This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V2pXYjOLX8iMogJiv6Rz6z2h6TA.roa File: V2pXYjOLX8iMogJiv6Rz6z2h6TA.roa (raw, json) Hash identifier: PYMhXYIpgjmQ3PW7edYCjc7ccXd/55AZRGzO6IGrkYo= Subject key identifier: 57:6A:57:62:33:8B:5F:C8:8C:A2:02:62:BF:A4:73:EB:3D:A1:E9:30 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018BCA49852109AAE23C0748D817259CB776 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V2pXYjOLX8iMogJiv6Rz6z2h6TA.roa Signing time: Mon 13 Nov 2023 20:04:57 +0000 ROA not before: Mon 13 Nov 2023 20:04:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18b:ca48:df64/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:ca:49:85:21:09:aa:e2:3c:07:48:d8:17:25:9c:b7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 13 20:04:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=576a5762338b5fc88ca20262bfa473eb3da1e930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:c6:2f:a5:62:df:d0:68:4b:22:c5:3b:1a: 98:d0:89:2f:05:9a:16:9e:21:39:1c:7f:4e:d4:54: a2:a8:cc:41:19:90:e3:f4:32:ac:ba:64:e4:5b:f7: 8a:85:03:39:48:e7:48:e1:c7:7d:f5:eb:ed:2f:12: d6:0e:63:17:f6:4f:7c:59:eb:6c:61:b0:7e:0d:0c: 5d:e6:36:24:0f:78:34:a6:61:57:44:64:00:47:af: e3:ea:a3:5c:70:1f:07:0b:c9:1f:72:42:b9:c5:fd: 53:63:d0:78:61:92:2d:4b:82:e9:fc:95:a2:d4:97: 0e:0f:e1:f0:cc:d2:8e:29:b1:7a:eb:f9:fa:1a:25: 82:60:38:9b:70:74:ec:62:dc:b1:04:ab:20:47:39: 1b:28:fa:bb:fa:e2:57:50:f1:44:7b:29:fa:bd:0b: 89:66:68:d2:15:bf:63:8f:bf:d0:e7:53:d4:e2:ae: ad:50:f6:0e:1b:52:37:1a:f0:0b:d6:a6:6e:b6:0c: c9:99:b9:96:10:a6:68:65:3f:6a:10:35:af:25:d1: 3c:62:07:5b:98:69:b7:7e:ad:b3:52:94:09:aa:a8: c9:9d:db:d5:6c:d7:48:05:3f:24:3a:16:66:98:0c: 85:08:47:5d:2b:cb:b8:c9:4a:57:be:15:2c:f4:d1: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6A:57:62:33:8B:5F:C8:8C:A2:02:62:BF:A4:73:EB:3D:A1:E9:30 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V2pXYjOLX8iMogJiv6Rz6z2h6TA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 7b:f6:7b:fc:33:53:9e:d9:e7:1e:a2:f9:b1:3c:3a:66:31:0a: cb:cf:53:20:4a:5c:b3:34:5f:6d:fe:89:8c:42:87:48:9d:d1: 61:8e:4d:d6:e8:0b:72:ff:2b:63:db:82:fa:f1:fd:98:aa:c1: 71:f9:6a:62:75:02:c9:77:33:6d:4f:d9:25:5a:42:3f:cf:b7: 3d:5c:87:0f:e1:ca:59:ff:86:32:99:c0:06:04:49:bb:ab:d5: 69:e5:35:f9:4e:8a:c7:2b:5c:66:79:71:c7:ef:2a:dc:d7:4e: bd:b2:ee:74:87:2a:a7:a1:8d:31:82:8e:62:92:9a:61:9f:86: a5:1a:eb:60:bb:de:0c:f5:ec:d6:8d:3d:91:1f:98:7d:d0:00: 08:a2:d2:9d:d6:0d:0d:d1:8f:6e:79:9f:a3:ca:11:05:80:fb: 4e:f2:8f:32:ee:72:37:46:f0:18:b8:84:76:0c:14:dd:dc:11: d2:ab:8f:83:89:71:4c:78:2a:55:4a:d4:28:9e:e0:8d:d7:e6: 34:f0:7e:a3:e1:69:f4:50:e4:5f:50:ef:e4:ba:23:89:67:9c: f5:fd:08:13:cb:79:fb:ee:a0:c7:ac:2a:bb:bf:cf:64:36:09: f7:8e:99:af:49:ea:24:27:96:2d:f0:d4:ea:32:e4:42:c1:6a: 0b:a9:c2:da -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYvKSYUhCariPAdI2BclnLd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTEzMjAwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzZhNTc2MjMzOGI1ZmM4OGNhMjAyNjJiZmE0NzNlYjNkYTFlOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+7GL6Vi39BoSyLFOxqY0IkvBZoW niE5HH9O1FSiqMxBGZDj9DKsumTkW/eKhQM5SOdI4cd99evtLxLWDmMX9k98Wets YbB+DQxd5jYkD3g0pmFXRGQAR6/j6qNccB8HC8kfckK5xf1TY9B4YZItS4Lp/JWi 1JcOD+HwzNKOKbF66/n6GiWCYDibcHTsYtyxBKsgRzkbKPq7+uJXUPFEeyn6vQuJ ZmjSFb9jj7/Q51PU4q6tUPYOG1I3GvAL1qZutgzJmbmWEKZoZT9qEDWvJdE8Ygdb mGm3fq2zUpQJqqjJndvVbNdIBT8kOhZmmAyFCEddK8u4yUpXvhUs9NHaDwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFdqV2Izi1/IjKICYr+kc+s9oekwMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvVjJwWFlqT0xYOGlNb2dKaXY2Uno2ejJoNlRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHv2e/wzU57Z5x6i+bE8 OmYxCsvPUyBKXLM0X23+iYxCh0id0WGOTdboC3L/K2Pbgvrx/ZiqwXH5amJ1Asl3 M21P2SVaQj/Ptz1chw/hyln/hjKZwAYESbur1WnlNflOiscrXGZ5ccfvKtzXTr2y 7nSHKqehjTGCjmKSmmGfhqUa62C73gz17NaNPZEfmH3QAAii0p3WDQ3Rj255n6PK EQWA+07yjzLucjdG8Bi4hHYMFN3cEdKrj4OJcUx4KlVK1Cie4I3X5jTwfqPhafRQ 5F9Q7+S6I4lnnPX9CBPLefvuoMesKru/z2Q2CfeOma9J6iQnli3w1Ooy5ELBagup wto= -----END CERTIFICATE-----Generated at Mon Dec 29 22:48:17 2025 by rpki-client