This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYqHK01ulgcEyOpUvM8lNJZWL1A.roa File: EYqHK01ulgcEyOpUvM8lNJZWL1A.roa (raw, json) Hash identifier: SDsoLmHEMOeB90MihtKwrmLL/pLnby5zo5e7qJ5x0CM= Subject key identifier: 11:8A:87:2B:4D:6E:96:07:04:C8:EA:54:BC:CF:25:34:96:56:2F:50 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C784F36993037DC15DC5940EF8430AB44 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYqHK01ulgcEyOpUvM8lNJZWL1A.roa Signing time: Sun 17 Dec 2023 15:05:06 +0000 ROA not before: Sun 17 Dec 2023 15:05:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18c:784e:7385/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:78:4f:36:99:30:37:dc:15:dc:59:40:ef:84:30:ab:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 17 15:05:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=118a872b4d6e960704c8ea54bccf253496562f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a7:ed:b9:6a:f0:27:6a:53:86:8a:7a:42:0f: 63:24:b4:c7:d1:3d:bf:5d:d0:87:7c:7b:b8:41:30: f8:c6:3f:10:7c:be:aa:ad:20:ef:b8:5e:5f:8f:6e: 6f:7a:13:42:16:25:70:ce:88:6a:76:9b:48:9a:af: 7c:dc:bc:45:c2:bc:4b:f3:34:b9:f8:81:b2:55:aa: 24:e2:76:92:37:24:5f:20:a7:f9:ac:74:29:b0:c8: 50:89:eb:ab:f6:f6:f2:4a:6f:e4:24:c7:4f:ad:8d: 92:ad:62:8d:f4:75:70:f6:17:c6:80:23:1b:74:a7: f8:13:a4:54:cc:cb:cd:9b:3e:4c:80:e0:be:cd:b1: 28:15:eb:53:32:89:e2:28:df:36:65:e1:15:6b:a8: f3:fe:2c:84:98:87:59:2c:d5:ff:c1:70:87:b4:9c: 33:31:88:5f:5e:2b:68:6b:c3:cd:72:90:b8:6f:ae: 24:6c:81:1d:af:ad:bd:0a:4d:d8:42:c4:2e:eb:1e: a1:9e:1f:70:9a:2e:e3:07:70:18:11:73:0a:ca:0e: 0a:77:3c:7a:f8:01:d6:1a:8a:bd:15:25:c8:40:ba: b6:ae:7e:15:03:cb:ec:ed:25:a9:63:d4:84:a9:39: 60:7b:fb:ff:0f:a9:a5:1c:a2:65:48:ca:86:11:07: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:87:2B:4D:6E:96:07:04:C8:EA:54:BC:CF:25:34:96:56:2F:50 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EYqHK01ulgcEyOpUvM8lNJZWL1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 3f:70:ae:2c:05:e7:0a:ba:f8:70:2d:08:4d:b1:79:1f:f3:aa: 1c:bb:34:25:b0:32:4e:9b:85:ad:1b:57:b5:a7:c1:ba:b7:41: f1:b4:90:d5:df:a7:b3:83:86:57:3f:a3:73:35:31:c6:78:3c: 51:7e:85:4b:6f:a3:aa:8e:be:1a:92:ac:a7:28:40:a8:5f:2a: a1:ff:26:e7:75:1c:9f:42:8b:d5:25:ec:bb:5c:ae:ab:4d:c5: b0:41:2a:90:4a:2b:e8:59:c8:12:6e:72:d0:38:5d:6f:9b:19: 66:0d:a0:76:a6:48:3c:bc:cf:c1:fd:18:1e:b0:9a:cf:cc:59: f7:70:b7:af:7b:b8:7d:f7:29:69:1d:33:b3:f6:95:1e:51:d4: 32:2b:8d:10:08:f1:d2:2e:36:f3:d7:ab:30:63:19:94:8e:45: 81:cd:97:ce:0c:a6:54:6f:92:96:2a:82:bf:10:0a:89:4d:5b: 58:1c:42:3a:6a:fe:07:c1:70:25:85:7a:63:6a:de:bf:b1:e9: 29:95:c2:5d:11:d7:d0:74:0a:9d:45:f9:c3:05:63:40:77:95: 59:75:b4:53:20:5a:ce:a8:89:8f:a2:8e:4a:a8:d0:27:fb:e5: 8b:c6:43:bf:7b:5f:b8:a5:3e:8b:0b:7a:7a:3e:8c:f3:29:95: cf:e4:1c:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYx4TzaZMDfcFdxZQO+EMKtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjE3MTUwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMThhODcyYjRkNmU5NjA3MDRjOGVhNTRiY2NmMjUzNDk2NTYyZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66ftuWrwJ2pThop6Qg9jJLTH0T2/ XdCHfHu4QTD4xj8QfL6qrSDvuF5fj25vehNCFiVwzohqdptImq983LxFwrxL8zS5 +IGyVaok4naSNyRfIKf5rHQpsMhQieur9vbySm/kJMdPrY2SrWKN9HVw9hfGgCMb dKf4E6RUzMvNmz5MgOC+zbEoFetTMoniKN82ZeEVa6jz/iyEmIdZLNX/wXCHtJwz MYhfXitoa8PNcpC4b64kbIEdr629Ck3YQsQu6x6hnh9wmi7jB3AYEXMKyg4Kdzx6 +AHWGoq9FSXIQLq2rn4VA8vs7SWpY9SEqTlge/v/D6mlHKJlSMqGEQd8WwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBGKhytNbpYHBMjqVLzPJTSWVi9QMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvRVlxSEswMXVsZ2NFeU9wVXZNOGxOSlpXTDFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD9wriwF5wq6+HAtCE2x eR/zqhy7NCWwMk6bha0bV7Wnwbq3QfG0kNXfp7ODhlc/o3M1McZ4PFF+hUtvo6qO vhqSrKcoQKhfKqH/Jud1HJ9Ci9Ul7LtcrqtNxbBBKpBKK+hZyBJuctA4XW+bGWYN oHamSDy8z8H9GB6wms/MWfdwt697uH33KWkdM7P2lR5R1DIrjRAI8dIuNvPXqzBj GZSORYHNl84MplRvkpYqgr8QColNW1gcQjpq/gfBcCWFemNq3r+x6SmVwl0R19B0 Cp1F+cMFY0B3lVl1tFMgWs6oiY+ijkqo0Cf75YvGQ797X7ilPosLeno+jPMplc/k HMg= -----END CERTIFICATE-----Generated at Fri Dec 26 09:29:47 2025 by rpki-client