This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/u09oYOGgZM3IdquPVZmcDt_Okqg.roa File: u09oYOGgZM3IdquPVZmcDt_Okqg.roa (raw, json) Hash identifier: q0KWhNUhmYMLErc3P/SIRgAE49oHMTIaFOd9Eu81FyU= Subject key identifier: BB:4F:68:60:E1:A0:64:CD:C8:76:AB:8F:55:99:9C:0E:DF:CE:92:A8 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018E4EAE8A386CAD1A207A1227D287401A90 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/u09oYOGgZM3IdquPVZmcDt_Okqg.roa Signing time: Sun 17 Mar 2024 23:10:45 +0000 ROA not before: Sun 17 Mar 2024 23:10:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128 2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:4e:ae:8a:38:6c:ad:1a:20:7a:12:27:d2:87:40:1a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Mar 17 23:10:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=bb4f6860e1a064cdc876ab8f55999c0edfce92a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:78:72:4d:86:9e:f6:4b:9f:ec:4b:d6:a7:76: 38:9f:a1:b4:59:08:75:ab:c5:b6:f8:35:a9:a1:1d: e7:75:8a:0b:27:5c:57:bf:0a:c6:14:e1:3a:7a:60: 00:5a:dc:ac:72:44:40:ac:43:bb:10:06:7a:ed:81: 30:1a:96:c7:52:e8:cc:0c:75:70:f3:45:c3:82:a0: 1c:b3:d9:a1:64:98:0d:7b:c9:6f:54:3e:44:8e:66: 29:4a:56:e5:f4:b9:ce:ef:a3:dd:b9:cb:b3:6e:0b: a5:1d:3c:55:60:eb:6a:04:b8:70:b5:69:17:8e:fe: 82:2e:1f:6f:1c:28:9d:b9:03:34:ee:c6:c3:ad:98: 72:5b:a2:d5:d6:09:ff:85:c0:78:b6:a2:ff:ff:d5: 53:0c:bb:cd:c5:8c:f4:4f:03:ce:ab:39:f9:60:92: a5:06:0c:c9:71:7d:e1:33:f3:c6:a8:64:7c:55:4d: 37:38:13:97:94:31:25:a2:9a:5e:ac:1c:8b:64:3e: 25:29:41:92:7c:9b:b7:d7:d0:0f:f7:2f:fa:47:76: b7:8b:4d:a5:cb:1a:62:4c:fe:89:9c:10:a0:62:f3: f3:38:a3:38:06:0c:3d:cf:b9:61:5f:4a:c5:20:66: 6b:0b:fd:7a:3b:70:82:38:81:c4:36:c0:22:0b:eb: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4F:68:60:E1:A0:64:CD:C8:76:AB:8F:55:99:9C:0E:DF:CE:92:A8 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/u09oYOGgZM3IdquPVZmcDt_Okqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 6a:e6:12:3e:7a:11:21:19:7e:a0:1c:59:24:65:0c:78:9d:04: 2d:20:2b:13:fc:14:0b:3f:fa:0e:17:6a:c2:3a:52:2a:17:81: 4f:8b:83:d0:bd:25:0b:3a:b6:69:a2:59:37:9e:79:84:56:7d: cb:b3:f2:70:49:84:76:ec:43:77:e1:7c:b1:aa:6c:17:b4:44: 37:2a:e3:f4:b8:56:6e:34:68:f9:c5:98:70:a4:26:b4:33:6f: c2:97:a5:16:e1:10:7d:a0:43:08:3c:46:1e:65:2b:fa:f2:e9: f4:ce:d2:4c:93:99:c7:0c:0d:4d:40:7d:be:48:ad:3b:65:48: b9:34:12:fa:bb:dd:44:43:91:85:8c:89:4c:f3:47:e4:3b:a7: 67:31:fd:25:5a:79:45:4d:fd:e8:e4:7d:11:88:f7:ee:ad:b0: 4f:8d:0a:b4:56:ce:a0:88:c3:8e:ae:04:7f:84:a6:1b:50:02: ca:a7:3a:20:96:a1:17:bb:6f:25:07:a1:91:fc:52:87:5e:83: 81:e8:51:12:77:32:a8:19:df:28:7e:20:5f:10:b5:7c:b0:22: 53:b7:b7:cb:ee:22:50:b9:88:57:9a:c0:34:43:aa:62:77:f1: 25:c3:df:03:aa:0d:66:08:4a:35:28:73:6f:6e:fb:f8:3d:eb: cb:41:20:c4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY5Oroo4bK0aIHoSJ9KHQBqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjQwMzE3MjMxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjRmNjg2MGUxYTA2NGNkYzg3NmFiOGY1NTk5OWMwZWRmY2U5MmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknhyTYae9kuf7EvWp3Y4n6G0WQh1 q8W2+DWpoR3ndYoLJ1xXvwrGFOE6emAAWtysckRArEO7EAZ67YEwGpbHUujMDHVw 80XDgqAcs9mhZJgNe8lvVD5EjmYpSlbl9LnO76PducuzbgulHTxVYOtqBLhwtWkX jv6CLh9vHCiduQM07sbDrZhyW6LV1gn/hcB4tqL//9VTDLvNxYz0TwPOqzn5YJKl BgzJcX3hM/PGqGR8VU03OBOXlDElopperByLZD4lKUGSfJu319AP9y/6R3a3i02l yxpiTP6JnBCgYvPzOKM4Bgw9z7lhX0rFIGZrC/16O3CCOIHENsAiC+usYwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLtPaGDhoGTNyHarj1WZnA7fzpKoMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvdTA5b1lPR2daTTNJZHF1UFZabWNEdF9Pa3FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGrmEj56ESEZfqAcWSRl DHidBC0gKxP8FAs/+g4XasI6UioXgU+Lg9C9JQs6tmmiWTeeeYRWfcuz8nBJhHbs Q3fhfLGqbBe0RDcq4/S4Vm40aPnFmHCkJrQzb8KXpRbhEH2gQwg8Rh5lK/ry6fTO 0kyTmccMDU1Afb5IrTtlSLk0Evq73URDkYWMiUzzR+Q7p2cx/SVaeUVN/ejkfRGI 9+6tsE+NCrRWzqCIw46uBH+EphtQAsqnOiCWoRe7byUHoZH8Uodeg4HoURJ3MqgZ 3yh+IF8QtXywIlO3t8vuIlC5iFeawDRDqmJ38SXD3wOqDWYISjUoc29u+/g968tB IMQ= -----END CERTIFICATE-----Generated at Sun Dec 21 15:54:09 2025 by rpki-client