This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Y9_tA4h9pDKuwLOvZdi54CyxQI.roa File: 7Y9_tA4h9pDKuwLOvZdi54CyxQI.roa (raw, json) Hash identifier: Npf4MLMQvinkrknLHoqcK9PrzIbmoaccUsRM2OlYG18= Subject key identifier: ED:8F:7F:B4:0E:21:F6:90:CA:BB:02:CE:BD:97:62:E7:80:B2:C5:02 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B3FE6051E06187C319D8843E53915CA37 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Y9_tA4h9pDKuwLOvZdi54CyxQI.roa Signing time: Tue 17 Oct 2023 23:08:41 +0000 ROA not before: Tue 17 Oct 2023 23:08:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:3fe2:f356/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:3f:e6:05:1e:06:18:7c:31:9d:88:43:e5:39:15:ca:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 17 23:08:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ed8f7fb40e21f690cabb02cebd9762e780b2c502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:93:88:eb:c1:c5:36:00:81:58:2a:b4:0f: 0c:c8:c3:e1:75:02:da:b1:ca:9a:0f:6e:52:3d:8a: 5b:33:78:7c:d4:e3:3a:98:17:80:9f:5c:1c:40:23: cf:40:92:63:5f:8c:47:76:43:f2:e9:24:96:f5:09: ff:5f:1d:66:86:d4:97:34:5e:55:f8:f9:fc:94:10: 42:a1:a3:71:34:12:b2:5a:03:67:fa:37:99:a4:38: 94:0c:34:68:8e:3e:6a:24:1e:f3:cd:c5:57:8b:bb: 80:75:57:0a:80:9e:91:ee:25:b8:c1:ea:df:23:93: bf:35:d9:7c:01:f7:ef:ef:77:b5:08:a7:2e:60:88: 53:75:20:b0:e4:76:dd:13:56:18:dc:49:65:23:53: 62:41:b5:aa:d1:af:d7:b0:f6:7a:12:8e:fd:5b:22: d7:8e:c9:d1:23:2a:a5:c7:4c:c5:4e:99:e3:12:ea: b2:e0:33:33:04:66:19:5c:26:1c:77:ff:5d:27:48: e9:1d:13:d7:6e:ba:c5:26:4f:fb:f3:71:19:32:ec: d8:ec:56:c9:7e:2a:9d:60:0c:75:c6:1a:77:67:1f: d6:08:1f:8a:83:99:0a:4d:7b:a8:27:2a:7f:f6:7c: ac:bd:97:69:0d:48:ae:c5:24:9b:da:7f:73:bc:e4: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:7F:B4:0E:21:F6:90:CA:BB:02:CE:BD:97:62:E7:80:B2:C5:02 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7Y9_tA4h9pDKuwLOvZdi54CyxQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 93:7e:9a:5b:a4:38:63:fa:fb:af:e7:8c:3d:01:da:48:d6:1d: 51:7d:1e:39:77:a7:c0:88:2a:95:a4:fe:c3:9d:46:20:71:83: aa:85:c4:49:dc:f7:dc:d8:59:16:7c:22:af:09:e9:63:b9:51: 94:85:54:05:fc:4b:00:76:05:67:62:53:b2:e7:68:49:13:3d: 23:9d:c6:62:f4:0d:6a:05:d2:9c:57:1c:99:33:c0:e1:10:73: 63:8c:1a:ae:82:41:88:bb:15:b0:21:dd:ba:03:04:67:35:56: c4:7a:a2:52:f9:d1:35:59:26:18:b3:89:1f:2c:61:01:bc:fc: 3f:7a:4a:99:22:71:d9:8e:2d:27:a6:08:dd:38:6b:69:98:b8: 74:43:a9:e6:e0:a2:d2:ee:75:e9:58:a4:89:91:97:d8:17:0f: 22:fe:e9:41:03:7c:1a:14:e8:94:cc:06:84:50:6f:f5:62:43: 2f:f0:72:16:37:fe:b9:b7:e2:ad:20:59:ea:e4:61:e0:6a:0e: 47:64:3a:c3:a9:b7:98:91:bc:d4:55:d2:67:cb:1a:b5:81:80: 29:b0:2f:6f:83:17:a8:4f:a6:ed:15:26:75:58:07:ac:e7:c9: 1a:e8:fa:e5:b9:95:83:a3:d3:3d:bf:57:76:8a:af:cd:3a:fd: 65:ac:5a:f3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYs/5gUeBhh8MZ2IQ+U5Fco3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDE3MjMwODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDhmN2ZiNDBlMjFmNjkwY2FiYjAyY2ViZDk3NjJlNzgwYjJjNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnOTiOvBxTYAgVgqtA8MyMPhdQLa scqaD25SPYpbM3h81OM6mBeAn1wcQCPPQJJjX4xHdkPy6SSW9Qn/Xx1mhtSXNF5V +Pn8lBBCoaNxNBKyWgNn+jeZpDiUDDRojj5qJB7zzcVXi7uAdVcKgJ6R7iW4werf I5O/Ndl8Affv73e1CKcuYIhTdSCw5HbdE1YY3EllI1NiQbWq0a/XsPZ6Eo79WyLX jsnRIyqlx0zFTpnjEuqy4DMzBGYZXCYcd/9dJ0jpHRPXbrrFJk/783EZMuzY7FbJ fiqdYAx1xhp3Zx/WCB+Kg5kKTXuoJyp/9nysvZdpDUiuxSSb2n9zvORP0wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO2Pf7QOIfaQyrsCzr2XYueAssUCMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvN1k5X3RBNGg5cERLdXdMT3ZaZGk1NEN5eFFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJN+mlukOGP6+6/njD0B 2kjWHVF9Hjl3p8CIKpWk/sOdRiBxg6qFxEnc99zYWRZ8Iq8J6WO5UZSFVAX8SwB2 BWdiU7LnaEkTPSOdxmL0DWoF0pxXHJkzwOEQc2OMGq6CQYi7FbAh3boDBGc1VsR6 olL50TVZJhiziR8sYQG8/D96SpkicdmOLSemCN04a2mYuHRDqebgotLudelYpImR l9gXDyL+6UEDfBoU6JTMBoRQb/ViQy/wchY3/rm34q0gWerkYeBqDkdkOsOpt5iR vNRV0mfLGrWBgCmwL2+DF6hPpu0VJnVYB6znyRro+uW5lYOj0z2/V3aKr806/WWs WvM= -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:09 2025 by rpki-client