This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nxv3qOrMZLJcat0UZpnxSb1oGvQ.roa File: Nxv3qOrMZLJcat0UZpnxSb1oGvQ.roa (raw, json) Hash identifier: FloKtX5GNyqDZu8eEw8zOcMT21AV0cLVGeyLck7aprc= Subject key identifier: 37:1B:F7:A8:EA:CC:64:B2:5C:6A:DD:14:66:99:F1:49:BD:68:1A:F4 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018BB7318321A2EF79F3B96A3CFCD0678C33 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nxv3qOrMZLJcat0UZpnxSb1oGvQ.roa Signing time: Fri 10 Nov 2023 03:05:57 +0000 ROA not before: Fri 10 Nov 2023 03:05:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18b:b731:6d80/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:b7:31:83:21:a2:ef:79:f3:b9:6a:3c:fc:d0:67:8c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 10 03:05:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=371bf7a8eacc64b25c6add146699f149bd681af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:cf:bc:6b:05:a0:9c:76:72:1f:6f:5e:d6: b6:81:75:f5:33:5f:0c:c6:8a:5e:2d:e9:cb:14:92: 9b:2d:c0:a3:da:8a:79:dc:95:91:a9:9f:48:82:84: 31:b1:26:e4:7d:a3:9f:f2:82:62:49:4c:34:50:83: 32:40:ab:74:fa:bc:e3:84:91:2b:f1:b3:57:61:85: 00:c7:53:1c:1d:55:f8:30:86:bc:2f:d8:b2:57:72: 29:2c:10:45:50:f8:cb:50:58:19:a2:69:d5:f5:d6: ae:26:c7:e4:b0:40:6f:ed:e7:0e:fd:07:a8:c6:aa: a4:e3:fa:d6:c0:97:0f:db:e5:ee:37:fa:34:8c:d7: 78:ed:8a:60:b3:1d:32:49:b2:52:c8:5e:2e:4d:8e: f5:2e:ed:36:94:19:1d:a9:0d:7d:35:39:46:67:f4: 15:e6:b9:bf:c2:90:36:06:98:00:b3:23:60:65:25: 4e:6f:6d:48:69:bb:31:83:80:b8:6c:c5:d9:5d:44: fa:95:57:33:a2:5a:6e:48:4d:f3:5d:ce:7c:a6:e4: c9:1a:7f:54:7d:64:e2:7c:1f:2b:b3:d3:42:00:c1: 2e:27:0d:65:a7:05:6a:7c:80:67:32:81:b7:2e:d9: 34:75:4c:cb:44:2a:c2:6d:13:6c:95:4c:4d:a0:b1: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:F7:A8:EA:CC:64:B2:5C:6A:DD:14:66:99:F1:49:BD:68:1A:F4 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nxv3qOrMZLJcat0UZpnxSb1oGvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 24:07:b1:af:cf:53:7e:aa:29:0e:4c:f7:d7:d4:b9:68:f9:c1: 8f:ff:ab:f5:55:ae:97:9f:03:a1:a6:ce:75:61:b0:6b:9d:4d: 04:ff:08:e5:31:61:03:51:19:b6:6c:08:e3:31:a6:e8:9a:3f: 63:b8:80:02:fe:90:35:6a:bb:72:b4:1f:d8:c4:93:71:cb:64: fe:33:0d:bb:85:29:f1:3c:55:25:c1:3a:1e:dd:26:ac:90:34: 91:86:d9:52:cc:4a:a8:b6:b7:77:2b:b1:ed:49:31:33:8f:d9: 93:64:6d:27:02:3b:b7:40:1b:26:6c:2d:55:b9:3d:fe:d8:3a: 0a:98:ec:f2:cb:4e:d2:00:02:a6:c1:4d:39:09:14:76:79:05: 13:16:71:8f:7d:a1:4c:23:36:bd:d2:1a:f2:cf:2d:86:61:9d: 81:e3:a7:6d:b1:97:45:ab:f6:72:c2:a4:eb:6a:83:8d:0e:cf: 88:8c:bc:2f:12:44:70:60:c2:6b:e1:b1:ca:85:15:a6:f0:b6: a7:0c:e5:90:6a:bc:a8:46:c3:8a:c8:2d:82:6e:f2:ee:4a:63: 8b:9d:d4:5c:b4:8c:2d:d0:0c:7e:bb:7b:91:5b:b7:2f:b1:bf: d5:73:d4:46:0b:c4:5e:c9:ba:40:d6:78:96:c5:c1:39:68:f8: 81:45:23:6d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYu3MYMhou9587lqPPzQZ4wzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTEwMDMwNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzFiZjdhOGVhY2M2NGIyNWM2YWRkMTQ2Njk5ZjE0OWJkNjgxYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdXPvGsFoJx2ch9vXta2gXX1M18M xopeLenLFJKbLcCj2op53JWRqZ9IgoQxsSbkfaOf8oJiSUw0UIMyQKt0+rzjhJEr 8bNXYYUAx1McHVX4MIa8L9iyV3IpLBBFUPjLUFgZomnV9dauJsfksEBv7ecO/Qeo xqqk4/rWwJcP2+XuN/o0jNd47Ypgsx0ySbJSyF4uTY71Lu02lBkdqQ19NTlGZ/QV 5rm/wpA2BpgAsyNgZSVOb21Iabsxg4C4bMXZXUT6lVczolpuSE3zXc58puTJGn9U fWTifB8rs9NCAMEuJw1lpwVqfIBnMoG3Ltk0dUzLRCrCbRNslUxNoLGEAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDcb96jqzGSyXGrdFGaZ8Um9aBr0MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvTnh2M3FPck1aTEpjYXQwVVpwbnhTYjFvR3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACQHsa/PU36qKQ5M99fU uWj5wY//q/VVrpefA6GmznVhsGudTQT/COUxYQNRGbZsCOMxpuiaP2O4gAL+kDVq u3K0H9jEk3HLZP4zDbuFKfE8VSXBOh7dJqyQNJGG2VLMSqi2t3crse1JMTOP2ZNk bScCO7dAGyZsLVW5Pf7YOgqY7PLLTtIAAqbBTTkJFHZ5BRMWcY99oUwjNr3SGvLP LYZhnYHjp22xl0Wr9nLCpOtqg40Oz4iMvC8SRHBgwmvhscqFFabwtqcM5ZBqvKhG w4rILYJu8u5KY4ud1Fy0jC3QDH67e5Fbty+xv9Vz1EYLxF7JukDWeJbFwTlo+IFF I20= -----END CERTIFICATE-----Generated at Tue Dec 30 04:38:04 2025 by rpki-client