This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EfX51120mOz87-7shoZCL9iNO-o.roa File: EfX51120mOz87-7shoZCL9iNO-o.roa (raw, json) Hash identifier: EcrBrPuj0qvX0UMD5mBRZAMV28unq1MFuKauHQm3osI= Subject key identifier: 11:F5:F9:D7:5D:B4:98:EC:FC:EF:EE:EC:86:86:42:2F:D8:8D:3B:EA Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018AB6C4FB3B55603F6B592549213F6F409C Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EfX51120mOz87-7shoZCL9iNO-o.roa Signing time: Thu 21 Sep 2023 08:04:37 +0000 ROA not before: Thu 21 Sep 2023 08:04:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:b6c4:9867/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:b6:c4:fb:3b:55:60:3f:6b:59:25:49:21:3f:6f:40:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Sep 21 08:04:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=11f5f9d75db498ecfcefeeec8686422fd88d3bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:7e:90:77:a8:23:c4:6d:d9:0a:50:00:8a: 65:c2:a4:e3:86:1f:4a:de:08:db:d5:9c:41:7c:df: 8a:99:66:9a:46:0b:05:5b:a7:16:cf:78:ae:4f:e9: 9d:62:26:39:92:90:8e:18:26:9a:6e:1d:b4:67:c1: aa:fd:e9:06:c0:37:e9:58:72:1b:ae:65:74:ec:56: 62:96:34:be:7c:75:8a:5c:58:0b:f4:7f:cd:e3:15: 6c:00:e7:f1:48:a8:68:17:b3:5d:ad:d0:a0:aa:07: b0:4b:be:53:2b:b6:e8:ff:78:97:41:3f:c7:cb:c7: 96:5e:0c:23:27:62:5d:a8:b4:eb:fb:e9:e6:d4:c8: 42:a0:6f:2c:4b:ef:67:78:3d:46:c9:d5:b0:63:52: ca:68:c2:0b:7d:58:0c:54:ff:c5:6c:8a:26:ed:2c: b6:d5:0b:15:f3:00:08:f6:5e:bf:e1:0c:0e:c4:07: 48:ea:d3:ab:f0:ff:78:11:af:07:4b:c9:90:02:c4: f6:18:41:fd:ab:ea:95:c9:1d:ce:89:9f:4d:df:5c: 32:6e:8d:43:5b:70:61:27:af:b8:1e:7c:aa:34:8d: ce:a6:96:16:b9:2d:84:2e:59:e5:66:db:59:eb:07: d3:c3:dd:1c:8b:3c:9d:7a:f8:0a:b7:34:f7:c6:94: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:F9:D7:5D:B4:98:EC:FC:EF:EE:EC:86:86:42:2F:D8:8D:3B:EA X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/EfX51120mOz87-7shoZCL9iNO-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 5d:65:4c:6e:de:27:6f:77:15:53:76:9a:7a:47:18:a8:e4:db: 58:f8:63:a0:e9:33:b4:64:62:53:5f:bc:71:b3:35:74:ae:f4: 1d:6d:be:08:de:e4:c5:29:41:c1:d5:a2:16:61:73:3d:4d:71: 07:1b:3d:98:c4:00:dc:0a:5b:37:fd:6e:45:4d:02:b0:03:f2: c1:33:aa:76:de:fe:bf:73:36:c5:b3:96:27:f6:ef:26:86:3b: 05:95:55:30:3a:33:3c:b5:ed:0f:2b:21:09:49:5c:1f:2f:cd: 4e:5d:ac:aa:ab:3a:54:8c:96:c2:ee:ff:26:73:49:cd:7e:cd: 45:c0:11:fc:ee:98:81:57:af:a8:c4:bb:1d:42:5e:7f:b1:6a: 01:2c:33:d0:03:60:4b:bb:37:50:7a:f1:e7:1c:c0:43:5c:a5: 04:a2:2d:04:48:00:02:94:24:5d:7d:f5:cb:65:62:1e:1a:a8: b1:a8:59:0d:a7:79:c7:68:08:5c:a7:5f:68:fd:cb:45:3d:f6: a5:90:0b:35:f7:78:61:ad:a0:57:f5:ca:61:7a:f9:62:2f:61: 94:df:23:3d:b2:79:4b:78:13:c5:65:f4:25:21:8c:36:d8:5a: 50:94:41:a6:b1:25:3e:0c:7e:43:24:b5:17:14:a4:91:e8:1a: 62:0b:e6:25 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYq2xPs7VWA/a1klSSE/b0CcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMwOTIxMDgwNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWY1ZjlkNzVkYjQ5OGVjZmNlZmVlZWM4Njg2NDIyZmQ4OGQzYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiah+kHeoI8Rt2QpQAIplwqTjhh9K 3gjb1ZxBfN+KmWaaRgsFW6cWz3iuT+mdYiY5kpCOGCaabh20Z8Gq/ekGwDfpWHIb rmV07FZiljS+fHWKXFgL9H/N4xVsAOfxSKhoF7NdrdCgqgewS75TK7bo/3iXQT/H y8eWXgwjJ2JdqLTr++nm1MhCoG8sS+9neD1GydWwY1LKaMILfVgMVP/FbIom7Sy2 1QsV8wAI9l6/4QwOxAdI6tOr8P94Ea8HS8mQAsT2GEH9q+qVyR3OiZ9N31wybo1D W3BhJ6+4HnyqNI3OppYWuS2ELlnlZttZ6wfTw90cizydevgKtzT3xpSU3wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBH1+dddtJjs/O/u7IaGQi/YjTvqMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvRWZYNTExMjBtT3o4Ny03c2hvWkNMOWlOTy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF1lTG7eJ293FVN2mnpH GKjk21j4Y6DpM7RkYlNfvHGzNXSu9B1tvgje5MUpQcHVohZhcz1NcQcbPZjEANwK Wzf9bkVNArAD8sEzqnbe/r9zNsWzlif27yaGOwWVVTA6Mzy17Q8rIQlJXB8vzU5d rKqrOlSMlsLu/yZzSc1+zUXAEfzumIFXr6jEux1CXn+xagEsM9ADYEu7N1B68ecc wENcpQSiLQRIAAKUJF199ctlYh4aqLGoWQ2necdoCFynX2j9y0U99qWQCzX3eGGt oFf1ymF6+WIvYZTfIz2yeUt4E8Vl9CUhjDbYWlCUQaaxJT4MfkMktRcUpJHoGmIL 5iU= -----END CERTIFICATE-----Generated at Mon Dec 29 01:53:14 2025 by rpki-client