This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6J1KTGi1dz7kTpUgcHSM8-0VYow.roa File: 6J1KTGi1dz7kTpUgcHSM8-0VYow.roa (raw, json) Hash identifier: 1FfQVkj0EUxE7AtmHxPEwHU9Iiem7xwh9B3i3C5IYD0= Subject key identifier: E8:9D:4A:4C:68:B5:77:3E:E4:4E:95:20:70:74:8C:F3:ED:15:62:8C Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B71B08A352EEC05E99EA668A88BFCC417 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6J1KTGi1dz7kTpUgcHSM8-0VYow.roa Signing time: Fri 27 Oct 2023 15:11:16 +0000 ROA not before: Fri 27 Oct 2023 15:11:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18b:71aa:310a/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:71:b0:8a:35:2e:ec:05:e9:9e:a6:68:a8:8b:fc:c4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 27 15:11:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=e89d4a4c68b5773ee44e952070748cf3ed15628c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:4b:dd:49:a9:f0:ef:44:7c:04:d1:fe:54: 73:37:6d:ef:5c:06:3d:2b:26:80:2d:42:8a:b8:97: 8c:3b:8d:eb:3a:50:c9:43:40:7e:a2:ad:91:16:72: 5a:20:93:b5:ea:7b:00:36:10:85:64:09:a6:9b:cb: 58:f9:e0:69:c1:a2:5d:b4:34:83:6d:49:43:06:15: d4:bb:c5:fa:48:ef:0d:49:8d:d7:e8:4c:9a:0d:be: 1b:58:8f:ff:d3:71:b3:a9:c7:a9:a1:83:00:4d:fd: 9c:b1:13:f0:92:49:96:7a:dd:c5:3a:26:3f:e1:36: 45:69:06:db:a3:44:65:ae:31:9c:7a:cc:7a:9a:e7: f5:4c:15:61:0d:9b:db:7e:f2:93:6f:c0:bc:d1:66: 6d:cc:62:42:93:88:29:22:4d:8d:2f:08:fa:46:ca: 90:d6:fc:17:dd:78:61:c7:c3:48:3a:66:3e:76:0f: 51:ad:5c:a9:99:15:1a:5d:dc:ab:3f:17:77:bb:ba: f1:08:03:d9:1a:52:f1:22:0a:ca:e1:f6:2f:7a:6e: 9c:4e:04:3d:91:95:02:d8:12:90:f3:ee:be:31:a4: 62:2e:1c:12:af:d6:ef:10:1a:c3:a0:49:f5:61:24: 3b:ec:eb:fa:92:b8:0c:39:55:25:49:3e:17:84:de: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9D:4A:4C:68:B5:77:3E:E4:4E:95:20:70:74:8C:F3:ED:15:62:8C X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6J1KTGi1dz7kTpUgcHSM8-0VYow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption ae:8c:e1:e1:95:8c:0d:e4:60:41:8c:d6:16:73:3a:4c:54:47: 2a:84:2d:a3:db:35:86:b0:cd:f6:75:cb:08:9e:24:0b:f4:d3: f3:ac:02:de:c0:7b:17:35:38:99:17:77:b2:64:f6:76:28:7f: c9:e0:5e:fc:d5:8e:d3:7d:0e:18:c1:76:49:9d:9d:5c:fa:16: d3:c8:5e:9c:82:95:1e:20:f6:45:11:a0:f7:d9:39:0a:5b:e5: 96:a6:ca:c9:97:7d:a3:ac:50:99:ab:67:e5:14:4a:34:d6:cb: 11:c5:36:5d:29:9b:1c:f1:1e:f9:1e:a9:3e:5d:e4:22:0f:15: ff:24:aa:2c:be:16:37:a0:3e:33:96:a3:1f:2f:d0:b1:b8:b9: d9:f9:66:95:f8:42:44:cd:33:e3:f1:8e:1f:77:d7:78:37:89: 10:4c:35:29:99:01:e9:a6:97:c9:6f:91:cf:f3:c3:b2:90:17: e0:50:bc:80:8d:39:fe:0d:0c:14:73:70:4c:8f:34:df:43:dc: 31:c8:39:85:e1:36:89:b8:63:80:c2:61:ad:c0:c6:fc:0c:65: b7:f4:97:f4:9a:90:79:e5:26:21:c5:93:50:cc:19:18:0e:5c: 48:5d:4c:ec:57:cf:a6:77:cb:e9:cd:03:a5:a6:07:4c:6a:df: 3b:f9:e1:16 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYtxsIo1LuwF6Z6maKiL/MQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDI3MTUxMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODlkNGE0YzY4YjU3NzNlZTQ0ZTk1MjA3MDc0OGNmM2VkMTU2MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPVL3Ump8O9EfATR/lRzN23vXAY9 KyaALUKKuJeMO43rOlDJQ0B+oq2RFnJaIJO16nsANhCFZAmmm8tY+eBpwaJdtDSD bUlDBhXUu8X6SO8NSY3X6EyaDb4bWI//03GzqcepoYMATf2csRPwkkmWet3FOiY/ 4TZFaQbbo0RlrjGcesx6muf1TBVhDZvbfvKTb8C80WZtzGJCk4gpIk2NLwj6RsqQ 1vwX3Xhhx8NIOmY+dg9RrVypmRUaXdyrPxd3u7rxCAPZGlLxIgrK4fYvem6cTgQ9 kZUC2BKQ8+6+MaRiLhwSr9bvEBrDoEn1YSQ77Ov6krgMOVUlST4XhN4xBwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOidSkxotXc+5E6VIHB0jPPtFWKMMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvNkoxS1RHaTFkejdrVHBVZ2NIU004LTBWWW93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK6M4eGVjA3kYEGM1hZz OkxURyqELaPbNYawzfZ1ywieJAv00/OsAt7Aexc1OJkXd7Jk9nYof8ngXvzVjtN9 DhjBdkmdnVz6FtPIXpyClR4g9kURoPfZOQpb5ZamysmXfaOsUJmrZ+UUSjTWyxHF Nl0pmxzxHvkeqT5d5CIPFf8kqiy+FjegPjOWox8v0LG4udn5ZpX4QkTNM+Pxjh93 13g3iRBMNSmZAemml8lvkc/zw7KQF+BQvICNOf4NDBRzcEyPNN9D3DHIOYXhNom4 Y4DCYa3AxvwMZbf0l/SakHnlJiHFk1DMGRgOXEhdTOxXz6Z3y+nNA6WmB0xq3zv5 4RY= -----END CERTIFICATE-----Generated at Thu Jan 1 09:08:21 2026 by rpki-client