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:05:E6:42:F1:A3:9E:A3:8F:06:CF:71:66:A0:B9:28:44:43:6F:F6 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6QXmQvGjnqOPBs9xZqC5KERDb_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption a3:77:cf:eb:67:0f:ae:55:71:66:cc:93:97:14:f4:a6:8a:04: f7:51:ca:85:ca:75:fe:13:3a:68:30:76:f8:4b:c2:84:cf:b4: bf:7b:5a:ca:af:4b:35:e1:37:ba:10:da:e9:31:62:6e:65:79: a9:e1:33:ad:3f:ad:20:87:17:38:0c:75:d3:98:af:c9:12:c5: 89:7c:a2:ee:3f:88:58:ad:52:f7:33:bd:15:92:17:ab:39:38: fd:b0:5c:a1:18:52:16:3a:a4:86:c9:af:db:b1:52:16:1f:6f: 2a:50:5b:69:ec:b3:2d:1e:87:20:fb:30:c6:e4:4a:f0:32:a3: c8:bb:96:68:23:56:d3:29:cd:5e:ba:5a:4e:22:00:b7:65:5a: 9a:0b:6b:80:ea:48:e1:46:55:7e:51:c2:78:4a:b9:cc:2f:03: d9:1b:fa:ff:44:e5:be:6c:1f:6e:c2:39:0f:d9:15:fd:fa:01: 93:1e:c3:eb:03:f9:5d:a3:86:72:f9:64:36:7e:25:f8:97:e1: 51:55:df:fe:c0:ce:1a:58:88:b2:7f:e0:1f:9d:ec:02:db:b0: 3e:97:2f:55:44:6c:76:dc:14:b9:05:a9:b6:47:5f:62:40:5e: 5e:21:33:27:0c:d9:f6:05:33:0b:10:ed:30:0e:b5:52:2b:75: a4:4d:e8:a8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYzndYa5DelR+wVAKdWIACj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMTA4MDUwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTA1ZTY0MmYxYTM5ZWEzOGYwNmNmNzE2NmEwYjkyODQ0NDM2ZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDE/oOJjjdyIP/Mv/pnUx4Gsn0tv Hpd20Fe4WJLR8tjCemI294P9pVtY9VcJE0ccsgB75tPvlWPswrE8SwjsittG8Mz8 dEt+l9RgTkx6rRm80d26fXZu9W1e4ylKkQQ3yqsxP2wptVk6Va26XczfsGRsMnrN 1oYurU1TsQVZ2iDmNqXHO0850BHUWaa8xp3ts68BvtZgUrjkNp8wNddFw9rBl0Xi nopp+J8Zz5OEq8umlq0MRU30hJuE0tzLHJ25TMCSGIv/DV1z9/a8rkwu8EC8KLPn S+LGAak71k0jryba5Z0Xu0qj+DbAMxXwd6pa0Xup36+Jqi+xylmQ+4qirwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOkF5kLxo56jjwbPcWaguShEQ2/2MB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvNlFYbVF2R2pucU9QQnM5eFpxQzVLRVJEYl9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKN3z+tnD65VcWbMk5cU 9KaKBPdRyoXKdf4TOmgwdvhLwoTPtL97WsqvSzXhN7oQ2ukxYm5leanhM60/rSCH FzgMddOYr8kSxYl8ou4/iFitUvczvRWSF6s5OP2wXKEYUhY6pIbJr9uxUhYfbypQ W2nssy0ehyD7MMbkSvAyo8i7lmgjVtMpzV66Wk4iALdlWpoLa4DqSOFGVX5RwnhK ucwvA9kb+v9E5b5sH27COQ/ZFf36AZMew+sD+V2jhnL5ZDZ+JfiX4VFV3/7AzhpY iLJ/4B+d7ALbsD6XL1VEbHbcFLkFqbZHX2JAXl4hMycM2fYFMwsQ7TAOtVIrdaRN 6Kg= -----END CERTIFICATE-----Generated at Thu Dec 25 23:53:29 2025 by rpki-client