This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xMj_xmmDVPTJBayxmL5U-Rga3Qs.roa File: xMj_xmmDVPTJBayxmL5U-Rga3Qs.roa (raw, json) Hash identifier: XWT80JXiC9Yjef6KLEd8TQj9rQtU+1aUwwgfqlJ/nEs= Subject key identifier: C4:C8:FF:C6:69:83:54:F4:C9:05:AC:B1:98:BE:54:F9:18:1A:DD:0B Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01903C36106FCAE090118346CC39CE38C2FF Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xMj_xmmDVPTJBayxmL5U-Rga3Qs.roa Signing time: Fri 21 Jun 2024 19:11:34 +0000 ROA not before: Fri 21 Jun 2024 19:11:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:3c:36:10:6f:ca:e0:90:11:83:46:cc:39:ce:38:c2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jun 21 19:11:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=c4c8ffc6698354f4c905acb198be54f9181add0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:bd:83:34:3d:96:4e:2d:f9:ef:3b:9f:2f: 79:ee:a0:c6:3b:4b:00:73:5b:2f:41:f1:0d:3e:30: a2:a3:0f:9f:5e:ce:3d:34:5c:b6:41:1f:dd:23:54: be:3f:f4:6e:4d:25:46:e4:cb:c7:35:e6:0c:c2:42: ac:8d:32:e0:9a:89:d5:0c:ca:1b:83:c8:b7:b4:71: fb:da:39:87:88:db:96:38:88:6b:e4:71:42:65:54: b4:89:33:4c:31:46:7b:6f:b4:22:bc:57:02:46:6b: 65:30:b0:ab:db:da:75:ab:21:cd:74:dd:e7:0a:8c: ba:55:a8:42:e7:fe:3e:8f:f2:e5:2c:83:e9:fa:c7: 0a:4b:07:e7:9b:35:33:c6:9f:7c:eb:20:a5:80:a5: 58:b3:35:bd:34:06:68:8b:ae:f7:47:51:cf:80:da: fc:18:f8:98:b3:6d:7c:51:79:1f:0f:c0:b3:6d:d9: ed:99:cc:2b:31:8b:a0:e4:a3:0b:ab:56:03:b4:85: 17:9a:8b:cc:8e:aa:e9:98:b3:f7:4c:97:fd:86:c0: d5:79:01:ed:9d:83:9d:f9:db:f6:a0:b5:98:30:48: c9:3a:2d:a6:84:22:16:25:8d:66:cc:fc:89:54:e4: 2d:7b:27:f2:42:af:07:e1:1e:6a:46:35:f8:ac:af: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:FF:C6:69:83:54:F4:C9:05:AC:B1:98:BE:54:F9:18:1A:DD:0B X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xMj_xmmDVPTJBayxmL5U-Rga3Qs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 48:0f:3a:f6:00:49:61:42:bf:27:fb:10:0e:a8:fc:a1:b4:b5: 4d:4e:70:66:be:39:20:df:d9:51:4c:6d:75:db:22:5e:91:42: f4:4d:b3:fc:ff:83:0d:b7:1a:0f:f5:b9:3d:99:2d:ad:de:62: 3f:50:eb:e6:67:0b:88:ab:6e:5c:b1:f8:bb:b1:88:23:d7:3a: 69:cb:cc:fa:df:7c:6e:10:de:bf:66:c1:82:88:87:aa:54:71: 16:33:f7:fb:cc:32:cb:5a:ef:ff:63:16:01:e4:6e:00:a9:c3: d6:cb:04:4b:f7:02:23:32:dd:ab:db:89:29:e0:52:53:7b:1c: 54:22:c0:9d:28:44:3d:e5:94:3d:7b:0b:53:28:0d:d4:9d:7f: ba:3d:9c:a5:9f:c8:86:14:4a:eb:8d:67:41:17:cd:4f:4c:03: 95:cd:82:80:f3:2e:9c:05:02:3c:04:fd:ad:63:e2:17:21:79: 00:df:a9:00:e6:0e:f4:52:33:0c:9e:64:6e:8c:98:e3:72:07: 69:64:87:d9:18:15:cb:c3:e5:39:bc:ad:3a:4a:a2:e7:33:6b: 91:40:2d:b2:da:07:5e:98:d7:e4:b9:02:94:44:8c:be:db:3e: 2a:58:90:4a:60:d5:f4:23:7d:e9:3b:57:9e:cb:77:ee:3d:7d: 96:54:4a:f9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZA8NhBvyuCQEYNGzDnOOML/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNjIxMTkxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGM4ZmZjNjY5ODM1NGY0YzkwNWFjYjE5OGJlNTRmOTE4MWFkZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpq9gzQ9lk4t+e87ny957qDGO0sA c1svQfENPjCiow+fXs49NFy2QR/dI1S+P/RuTSVG5MvHNeYMwkKsjTLgmonVDMob g8i3tHH72jmHiNuWOIhr5HFCZVS0iTNMMUZ7b7QivFcCRmtlMLCr29p1qyHNdN3n Coy6VahC5/4+j/LlLIPp+scKSwfnmzUzxp986yClgKVYszW9NAZoi673R1HPgNr8 GPiYs218UXkfD8CzbdntmcwrMYug5KMLq1YDtIUXmovMjqrpmLP3TJf9hsDVeQHt nYOd+dv2oLWYMEjJOi2mhCIWJY1mzPyJVOQteyfyQq8H4R5qRjX4rK8piwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMTI/8Zpg1T0yQWssZi+VPkYGt0LMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEveE1qX3htbURWUFRKQmF5eG1MNVUtUmdhM1FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEgPOvYASWFCvyf7EA6o /KG0tU1OcGa+OSDf2VFMbXXbIl6RQvRNs/z/gw23Gg/1uT2ZLa3eYj9Q6+ZnC4ir blyx+LuxiCPXOmnLzPrffG4Q3r9mwYKIh6pUcRYz9/vMMsta7/9jFgHkbgCpw9bL BEv3AiMy3avbiSngUlN7HFQiwJ0oRD3llD17C1MoDdSdf7o9nKWfyIYUSuuNZ0EX zU9MA5XNgoDzLpwFAjwE/a1j4hcheQDfqQDmDvRSMwyeZG6MmONyB2lkh9kYFcvD 5Tm8rTpKoucza5FALbLaB16Y1+S5ApREjL7bPipYkEpg1fQjfek7V57Ld+49fZZU Svk= -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:51 2025 by rpki-client