This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JSO_Sczd3GgdEreNxLPEXUP6zlY.roa File: JSO_Sczd3GgdEreNxLPEXUP6zlY.roa (raw, json) Hash identifier: FDulu4x20UNl3PUxK0G8InUHqzmlx4TnboNM17WxGC8= Subject key identifier: 25:23:BF:49:CC:DD:DC:68:1D:12:B7:8D:C4:B3:C4:5D:43:FA:CE:56 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B43F672564868AB99D42400A76BB43AAB Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JSO_Sczd3GgdEreNxLPEXUP6zlY.roa Signing time: Wed 18 Oct 2023 18:05:06 +0000 ROA not before: Wed 18 Oct 2023 18:05:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:43f6:299d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:43:f6:72:56:48:68:ab:99:d4:24:00:a7:6b:b4:3a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 18 18:05:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=2523bf49ccdddc681d12b78dc4b3c45d43face56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:db:ca:85:f2:73:b9:01:73:c8:0f:ca:13: 20:92:ba:48:55:73:20:81:d0:e2:cd:be:50:74:9c: 1f:f7:0e:31:72:2a:31:98:79:b1:6a:8a:1a:e9:b1: c8:3b:5f:85:d7:0c:91:b9:d1:36:a4:12:74:ed:e1: 1c:be:ea:42:10:16:41:56:9e:f0:8c:eb:42:a7:88: 27:3d:ff:29:9d:59:83:fc:77:46:ee:a0:3b:cd:38: e4:5f:98:06:b7:74:26:8d:eb:9e:9f:73:4d:d7:af: c6:ca:25:0c:50:0d:ee:b2:fd:a3:64:40:d2:a1:89: 01:4b:fe:ca:7c:38:ac:0a:05:4f:4e:b8:e8:36:bc: 39:d1:67:80:a8:7b:12:26:68:cf:b3:3f:31:f5:1f: 62:9d:27:8a:4e:80:a2:64:52:a5:b9:f0:14:3f:0d: 06:8d:e4:43:2d:97:1e:c1:42:5d:0b:1e:e4:d9:e9: 56:0f:43:1e:3d:38:aa:3f:90:66:46:6a:83:fe:d9: 84:4f:f8:6c:0f:db:57:ce:11:b7:63:e7:38:97:5e: 60:2a:8a:04:47:1d:d5:45:41:8b:a5:a6:d5:bd:a5: 09:82:0a:1f:79:d5:4a:66:99:4a:ca:bc:f8:ae:f6: 88:c4:f4:cb:de:25:0d:d6:a4:fa:77:60:14:8c:65: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:BF:49:CC:DD:DC:68:1D:12:B7:8D:C4:B3:C4:5D:43:FA:CE:56 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JSO_Sczd3GgdEreNxLPEXUP6zlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption cc:51:1e:cf:16:2f:d1:55:33:40:c4:21:84:43:11:bc:b5:05: 37:f7:11:83:90:fb:3a:94:d4:45:60:2f:da:04:e3:7f:50:52: 70:03:3c:65:0c:9c:ec:7b:5a:5d:da:a4:8b:2b:9a:59:c6:52: 81:c5:73:10:57:83:1c:1f:4f:e5:26:d2:e8:a5:a4:b5:b5:9e: cc:d1:39:69:7c:54:d8:2d:5c:0b:f5:d9:ec:5e:a8:2e:61:cb: 3b:cf:bf:72:de:d1:be:90:50:3b:2c:82:46:ea:f4:c1:cf:05: c1:83:0a:4f:c7:b0:42:ac:56:ca:38:d0:31:72:19:73:ec:72: 1a:dd:d1:41:dd:25:65:4d:63:a9:e2:c6:1d:b1:47:e0:ac:f4: 20:ca:fe:0b:77:a3:26:3d:09:6c:fb:6c:48:3b:31:85:66:77: f7:31:a3:9c:ac:58:3e:9e:6a:da:b9:f6:c1:37:93:1a:39:d4: 89:45:a5:1d:13:44:79:c5:61:3c:d0:33:a1:ce:0c:7b:e9:d4: fa:70:09:9e:67:76:1b:a7:70:8e:f2:b6:a6:34:d3:5d:08:1c: 2a:d2:cf:f4:4e:ac:1e:68:e2:25:08:e9:92:d4:45:97:8a:cc: ff:0b:b5:19:be:ee:15:02:38:33:0b:99:50:c8:46:93:69:2a: 8b:f0:30:58 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYtD9nJWSGirmdQkAKdrtDqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDE4MTgwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTIzYmY0OWNjZGRkYzY4MWQxMmI3OGRjNGIzYzQ1ZDQzZmFjZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYrbyoXyc7kBc8gPyhMgkrpIVXMg gdDizb5QdJwf9w4xcioxmHmxaooa6bHIO1+F1wyRudE2pBJ07eEcvupCEBZBVp7w jOtCp4gnPf8pnVmD/HdG7qA7zTjkX5gGt3Qmjeuen3NN16/GyiUMUA3usv2jZEDS oYkBS/7KfDisCgVPTrjoNrw50WeAqHsSJmjPsz8x9R9inSeKToCiZFKlufAUPw0G jeRDLZcewUJdCx7k2elWD0MePTiqP5BmRmqD/tmET/hsD9tXzhG3Y+c4l15gKooE Rx3VRUGLpabVvaUJggofedVKZplKyrz4rvaIxPTL3iUN1qT6d2AUjGVA3wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCUjv0nM3dxoHRK3jcSzxF1D+s5WMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvSlNPX1NjemQzR2dkRXJlTnhMUEVYVVA2emxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMxRHs8WL9FVM0DEIYRD Eby1BTf3EYOQ+zqU1EVgL9oE439QUnADPGUMnOx7Wl3apIsrmlnGUoHFcxBXgxwf T+Um0uilpLW1nszROWl8VNgtXAv12exeqC5hyzvPv3Le0b6QUDssgkbq9MHPBcGD Ck/HsEKsVso40DFyGXPschrd0UHdJWVNY6nixh2xR+Cs9CDK/gt3oyY9CWz7bEg7 MYVmd/cxo5ysWD6eatq59sE3kxo51IlFpR0TRHnFYTzQM6HODHvp1PpwCZ5ndhun cI7ytqY0010IHCrSz/ROrB5o4iUI6ZLURZeKzP8LtRm+7hUCODMLmVDIRpNpKovw MFg= -----END CERTIFICATE-----Generated at Mon Dec 29 23:47:25 2025 by rpki-client