This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MCrermlVi5tLQXAwv_O2cnkzhxQ.roa File: MCrermlVi5tLQXAwv_O2cnkzhxQ.roa (raw, json) Hash identifier: k6lHCch+3sVoqQwZav1IQVCjMKlsWk0lxsJTY78D1kI= Subject key identifier: 30:2A:DE:AE:69:55:8B:9B:4B:41:70:30:BF:F3:B6:72:79:33:87:14 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018ACC71FDF252822EBD8BB2AAB003E5D411 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MCrermlVi5tLQXAwv_O2cnkzhxQ.roa Signing time: Mon 25 Sep 2023 13:05:37 +0000 ROA not before: Mon 25 Sep 2023 13:05:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18a:cc71:222e/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:cc:71:fd:f2:52:82:2e:bd:8b:b2:aa:b0:03:e5:d4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Sep 25 13:05:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=302adeae69558b9b4b417030bff3b67279338714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:c4:b7:8f:35:09:6d:36:88:22:75:20:0a: 18:57:12:bd:e6:cb:b3:54:d9:f8:ec:cd:58:e9:d2: c1:01:f3:8a:41:ec:27:d8:77:51:0d:43:b0:af:7e: da:ba:44:2b:0f:b2:28:1e:f9:56:d4:2c:b9:ea:81: 67:f0:fd:84:28:14:c2:30:ed:f4:dd:e2:4a:91:c7: c1:fa:7e:2d:43:25:e7:d1:7c:54:05:aa:f6:c0:4f: d5:e5:1a:d7:c8:a3:f7:6c:b0:50:d3:45:b8:7e:12: 37:47:37:d2:94:a7:14:b9:2c:8b:a0:5e:de:f9:1f: c8:7f:8f:42:4f:bd:da:3c:47:75:9a:60:4b:03:38: f9:a3:4f:23:60:33:5b:c3:0f:c3:ea:69:ab:1e:b8: 83:fa:ad:06:85:a9:3f:91:ea:d9:a6:c1:69:04:ee: 48:13:26:5e:01:1a:c2:ad:a7:dd:d8:e8:14:bc:8c: dc:e7:1f:b2:18:b0:95:34:56:b4:fc:da:ac:9a:3e: e1:7f:7c:c2:b3:a9:81:06:6b:36:fe:6b:24:8b:02: 8d:88:5e:3b:72:82:9c:f0:c0:f2:1f:c9:e6:c2:63: 3b:4f:7f:fe:58:98:b5:53:e6:7a:c3:ec:f2:70:eb: 93:18:b4:41:20:ae:7f:f5:63:aa:cc:c4:58:3f:75: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2A:DE:AE:69:55:8B:9B:4B:41:70:30:BF:F3:B6:72:79:33:87:14 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MCrermlVi5tLQXAwv_O2cnkzhxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 97:1f:de:21:66:53:fc:79:bb:d3:0a:2f:24:d1:83:70:43:22: 86:3a:9d:99:ec:c5:2c:78:49:b7:88:9f:50:50:4a:fa:b6:99: 88:eb:42:63:94:c4:94:dd:03:f1:67:a3:bf:54:2d:c4:84:55: 21:f9:49:44:d6:fc:38:8d:bb:09:16:28:3c:49:9c:2c:f4:c9: 15:d8:ca:ce:2a:f2:5b:ab:1c:8c:a1:7d:d7:06:6d:ec:a0:69: 24:42:14:e8:3f:8c:ab:38:d6:3a:79:fa:89:af:fb:89:9f:ec: 79:7c:e5:40:82:00:b4:93:16:20:79:a4:9e:98:04:49:aa:2c: fa:d6:f4:4e:5a:53:73:8a:47:42:35:ec:61:5b:4a:fd:5d:e3: 58:cb:34:f3:2c:8d:16:cc:ea:b3:9f:1d:cc:b1:b6:75:01:6c: d5:b7:d1:8a:a2:5f:99:33:eb:ad:fd:0a:f5:82:a2:e2:ee:5f: e2:5e:3e:e9:42:3d:b8:ac:69:9c:63:bc:cf:3e:10:5c:ec:db: 15:dc:37:39:70:c2:ba:4b:bc:5f:50:61:e3:58:2c:68:f3:ff: a2:a5:15:a3:f6:0f:a8:70:fa:b6:7b:3a:a8:ed:16:14:a8:3a: 2c:f2:b5:8d:7c:67:95:77:6b:67:a6:c6:29:10:8a:d8:aa:58: 0a:9b:03:e3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYrMcf3yUoIuvYuyqrAD5dQRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMwOTI1MTMwNTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDJhZGVhZTY5NTU4YjliNGI0MTcwMzBiZmYzYjY3Mjc5MzM4NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpTEt481CW02iCJ1IAoYVxK95suz VNn47M1Y6dLBAfOKQewn2HdRDUOwr37aukQrD7IoHvlW1Cy56oFn8P2EKBTCMO30 3eJKkcfB+n4tQyXn0XxUBar2wE/V5RrXyKP3bLBQ00W4fhI3RzfSlKcUuSyLoF7e +R/If49CT73aPEd1mmBLAzj5o08jYDNbww/D6mmrHriD+q0Ghak/kerZpsFpBO5I EyZeARrCrafd2OgUvIzc5x+yGLCVNFa0/Nqsmj7hf3zCs6mBBms2/mskiwKNiF47 coKc8MDyH8nmwmM7T3/+WJi1U+Z6w+zycOuTGLRBIK5/9WOqzMRYP3Vy8QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDAq3q5pVYubS0FwML/ztnJ5M4cUMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvTUNyZXJtbFZpNXRMUVhBd3ZfTzJjbmt6aHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJcf3iFmU/x5u9MKLyTR g3BDIoY6nZnsxSx4SbeIn1BQSvq2mYjrQmOUxJTdA/Fno79ULcSEVSH5SUTW/DiN uwkWKDxJnCz0yRXYys4q8lurHIyhfdcGbeygaSRCFOg/jKs41jp5+omv+4mf7Hl8 5UCCALSTFiB5pJ6YBEmqLPrW9E5aU3OKR0I17GFbSv1d41jLNPMsjRbM6rOfHcyx tnUBbNW30YqiX5kz6639CvWCouLuX+JePulCPbisaZxjvM8+EFzs2xXcNzlwwrpL vF9QYeNYLGjz/6KlFaP2D6hw+rZ7OqjtFhSoOizytY18Z5V3a2emxikQitiqWAqb A+M= -----END CERTIFICATE-----Generated at Thu Dec 25 07:13:11 2025 by rpki-client