This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MFNvyc6492_N7-GFJ_bDfO6GPsA.roa File: MFNvyc6492_N7-GFJ_bDfO6GPsA.roa (raw, json) Hash identifier: h1p3Xr8kgXRUc7Ezh9GFnhZ0rsRoHn49i99rEdZILUg= Subject key identifier: 30:53:6F:C9:CE:B8:F7:6F:CD:EF:E1:85:27:F6:C3:7C:EE:86:3E:C0 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C1DC24BCB613D026A02EA73ACBEECB771 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MFNvyc6492_N7-GFJ_bDfO6GPsA.roa Signing time: Thu 30 Nov 2023 01:05:21 +0000 ROA not before: Thu 30 Nov 2023 01:05:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64:ffff:0:18c:1dc1:82b5/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:1d:c2:4b:cb:61:3d:02:6a:02:ea:73:ac:be:ec:b7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 30 01:05:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=30536fc9ceb8f76fcdefe18527f6c37cee863ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b3:51:71:31:d7:39:e3:25:f9:d7:09:a6:e6: 0a:4d:5c:6b:4f:43:ce:b0:d5:ea:35:ff:8b:db:d8: 11:83:20:c0:d0:63:b5:9e:00:59:65:29:81:ec:a0: f0:a5:36:8a:87:42:fb:39:d4:cf:72:11:db:51:5c: d6:d6:b5:45:f0:3c:53:19:f4:cc:0e:94:6f:53:a5: ef:27:4f:a8:94:2d:1c:f3:4c:b4:09:79:3b:7d:f6: ec:1a:04:1a:77:23:87:08:a9:66:70:de:2f:69:db: 61:7b:a5:d6:db:fc:01:8f:c0:75:15:5c:93:05:03: 82:cd:84:02:e3:8d:15:8f:9c:d9:fb:d4:e0:76:c9: d8:dc:62:63:11:5a:9f:3f:2b:7b:0c:85:38:1c:27: bb:76:bd:11:9a:ec:4a:23:50:37:f3:91:bf:7c:29: da:1e:c9:bc:22:53:68:bb:2b:40:ff:59:24:16:e3: e0:6f:d7:e5:6e:95:d9:67:0b:1c:9c:db:08:04:cf: d9:89:63:c6:34:b1:ce:3f:44:2c:f0:e8:7f:56:ed: 48:48:7c:27:47:53:80:37:24:84:8f:11:4f:cc:17: 31:05:aa:03:d3:8c:49:92:53:18:75:33:c6:cf:dd: e8:d5:4b:1b:e6:35:fb:80:df:9c:42:1a:18:16:f3: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:53:6F:C9:CE:B8:F7:6F:CD:EF:E1:85:27:F6:C3:7C:EE:86:3E:C0 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MFNvyc6492_N7-GFJ_bDfO6GPsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption b8:89:66:6e:e0:51:fa:66:18:23:53:c4:53:8f:57:ed:11:b6: dd:c7:72:4a:a3:59:2d:51:67:5e:96:86:13:6c:83:46:d8:9e: 63:0f:e6:61:1c:97:99:f8:ee:e1:bb:95:f0:9e:8e:4a:60:3e: 1a:85:df:d4:9f:99:7c:dc:68:1a:c4:a9:95:12:f5:7e:d9:8f: 08:39:0e:cd:e1:3c:2f:60:62:5a:73:72:52:b7:c6:22:25:ed: a7:35:74:92:ef:f4:1e:a4:78:f1:e3:8e:0b:d0:fd:65:ee:84: f5:2e:73:58:f2:ef:94:47:2e:f4:88:19:f7:70:60:0f:b7:b4: 77:73:db:e9:55:66:49:5f:a0:de:e5:15:ac:e5:a6:ac:d4:a2: 8f:62:d6:57:a8:e7:6a:a1:80:f0:ea:1b:f0:d1:7e:50:f1:d8: 42:1b:71:32:54:81:c6:62:17:36:6b:ee:94:0e:7d:75:07:89: e4:af:00:5c:98:06:8a:73:11:b8:98:7c:e5:bd:c9:34:0a:c0: 97:a5:1c:2d:5d:53:8b:1e:92:39:51:0d:4d:1d:e3:05:2e:cc: 26:36:b2:e6:c7:a6:a3:c7:2f:ea:64:d8:44:1c:58:c7:52:d0: 45:77:c4:ac:76:1a:ef:e3:c6:f8:2f:a7:f8:32:1e:e0:fc:11: 38:5e:ee:b6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYwdwkvLYT0CagLqc6y+7LdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTMwMDEwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDUzNmZjOWNlYjhmNzZmY2RlZmUxODUyN2Y2YzM3Y2VlODYzZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLNRcTHXOeMl+dcJpuYKTVxrT0PO sNXqNf+L29gRgyDA0GO1ngBZZSmB7KDwpTaKh0L7OdTPchHbUVzW1rVF8DxTGfTM DpRvU6XvJ0+olC0c80y0CXk7ffbsGgQadyOHCKlmcN4vadthe6XW2/wBj8B1FVyT BQOCzYQC440Vj5zZ+9TgdsnY3GJjEVqfPyt7DIU4HCe7dr0RmuxKI1A385G/fCna Hsm8IlNouytA/1kkFuPgb9flbpXZZwscnNsIBM/ZiWPGNLHOP0Qs8Oh/Vu1ISHwn R1OANySEjxFPzBcxBaoD04xJklMYdTPGz93o1Usb5jX7gN+cQhoYFvMXiwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDBTb8nOuPdvze/hhSf2w3zuhj7AMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvTUZOdnljNjQ5Ml9ONy1HRkpfYkRmTzZHUHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALiJZm7gUfpmGCNTxFOP V+0Rtt3HckqjWS1RZ16WhhNsg0bYnmMP5mEcl5n47uG7lfCejkpgPhqF39SfmXzc aBrEqZUS9X7Zjwg5Ds3hPC9gYlpzclK3xiIl7ac1dJLv9B6kePHjjgvQ/WXuhPUu c1jy75RHLvSIGfdwYA+3tHdz2+lVZklfoN7lFazlpqzUoo9i1leo52qhgPDqG/DR flDx2EIbcTJUgcZiFzZr7pQOfXUHieSvAFyYBopzEbiYfOW9yTQKwJelHC1dU4se kjlRDU0d4wUuzCY2subHpqPHL+pk2EQcWMdS0EV3xKx2Gu/jxvgvp/gyHuD8EThe 7rY= -----END CERTIFICATE-----Generated at Thu Dec 25 22:13:18 2025 by rpki-client