This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7DejLxacrlkg1y_I8gkG_M9YIkA.roa File: 7DejLxacrlkg1y_I8gkG_M9YIkA.roa (raw, json) Hash identifier: AKe/OLw5/0NlqTG6h7m6yS6rteZix8PJaJW7PLRMJhw= Subject key identifier: EC:37:A3:2F:16:9C:AE:59:20:D7:2F:C8:F2:09:06:FC:CF:58:22:40 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018AD273ECE2294FE6FA7DEE3D9A1B8A81F9 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7DejLxacrlkg1y_I8gkG_M9YIkA.roa Signing time: Tue 26 Sep 2023 17:05:27 +0000 ROA not before: Tue 26 Sep 2023 17:05:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:d273:ce9d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:d2:73:ec:e2:29:4f:e6:fa:7d:ee:3d:9a:1b:8a:81:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Sep 26 17:05:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ec37a32f169cae5920d72fc8f20906fccf582240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:3a:d8:cf:e3:b9:c8:0c:99:c2:ca:04:bf: 23:80:24:79:65:5b:87:1d:3f:af:15:c9:fe:33:d8: 97:c8:d0:90:1b:59:9a:bd:6f:30:ff:52:4a:e0:82: 7c:30:83:55:65:e1:b8:17:05:1e:1a:d1:ca:fc:f2: f0:f4:14:3e:4e:9c:d1:f1:a7:58:0d:a6:64:99:a5: f4:62:1b:a9:19:b7:3c:53:e9:28:ff:46:b9:4d:ef: 15:63:80:e8:97:c1:23:cf:67:96:3f:c0:10:2e:59: dd:3b:46:40:42:21:d9:b1:3e:1e:50:97:86:7b:63: 53:10:b2:d0:92:a1:77:99:6c:1b:77:ac:65:5e:df: 8d:35:97:1a:f5:eb:be:a4:c5:59:62:ea:8c:4b:1c: 46:d4:4a:ce:fb:f6:2e:31:19:1f:d0:b9:6d:44:11: c4:9f:58:2b:64:33:4e:42:74:f8:d7:dc:80:94:d1: 23:a0:59:7c:da:0d:87:8d:8f:a4:cd:b3:6c:e0:4e: 71:32:da:b8:35:e7:00:d3:29:6c:b5:50:fa:28:ef: 89:0e:f2:5a:f6:4b:05:c2:6e:07:cf:5f:a6:11:b0: 5c:0b:7d:3a:43:f4:2b:96:35:12:a2:3c:fd:3e:96: f1:91:e1:25:c8:85:d9:d5:d8:69:ad:2a:65:54:1c: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:37:A3:2F:16:9C:AE:59:20:D7:2F:C8:F2:09:06:FC:CF:58:22:40 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7DejLxacrlkg1y_I8gkG_M9YIkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption ac:4c:b1:ac:7f:12:71:a0:dc:c2:f1:b8:dd:70:25:52:96:b2: 94:69:f8:2b:25:b4:20:e9:11:6d:4a:61:bc:95:06:ae:46:f5: 4a:bf:7c:f8:a2:2d:1d:2e:87:09:e5:83:bb:03:b5:f3:d1:9e: e5:47:a4:a2:1d:48:9b:2a:ec:21:f2:fc:66:0f:c2:91:ba:d6: 35:48:fc:37:f1:0e:8f:21:c5:48:77:df:81:33:b2:a0:0d:55: 40:ea:56:d3:65:ea:65:e3:14:75:c7:7e:62:c4:cc:2c:61:ff: a6:9b:76:b6:35:e6:55:c9:96:cf:a7:6c:44:e0:bb:9a:06:57: 2a:e0:9a:b0:3a:c3:97:a8:df:16:92:93:38:8d:8d:72:a5:9a: 43:31:fc:4c:d8:b2:55:0a:ed:68:fd:51:0f:b3:d5:7b:0e:59: 47:55:6c:f6:08:cc:28:fb:84:ea:9f:03:13:2f:06:b2:a6:3b: 4f:b4:73:5b:ee:b0:a9:54:37:d3:f4:99:41:60:27:f3:59:1b: 1c:75:e7:80:35:bc:d0:b5:b1:46:2c:7c:b8:fb:f8:18:21:c5: a6:0a:f1:82:ec:76:5b:d3:81:33:a7:4b:a0:d1:74:9e:30:7d: ee:b8:0d:fe:97:86:9f:ee:77:f5:3e:b9:91:30:ec:bc:cc:54: de:af:46:f5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYrSc+ziKU/m+n3uPZobioH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMwOTI2MTcwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzM3YTMyZjE2OWNhZTU5MjBkNzJmYzhmMjA5MDZmY2NmNTgyMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNE62M/jucgMmcLKBL8jgCR5ZVuH HT+vFcn+M9iXyNCQG1mavW8w/1JK4IJ8MINVZeG4FwUeGtHK/PLw9BQ+TpzR8adY DaZkmaX0YhupGbc8U+ko/0a5Te8VY4Dol8Ejz2eWP8AQLlndO0ZAQiHZsT4eUJeG e2NTELLQkqF3mWwbd6xlXt+NNZca9eu+pMVZYuqMSxxG1ErO+/YuMRkf0LltRBHE n1grZDNOQnT419yAlNEjoFl82g2HjY+kzbNs4E5xMtq4NecA0ylstVD6KO+JDvJa 9ksFwm4Hz1+mEbBcC306Q/QrljUSojz9PpbxkeElyIXZ1dhprSplVBzEHQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOw3oy8WnK5ZINcvyPIJBvzPWCJAMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvN0Rlakx4YWNybGtnMXlfSThna0dfTTlZSWtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKxMsax/EnGg3MLxuN1w JVKWspRp+CsltCDpEW1KYbyVBq5G9Uq/fPiiLR0uhwnlg7sDtfPRnuVHpKIdSJsq 7CHy/GYPwpG61jVI/DfxDo8hxUh334EzsqANVUDqVtNl6mXjFHXHfmLEzCxh/6ab drY15lXJls+nbETgu5oGVyrgmrA6w5eo3xaSkziNjXKlmkMx/EzYslUK7Wj9UQ+z 1XsOWUdVbPYIzCj7hOqfAxMvBrKmO0+0c1vusKlUN9P0mUFgJ/NZGxx154A1vNC1 sUYsfLj7+BghxaYK8YLsdlvTgTOnS6DRdJ4wfe64Df6Xhp/ud/U+uZEw7LzMVN6v RvU= -----END CERTIFICATE-----Generated at Thu Jan 1 18:03:29 2026 by rpki-client