This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J3uthYbFS8jAkk8U0lS9l2sM30M.roa File: J3uthYbFS8jAkk8U0lS9l2sM30M.roa (raw, json) Hash identifier: PhfV089BqOzHSxpynX4aVT0NJhuTzkujX37icmy3rfQ= Subject key identifier: 27:7B:AD:85:86:C5:4B:C8:C0:92:4F:14:D2:54:BD:97:6B:0C:DF:43 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C38267A30A683F3EAB1645BB98AE696F1 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J3uthYbFS8jAkk8U0lS9l2sM30M.roa Signing time: Tue 05 Dec 2023 04:04:54 +0000 ROA not before: Tue 05 Dec 2023 04:04:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 2001:67c:64:ffff:0:18c:3826:4bec/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:38:26:7a:30:a6:83:f3:ea:b1:64:5b:b9:8a:e6:96:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 5 04:04:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=277bad8586c54bc8c0924f14d254bd976b0cdf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:29:fb:12:13:ee:92:4b:16:cc:81:d1:13: 76:87:58:99:e2:4f:65:e8:41:6c:8e:7b:47:48:68: db:0a:63:64:20:5e:67:89:df:83:94:16:b9:52:08: a5:68:fb:06:25:29:44:9a:40:1d:90:69:4d:1e:fb: 20:07:8b:bf:14:7e:48:0c:39:a8:b1:dc:2f:1d:87: 11:48:a4:99:6d:9e:db:57:68:14:e9:9e:ca:7a:cd: 93:eb:ac:5e:1d:e5:5d:16:24:00:4c:87:22:64:39: 8c:e4:43:65:76:ab:09:58:ba:42:28:db:5d:c4:5a: 01:81:dd:f3:c6:f0:ad:f7:e5:e7:1e:a7:3d:37:cc: c3:05:2c:f2:7a:03:41:b7:a4:41:98:d1:47:58:e1: 88:d5:53:d2:77:76:9f:89:a9:e1:4f:11:22:00:e8: c8:7f:c1:77:39:7d:fa:aa:08:11:19:24:59:a1:e5: e7:10:7b:37:d6:90:cd:db:08:6d:59:13:38:2a:de: 5b:79:7e:c3:f0:51:99:cd:c0:bf:b0:ca:ba:b6:21: 93:b1:08:3c:f0:9c:37:98:17:52:38:34:d5:c5:10: ab:50:c7:31:55:5d:c8:a7:39:4e:ac:36:a7:ed:2a: c9:1b:10:e0:1b:8d:85:a6:1f:d5:ed:68:f7:31:9d: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7B:AD:85:86:C5:4B:C8:C0:92:4F:14:D2:54:BD:97:6B:0C:DF:43 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J3uthYbFS8jAkk8U0lS9l2sM30M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption a4:72:ce:36:ae:18:00:f3:3a:52:09:69:90:33:81:0e:e0:85: ec:18:6f:8e:7b:b9:53:89:52:ca:80:92:24:64:9d:c1:43:d3: 55:06:bc:82:22:2b:40:f4:24:9b:3e:f5:00:ad:e5:0d:f6:8b: 24:83:75:93:e0:68:7e:07:9d:a6:f6:c9:d0:a0:eb:94:56:c7: cb:76:98:52:92:7c:ef:37:87:53:76:3e:5f:b1:e6:66:1a:64: 43:3a:be:3b:bb:48:77:fd:1d:7d:81:c4:fa:2b:0f:fe:bf:99: f0:fa:5c:ee:5a:89:8d:91:50:f5:3b:84:5b:3b:f2:62:17:7a: e9:34:fd:ce:b7:ba:d8:b8:32:42:b7:08:5e:f2:40:26:7a:75: 25:ba:b2:9e:b6:11:7c:dc:4e:06:03:d5:2b:2f:6d:63:cc:08: 13:fd:9f:ab:cc:88:79:91:54:0c:7e:f6:c7:a5:3f:f1:30:e3: 5d:84:31:60:f0:c2:11:54:b8:bd:0c:fe:c1:1c:03:c4:b0:1a: 1e:22:3a:9d:ae:73:48:ca:70:6e:3f:5a:de:4f:f6:29:b3:a0: c2:30:56:f1:31:d4:ae:16:c5:f0:5e:a8:5e:67:ba:f2:77:41: 20:1c:a3:22:7f:ae:c3:a4:84:c7:70:c6:b6:1d:b3:ea:9f:93: a7:92:a4:81 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYw4JnowpoPz6rFkW7mK5pbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjA1MDQwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzdiYWQ4NTg2YzU0YmM4YzA5MjRmMTRkMjU0YmQ5NzZiMGNkZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkcp+xIT7pJLFsyB0RN2h1iZ4k9l 6EFsjntHSGjbCmNkIF5nid+DlBa5UgilaPsGJSlEmkAdkGlNHvsgB4u/FH5IDDmo sdwvHYcRSKSZbZ7bV2gU6Z7Kes2T66xeHeVdFiQATIciZDmM5ENldqsJWLpCKNtd xFoBgd3zxvCt9+XnHqc9N8zDBSzyegNBt6RBmNFHWOGI1VPSd3afianhTxEiAOjI f8F3OX36qggRGSRZoeXnEHs31pDN2whtWRM4Kt5beX7D8FGZzcC/sMq6tiGTsQg8 8Jw3mBdSODTVxRCrUMcxVV3IpzlOrDan7SrJGxDgG42Fph/V7Wj3MZ3rAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCd7rYWGxUvIwJJPFNJUvZdrDN9DMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvSjN1dGhZYkZTOGpBa2s4VTBsUzlsMnNNMzBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKRyzjauGADzOlIJaZAz gQ7ghewYb457uVOJUsqAkiRkncFD01UGvIIiK0D0JJs+9QCt5Q32iySDdZPgaH4H nab2ydCg65RWx8t2mFKSfO83h1N2Pl+x5mYaZEM6vju7SHf9HX2BxPorD/6/mfD6 XO5aiY2RUPU7hFs78mIXeuk0/c63uti4MkK3CF7yQCZ6dSW6sp62EXzcTgYD1Ssv bWPMCBP9n6vMiHmRVAx+9selP/Ew412EMWDwwhFUuL0M/sEcA8SwGh4iOp2uc0jK cG4/Wt5P9imzoMIwVvEx1K4WxfBeqF5nuvJ3QSAcoyJ/rsOkhMdwxrYds+qfk6eS pIE= -----END CERTIFICATE-----Generated at Tue Dec 23 09:20:09 2025 by rpki-client