This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LBYRXgu74ropk-2yyVsEkv05Sxo.roa File: LBYRXgu74ropk-2yyVsEkv05Sxo.roa (raw, json) Hash identifier: ZWEN5Y/qnJwjjLKTp4E4FzWpaRoa7bpcphfz/yVgZXk= Subject key identifier: 2C:16:11:5E:0B:BB:E2:BA:29:93:ED:B2:C9:5B:04:92:FD:39:4B:1A Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C743B831C2872E9038408BA6532F60D70 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LBYRXgu74ropk-2yyVsEkv05Sxo.roa Signing time: Sat 16 Dec 2023 20:05:06 +0000 ROA not before: Sat 16 Dec 2023 20:05:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18c:743a:c820/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:74:3b:83:1c:28:72:e9:03:84:08:ba:65:32:f6:0d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 16 20:05:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=2c16115e0bbbe2ba2993edb2c95b0492fd394b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:0b:a4:fb:d3:11:e3:88:9e:23:aa:0b:7a: 1a:0f:d0:1e:4a:1f:3e:d0:57:29:ed:57:08:69:be: 88:13:be:cc:9c:d0:82:34:17:99:3e:04:87:d0:3e: 37:f9:d1:f9:4b:1d:04:12:85:e0:19:21:f9:ed:1f: 0c:4e:e2:97:00:95:06:a8:89:fd:c5:8c:a8:e3:51: 79:bf:15:4f:0c:f8:38:cd:71:7b:cf:60:13:e4:d6: 41:4d:bf:27:f9:e1:a8:84:8e:58:d2:b8:cb:cd:3a: 38:9b:64:d6:3b:00:5c:77:5e:aa:09:25:0a:91:58: be:4b:d1:e5:81:88:5c:eb:a8:03:d2:dd:f7:fa:e7: 29:52:54:38:10:2b:12:05:1e:c0:e3:e8:58:2f:44: 2c:15:e7:9c:0b:84:d2:07:04:fe:43:88:fd:6b:e1: 8e:13:d4:f4:35:95:2f:45:ad:a1:6b:f9:0f:a4:2a: ce:b3:43:0d:45:05:8f:f0:f0:ab:15:76:0b:45:38: 9a:47:8b:ab:65:ad:0a:c3:39:f6:05:a5:9a:7b:3c: be:e5:bc:af:96:30:40:05:d2:44:32:54:50:74:d7: b2:5a:4a:b0:e6:5d:84:b7:cb:1b:28:04:07:f7:50: fa:19:42:89:a8:ef:d5:29:70:6c:fc:da:86:39:f8: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:11:5E:0B:BB:E2:BA:29:93:ED:B2:C9:5B:04:92:FD:39:4B:1A X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LBYRXgu74ropk-2yyVsEkv05Sxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption b9:4e:a9:5a:2f:4b:3e:a6:81:16:fd:0b:c4:ed:52:b8:16:2b: cc:8a:32:88:1c:d3:92:8a:eb:5f:81:84:83:cf:01:88:c2:f1: c4:3a:95:c2:2c:a7:5c:b1:cf:24:af:02:a3:26:7d:81:6d:45: 6f:2a:a6:b4:a6:d4:78:88:bd:da:96:02:e3:c3:e2:1e:9e:34: e6:7f:bf:7a:12:96:9f:8e:7d:db:ef:67:b4:5d:31:6b:1a:dc: fd:56:9a:2a:49:f7:d2:32:af:d2:14:5d:9d:c7:55:c6:fa:53: 56:0a:0e:74:57:1f:89:32:6a:e8:fa:cd:9d:c9:d0:d4:37:ec: 83:9e:91:09:53:50:cf:5d:0f:0a:ee:76:6a:97:b3:7f:75:c3: 2d:c2:17:97:0f:4c:94:46:6a:00:36:cc:88:93:18:b1:01:6c: 88:ef:0b:8a:53:8b:87:78:be:d2:ee:81:9a:33:56:37:5a:bc: f6:29:62:67:01:9d:27:c2:0b:d1:bd:c1:84:21:b7:df:75:be: 02:3c:a1:0a:10:ea:b8:17:7f:c7:53:14:19:e7:52:cb:8f:aa: e0:3c:68:66:96:a1:c5:a0:58:b6:cf:f8:c6:4b:ce:2e:f8:7b: df:f5:3a:98:57:37:c0:64:b1:4c:c4:ff:e2:f2:63:c9:87:18: 54:8a:82:c2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYx0O4McKHLpA4QIumUy9g1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjE2MjAwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzE2MTE1ZTBiYmJlMmJhMjk5M2VkYjJjOTViMDQ5MmZkMzk0YjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXsLpPvTEeOIniOqC3oaD9AeSh8+ 0Fcp7VcIab6IE77MnNCCNBeZPgSH0D43+dH5Sx0EEoXgGSH57R8MTuKXAJUGqIn9 xYyo41F5vxVPDPg4zXF7z2AT5NZBTb8n+eGohI5Y0rjLzTo4m2TWOwBcd16qCSUK kVi+S9HlgYhc66gD0t33+ucpUlQ4ECsSBR7A4+hYL0QsFeecC4TSBwT+Q4j9a+GO E9T0NZUvRa2ha/kPpCrOs0MNRQWP8PCrFXYLRTiaR4urZa0Kwzn2BaWaezy+5byv ljBABdJEMlRQdNeyWkqw5l2Et8sbKAQH91D6GUKJqO/VKXBs/NqGOfhOXQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCwWEV4Lu+K6KZPtsslbBJL9OUsaMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvTEJZUlhndTc0cm9way0yeXlWc0VrdjA1U3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALlOqVovSz6mgRb9C8Tt UrgWK8yKMogc05KK61+BhIPPAYjC8cQ6lcIsp1yxzySvAqMmfYFtRW8qprSm1HiI vdqWAuPD4h6eNOZ/v3oSlp+OfdvvZ7RdMWsa3P1WmipJ99Iyr9IUXZ3HVcb6U1YK DnRXH4kyauj6zZ3J0NQ37IOekQlTUM9dDwrudmqXs391wy3CF5cPTJRGagA2zIiT GLEBbIjvC4pTi4d4vtLugZozVjdavPYpYmcBnSfCC9G9wYQht991vgI8oQoQ6rgX f8dTFBnnUsuPquA8aGaWocWgWLbP+MZLzi74e9/1OphXN8BksUzE/+LyY8mHGFSK gsI= -----END CERTIFICATE-----Generated at Mon Dec 29 06:50:24 2025 by rpki-client