This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NE9Q3hHcg5I8Q53NaRFqTHzaQXI.roa File: NE9Q3hHcg5I8Q53NaRFqTHzaQXI.roa (raw, json) Hash identifier: ufsITnXC6k0mmf/DZK/9/wN+DPgaE+Ljicp1qTDz+y8= Subject key identifier: 34:4F:50:DE:11:DC:83:92:3C:43:9D:CD:69:11:6A:4C:7C:DA:41:72 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C208B7DDD0E1C5135781359BD1552D106 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NE9Q3hHcg5I8Q53NaRFqTHzaQXI.roa Signing time: Thu 30 Nov 2023 14:04:21 +0000 ROA not before: Thu 30 Nov 2023 14:04:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18c:208b:569c/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:20:8b:7d:dd:0e:1c:51:35:78:13:59:bd:15:52:d1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 30 14:04:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=344f50de11dc83923c439dcd69116a4c7cda4172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:12:7a:c2:39:fc:a7:6a:c0:d5:84:59:c3: 9b:ef:2f:b3:e6:51:18:7f:13:2b:39:5a:de:c8:ca: 6e:72:4b:43:d3:b3:57:1b:1d:fb:c9:ed:7f:26:38: 0b:c7:1a:e1:49:cd:1d:8b:f1:ae:68:bc:4d:23:e1: 4a:35:5a:ab:d2:71:b8:3e:13:96:4e:7e:f7:b5:b2: 70:2c:7b:77:bf:f7:54:56:a7:78:b6:0e:bf:4c:6a: 73:48:b4:a0:27:77:0b:fb:47:a4:46:c0:78:f5:8b: df:b3:2e:d1:2c:93:47:d7:62:d1:41:da:d0:9e:cf: da:61:b2:bc:a5:44:1d:91:f1:25:5d:6a:8c:b9:56: cc:e3:6a:91:0d:30:27:28:10:59:99:35:67:b2:f3: 7a:b9:41:06:de:80:26:85:5e:3f:c0:10:01:39:8c: 39:e2:60:98:5b:18:d8:5c:09:0f:49:00:1d:65:e8: 90:89:b0:da:2d:ca:f0:85:10:6d:45:80:7f:d1:c7: 80:b3:79:a4:35:3f:85:82:44:3f:17:59:73:69:9f: 60:b1:f6:5d:9a:ba:9a:a4:80:d6:7f:59:3f:1f:51: b6:df:0a:f4:2b:95:9e:73:03:fb:92:34:f5:56:1c: 85:83:cd:13:a1:fd:bf:40:75:67:cf:b0:15:b4:d6: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4F:50:DE:11:DC:83:92:3C:43:9D:CD:69:11:6A:4C:7C:DA:41:72 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NE9Q3hHcg5I8Q53NaRFqTHzaQXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption d4:9b:f2:e7:42:3d:fb:b9:38:65:81:dc:48:28:9a:08:c3:97: 80:35:c9:d3:15:3b:f1:f1:54:e6:15:34:44:76:94:17:57:d2: 63:b9:ad:6e:ad:55:fe:ec:5f:d7:cb:3c:7a:3e:18:ac:0e:7a: 88:9f:22:0d:a1:e3:7a:58:74:ef:59:ae:6e:ec:f7:eb:7f:5b: 40:ba:02:77:ee:69:4d:78:cb:8e:2f:b5:08:39:2b:53:30:21: 59:7e:a8:cb:fc:f1:bf:d3:82:81:f2:31:ec:66:5d:da:ea:59: ad:a7:ff:77:c5:96:69:4f:04:2d:fb:c1:f0:a5:69:6c:53:08: 7e:20:26:93:24:d2:0c:15:bc:47:8a:05:65:99:cd:bf:09:04: f2:5f:7c:ed:1c:06:5b:11:bd:03:c6:ba:fa:22:e2:f0:c4:df: fe:e6:46:53:5a:7a:04:f3:26:f9:50:0f:96:98:54:d1:79:69: b2:c0:bf:13:b5:29:28:39:02:1f:32:2a:5f:31:23:c4:c3:02: ce:ca:c2:f9:24:f7:5f:97:07:8d:d9:ee:14:21:ef:89:81:dc: 8f:22:b7:5c:02:18:31:2d:8c:d4:c1:65:44:d2:8b:a6:f5:f6: a8:51:a4:cb:6b:6e:f6:c8:41:a6:11:f5:58:bd:33:84:32:a1: 3c:76:ce:7b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYwgi33dDhxRNXgTWb0VUtEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTMwMTQwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRmNTBkZTExZGM4MzkyM2M0MzlkY2Q2OTExNmE0YzdjZGE0MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw8SesI5/KdqwNWEWcOb7y+z5lEY fxMrOVreyMpucktD07NXGx37ye1/JjgLxxrhSc0di/GuaLxNI+FKNVqr0nG4PhOW Tn73tbJwLHt3v/dUVqd4tg6/TGpzSLSgJ3cL+0ekRsB49Yvfsy7RLJNH12LRQdrQ ns/aYbK8pUQdkfElXWqMuVbM42qRDTAnKBBZmTVnsvN6uUEG3oAmhV4/wBABOYw5 4mCYWxjYXAkPSQAdZeiQibDaLcrwhRBtRYB/0ceAs3mkNT+FgkQ/F1lzaZ9gsfZd mrqapIDWf1k/H1G23wr0K5WecwP7kjT1VhyFg80Tof2/QHVnz7AVtNaJJwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDRPUN4R3IOSPEOdzWkRakx82kFyMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvTkU5UTNoSGNnNUk4UTUzTmFSRnFUSHphUVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANSb8udCPfu5OGWB3Ego mgjDl4A1ydMVO/HxVOYVNER2lBdX0mO5rW6tVf7sX9fLPHo+GKwOeoifIg2h43pY dO9Zrm7s9+t/W0C6AnfuaU14y44vtQg5K1MwIVl+qMv88b/TgoHyMexmXdrqWa2n /3fFlmlPBC37wfClaWxTCH4gJpMk0gwVvEeKBWWZzb8JBPJffO0cBlsRvQPGuvoi 4vDE3/7mRlNaegTzJvlQD5aYVNF5abLAvxO1KSg5Ah8yKl8xI8TDAs7Kwvkk91+X B43Z7hQh74mB3I8it1wCGDEtjNTBZUTSi6b19qhRpMtrbvbIQaYR9Vi9M4QyoTx2 zns= -----END CERTIFICATE-----Generated at Thu Jan 1 19:52:37 2026 by rpki-client