This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mr3-RefAcKTpuERzkn7fQgKccWQ.roa File: mr3-RefAcKTpuERzkn7fQgKccWQ.roa (raw, json) Hash identifier: cYaUcbDUHH7gvuXdfH+497yS0O8/W2kGyZXFONkZVcU= Subject key identifier: 9A:BD:FE:45:E7:C0:70:A4:E9:B8:44:73:92:7E:DF:42:02:9C:71:64 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018D5B25CA06EE9BAADEF8D7C78525B642E3 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mr3-RefAcKTpuERzkn7fQgKccWQ.roa Signing time: Tue 30 Jan 2024 16:13:39 +0000 ROA not before: Tue 30 Jan 2024 16:13:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8d:5b:25:ca:06:ee:9b:aa:de:f8:d7:c7:85:25:b6:42:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Jan 30 16:13:39 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=9abdfe45e7c070a4e9b84473927edf42029c7164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:5a:fc:2c:1d:79:67:1d:46:f5:4b:8b:2e: 78:bc:7f:ad:c1:39:ad:59:e6:f8:4e:45:a0:ca:33: 48:55:7e:f4:2b:3c:1b:38:b6:a6:62:1e:f5:4b:28: 30:51:04:af:95:70:09:87:8e:3b:d1:cc:3d:e1:eb: 60:6a:e0:6d:ef:3e:7a:4b:b3:5f:c2:a7:e1:a7:c0: 9f:1b:7c:96:46:1b:ef:af:85:60:58:4d:13:16:e1: b4:5e:e0:09:f1:8e:78:ee:b2:7c:36:ed:50:f6:86: e2:4b:e1:fc:dd:2b:d4:1b:b1:fb:28:f0:dd:73:52: f6:64:e4:2a:b8:b0:a9:58:9c:ee:a2:42:e4:ec:3b: bd:06:5d:82:08:06:dc:a0:b0:15:ee:9c:c5:38:83: c8:06:90:90:2f:ff:cf:23:22:56:5b:4b:e0:05:cb: ea:04:dc:fc:90:c0:cc:7a:19:8f:84:92:15:d5:e0: ab:51:7e:5d:14:00:2f:7c:4e:67:42:03:3d:2e:d5: 55:e0:54:ee:c2:b2:2e:65:2c:1d:36:03:8e:71:52: 61:cd:62:fb:55:fb:f6:b4:d4:d0:c5:73:74:66:9e: 89:1d:7f:ee:09:57:3f:53:12:50:e8:50:dd:e3:5c: 14:da:f7:b0:97:d7:62:65:bd:08:aa:a6:de:f5:2c: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:FE:45:E7:C0:70:A4:E9:B8:44:73:92:7E:DF:42:02:9C:71:64 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mr3-RefAcKTpuERzkn7fQgKccWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 31:dc:9c:e7:5e:52:90:95:52:a7:a0:0e:b0:6e:ef:6c:39:57: 12:36:3e:c4:05:14:03:9e:af:10:8d:05:4c:ed:be:16:e3:81: 92:90:5a:4a:b5:da:65:0d:2a:1b:ae:2b:ea:ba:11:e0:d1:30: e8:a7:65:ee:52:86:a2:0b:f1:97:e9:18:86:21:1f:fd:51:4a: 92:7b:b7:a1:0f:e3:35:4c:81:72:f0:04:75:b9:39:cf:ea:18: 92:da:b3:5c:88:18:b1:e5:90:8b:75:be:35:2c:93:29:48:53: fc:86:96:10:31:b9:e7:60:81:5b:88:63:c7:0e:f9:45:02:b4: a0:26:99:74:e5:69:a1:e2:ca:d1:53:c3:e9:9d:87:32:76:fa: e7:c0:e0:9c:bc:71:37:00:57:c5:6e:84:e3:a8:1c:5c:20:7f: 91:a5:3c:70:90:ae:a3:5e:49:0e:a6:8f:36:7f:1a:19:b7:8c: 17:fc:c3:ca:0a:4b:ad:f3:90:af:62:7d:bf:0f:a0:46:a5:fd: a1:15:d1:87:6d:19:11:67:1a:0b:85:f0:94:1f:23:75:3a:65: b2:d1:71:41:9e:86:3a:32:8c:c2:37:5d:60:fa:1f:9d:f9:9a: 37:f8:87:31:bc:70:b7:1a:7b:d3:d7:c4:7a:78:de:c9:0f:22: 68:1a:c1:65 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY1bJcoG7puq3vjXx4UltkLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMTMwMTYxMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWJkZmU0NWU3YzA3MGE0ZTliODQ0NzM5MjdlZGY0MjAyOWM3MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKda/CwdeWcdRvVLiy54vH+twTmt Web4TkWgyjNIVX70KzwbOLamYh71SygwUQSvlXAJh4470cw94etgauBt7z56S7Nf wqfhp8CfG3yWRhvvr4VgWE0TFuG0XuAJ8Y547rJ8Nu1Q9obiS+H83SvUG7H7KPDd c1L2ZOQquLCpWJzuokLk7Du9Bl2CCAbcoLAV7pzFOIPIBpCQL//PIyJWW0vgBcvq BNz8kMDMehmPhJIV1eCrUX5dFAAvfE5nQgM9LtVV4FTuwrIuZSwdNgOOcVJhzWL7 Vfv2tNTQxXN0Zp6JHX/uCVc/UxJQ6FDd41wU2vewl9diZb0Iqqbe9SwddwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJq9/kXnwHCk6bhEc5J+30ICnHFkMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvbXIzLVJlZkFjS1RwdUVSemtuN2ZRZ0tjY1dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADHcnOdeUpCVUqegDrBu 72w5VxI2PsQFFAOerxCNBUztvhbjgZKQWkq12mUNKhuuK+q6EeDRMOinZe5ShqIL 8ZfpGIYhH/1RSpJ7t6EP4zVMgXLwBHW5Oc/qGJLas1yIGLHlkIt1vjUskylIU/yG lhAxuedggVuIY8cO+UUCtKAmmXTlaaHiytFTw+mdhzJ2+ufA4Jy8cTcAV8VuhOOo HFwgf5GlPHCQrqNeSQ6mjzZ/Ghm3jBf8w8oKS63zkK9ifb8PoEal/aEV0YdtGRFn GguF8JQfI3U6ZbLRcUGehjoyjMI3XWD6H535mjf4hzG8cLcae9PXxHp43skPImga wWU= -----END CERTIFICATE-----Generated at Sun Dec 21 15:54:08 2025 by rpki-client