This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Jt7_EEK3C9S23e48los6UXuJbqU.roa File: Jt7_EEK3C9S23e48los6UXuJbqU.roa (raw, json) Hash identifier: lXohfwJCdaecher2fOJ6UIpZ7Kr7MAzqJfSSw7A55Wg= Subject key identifier: 26:DE:FF:10:42:B7:0B:D4:B6:DD:EE:3C:96:8B:3A:51:7B:89:6E:A5 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018BEF321FFAF972E541666A5556AD1EC921 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Jt7_EEK3C9S23e48los6UXuJbqU.roa Signing time: Tue 21 Nov 2023 00:05:21 +0000 ROA not before: Tue 21 Nov 2023 00:05:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64:ffff:0:18b:ef31:6974/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:ef:32:1f:fa:f9:72:e5:41:66:6a:55:56:ad:1e:c9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 21 00:05:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=26deff1042b70bd4b6ddee3c968b3a517b896ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:01:06:8d:69:91:d4:60:43:27:e0:24:aa: 5c:1a:d8:82:71:58:8f:51:fc:c1:b1:81:e8:27:a3: 2a:21:e3:ce:57:28:03:a7:20:4a:36:bd:92:05:04: 16:5f:b9:1a:ff:5a:07:15:3c:40:28:ef:b8:b7:3e: 00:26:dc:61:1d:8d:2a:2a:d1:e8:ab:ea:19:94:b6: b9:6d:df:f6:ff:f8:a8:b6:9d:98:e5:68:e5:c6:af: f9:cc:f0:2d:7c:c9:00:04:8a:c0:cd:95:d6:d5:3f: 1f:07:10:95:61:a1:37:fd:6a:21:b4:17:e8:07:65: f2:1f:87:a2:26:48:cb:11:cf:2f:8c:45:4a:dd:74: 01:ce:1c:9b:f8:08:c0:b0:74:31:5c:8f:5f:d4:8a: 8d:3f:56:c3:16:97:94:a6:d2:36:78:3e:56:5e:59: d0:84:9f:60:11:d0:9e:ca:3d:56:2f:be:f1:96:e0: 5e:40:6d:59:0c:29:96:6e:f3:50:b7:2f:a4:23:66: 94:35:5f:f4:6c:e7:5d:37:6b:f5:03:8e:e6:bf:58: 92:b0:34:50:f2:65:36:da:0c:02:ff:82:e0:7a:0d: 81:aa:cf:89:db:90:61:91:db:d5:84:0c:b1:3f:f7: 40:29:85:33:d0:60:3a:bd:f7:2b:73:1a:52:05:cc: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DE:FF:10:42:B7:0B:D4:B6:DD:EE:3C:96:8B:3A:51:7B:89:6E:A5 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Jt7_EEK3C9S23e48los6UXuJbqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 15:12:ab:42:85:1b:9d:b0:95:cf:db:ba:17:22:ee:6b:a0:33: e5:55:2a:90:09:1f:11:74:23:b2:a2:79:a6:96:d6:7e:db:2c: 35:78:d1:80:a9:25:83:b2:2a:b0:a7:53:71:c6:d5:76:8d:85: fb:d2:1b:90:82:e0:a3:b7:ee:8f:96:32:61:6e:68:5e:50:d3: 24:93:54:d5:be:46:34:15:88:59:06:37:d2:c9:bc:9c:08:fa: e8:ca:15:e9:a6:ea:e3:c7:e7:03:46:84:9d:e6:ce:8b:9a:6f: 48:a7:b0:14:28:31:03:06:35:fb:5e:fe:72:5e:39:8e:fd:64: 83:1b:01:b5:c1:bc:bf:45:21:d6:19:de:84:b6:07:88:0a:25: c1:db:7c:cc:2e:3a:91:43:c4:e4:3f:50:fe:5f:1d:33:1f:96: 4f:d6:03:97:b7:ab:89:e3:c8:07:d9:21:2a:41:da:90:cb:97: f0:09:94:e4:3e:af:1c:07:9f:97:c8:6b:bb:96:fe:e0:00:a2: 9c:d0:8e:c2:b9:9f:84:26:55:4e:ae:cc:07:f6:1b:f1:4b:a5: 5c:c9:69:64:74:fe:02:ff:e4:73:d5:5b:13:c4:9d:16:5e:11: 6c:15:48:25:70:56:08:5f:c8:8e:72:9b:1d:f5:98:9f:0a:7e: 32:cc:d8:18 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYvvMh/6+XLlQWZqVVatHskhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTIxMDAwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmRlZmYxMDQyYjcwYmQ0YjZkZGVlM2M5NjhiM2E1MTdiODk2ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qEBBo1pkdRgQyfgJKpcGtiCcViP UfzBsYHoJ6MqIePOVygDpyBKNr2SBQQWX7ka/1oHFTxAKO+4tz4AJtxhHY0qKtHo q+oZlLa5bd/2//iotp2Y5Wjlxq/5zPAtfMkABIrAzZXW1T8fBxCVYaE3/WohtBfo B2XyH4eiJkjLEc8vjEVK3XQBzhyb+AjAsHQxXI9f1IqNP1bDFpeUptI2eD5WXlnQ hJ9gEdCeyj1WL77xluBeQG1ZDCmWbvNQty+kI2aUNV/0bOddN2v1A47mv1iSsDRQ 8mU22gwC/4Lgeg2Bqs+J25BhkdvVhAyxP/dAKYUz0GA6vfcrcxpSBcyUowIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCbe/xBCtwvUtt3uPJaLOlF7iW6lMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvSnQ3X0VFSzNDOVMyM2U0OGxvczZVWHVKYnFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABUSq0KFG52wlc/buhci 7mugM+VVKpAJHxF0I7KieaaW1n7bLDV40YCpJYOyKrCnU3HG1XaNhfvSG5CC4KO3 7o+WMmFuaF5Q0ySTVNW+RjQViFkGN9LJvJwI+ujKFemm6uPH5wNGhJ3mzouab0in sBQoMQMGNfte/nJeOY79ZIMbAbXBvL9FIdYZ3oS2B4gKJcHbfMwuOpFDxOQ/UP5f HTMflk/WA5e3q4njyAfZISpB2pDLl/AJlOQ+rxwHn5fIa7uW/uAAopzQjsK5n4Qm VU6uzAf2G/FLpVzJaWR0/gL/5HPVWxPEnRZeEWwVSCVwVghfyI5ymx31mJ8KfjLM 2Bg= -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:16 2025 by rpki-client