This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ULVNgiVlbqdCdvsnA4K30NaCCI.roa File: 1ULVNgiVlbqdCdvsnA4K30NaCCI.roa (raw, json) Hash identifier: N2ZoG5I8ctD+osKxI1s8PNGNt+19NbMmKC5NOaGvi8I= Subject key identifier: D5:42:D5:36:08:95:95:BA:9D:09:DB:EC:9C:0E:0A:DF:43:5A:08:22 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B27DA3CAA2CD015593104433D34FD08AC Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ULVNgiVlbqdCdvsnA4K30NaCCI.roa Signing time: Fri 13 Oct 2023 07:04:55 +0000 ROA not before: Fri 13 Oct 2023 07:04:55 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18b:27da:c79/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:27:da:3c:aa:2c:d0:15:59:31:04:43:3d:34:fd:08:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 13 07:04:55 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d542d536089595ba9d09dbec9c0e0adf435a0822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bb:56:07:09:fb:c0:a4:52:14:d5:f5:36:77: 3c:3d:ec:79:1d:04:29:4e:8f:79:01:34:7e:02:ab: 09:3b:1b:89:5b:fa:db:1c:c5:d1:2c:0c:cc:7f:09: da:cc:ef:bf:19:a1:71:8b:f0:db:c2:d2:db:a5:6d: a2:6d:2f:25:34:89:a9:1e:fb:fd:33:6a:c5:79:b6: a8:76:da:20:12:49:19:0f:f8:fa:7e:79:59:c9:4c: 98:63:24:9b:df:3f:d2:89:98:21:e8:e0:69:a8:ff: 0c:a8:eb:86:e9:49:d5:f4:19:94:50:b4:6d:e9:7e: 88:e6:1d:f5:58:f8:1d:9e:f3:57:18:bb:d9:5f:82: c4:4f:77:a0:05:9c:2b:f8:82:3d:43:4d:91:2c:d1: 65:3e:ad:b3:89:f0:62:fc:fd:89:20:b6:bc:b9:fb: 8b:92:7f:1b:2c:f8:1f:6f:71:f8:75:48:0c:2f:8c: e3:c1:4b:d0:c0:ab:bc:e3:ed:cd:2e:52:ad:e3:90: 6c:cb:7b:2f:4f:8d:4e:fc:e2:63:e9:c3:f2:95:b1: 3d:30:8c:19:78:81:79:09:d3:1f:d5:90:f8:8a:09: 42:c2:d2:09:f0:35:b5:c8:32:1f:8b:0e:e8:1d:dc: 1f:46:ec:51:eb:d9:09:91:7b:23:94:83:6c:16:2a: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:42:D5:36:08:95:95:BA:9D:09:DB:EC:9C:0E:0A:DF:43:5A:08:22 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ULVNgiVlbqdCdvsnA4K30NaCCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 80:8e:c4:c6:1b:07:30:7f:4c:7c:03:8c:d0:d0:0f:d3:3c:82: 4c:9f:5a:11:2b:e6:8e:ca:b5:13:d4:00:15:d5:26:9f:8b:c5: 55:25:58:cd:23:3d:32:77:2b:4d:10:a7:d8:ed:53:9e:f4:7b: 65:98:eb:e9:57:ea:16:2b:54:25:71:d4:e8:49:00:46:cf:7c: f6:1a:fd:95:d6:70:1b:d8:4a:58:af:29:2c:29:21:cd:5c:29: 9e:3b:a7:f3:b1:a3:e2:26:96:1b:a5:c3:11:f9:3c:a7:c4:2c: e4:99:5f:39:84:ea:f6:bf:c5:45:08:72:43:4a:93:7e:5b:a8: 8f:8a:2a:a2:a7:f0:8e:7a:a6:7e:d1:d1:a0:9b:3c:35:d9:67: 14:cf:34:a1:87:e2:a4:79:6f:39:f6:04:da:64:6d:35:27:85: 1e:01:30:da:ee:82:26:1c:b1:f3:ed:5d:9b:36:de:1a:79:02: d7:e1:0a:ad:cd:96:6d:ee:4c:15:d0:47:21:a7:73:88:e6:91: 6f:bb:4c:43:c7:1e:ad:3a:21:0b:db:7a:29:d3:09:43:37:aa: 74:ce:46:de:da:3a:d4:59:35:71:31:8a:bd:8e:b2:9b:0c:6c: f1:e1:4a:c8:f2:c4:63:0b:63:41:63:c4:f5:08:4f:92:5c:e1: 45:48:5e:ff -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYsn2jyqLNAVWTEEQz00/QisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDEzMDcwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTQyZDUzNjA4OTU5NWJhOWQwOWRiZWM5YzBlMGFkZjQzNWEwODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLtWBwn7wKRSFNX1Nnc8Pex5HQQp To95ATR+AqsJOxuJW/rbHMXRLAzMfwnazO+/GaFxi/DbwtLbpW2ibS8lNImpHvv9 M2rFebaodtogEkkZD/j6fnlZyUyYYySb3z/SiZgh6OBpqP8MqOuG6UnV9BmUULRt 6X6I5h31WPgdnvNXGLvZX4LET3egBZwr+II9Q02RLNFlPq2zifBi/P2JILa8ufuL kn8bLPgfb3H4dUgML4zjwUvQwKu84+3NLlKt45Bsy3svT41O/OJj6cPylbE9MIwZ eIF5CdMf1ZD4iglCwtIJ8DW1yDIfiw7oHdwfRuxR69kJkXsjlINsFioPRwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNVC1TYIlZW6nQnb7JwOCt9DWggiMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvMVVMVk5naVZsYnFkQ2R2c25BNEszME5hQ0NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAICOxMYbBzB/THwDjNDQ D9M8gkyfWhEr5o7KtRPUABXVJp+LxVUlWM0jPTJ3K00Qp9jtU570e2WY6+lX6hYr VCVx1OhJAEbPfPYa/ZXWcBvYSlivKSwpIc1cKZ47p/Oxo+ImlhulwxH5PKfELOSZ XzmE6va/xUUIckNKk35bqI+KKqKn8I56pn7R0aCbPDXZZxTPNKGH4qR5bzn2BNpk bTUnhR4BMNrugiYcsfPtXZs23hp5AtfhCq3Nlm3uTBXQRyGnc4jmkW+7TEPHHq06 IQvbeinTCUM3qnTORt7aOtRZNXExir2OspsMbPHhSsjyxGMLY0FjxPUIT5Jc4UVI Xv8= -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:53 2025 by rpki-client