This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VJBglQwKvqmhsuUHGcoA2xXXbPw.roa File: VJBglQwKvqmhsuUHGcoA2xXXbPw.roa (raw, json) Hash identifier: SwTInQiZuAobJvlwsppN3rIwq5+jhgyy67kuEN5gkAo= Subject key identifier: 54:90:60:95:0C:0A:BE:A9:A1:B2:E5:07:19:CA:00:DB:15:D7:6C:FC Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018BF8354184F51432919BBE4599402BA168 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VJBglQwKvqmhsuUHGcoA2xXXbPw.roa Signing time: Wed 22 Nov 2023 18:05:21 +0000 ROA not before: Wed 22 Nov 2023 18:05:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64:ffff:0:18b:f834:b3f6/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:f8:35:41:84:f5:14:32:91:9b:be:45:99:40:2b:a1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 22 18:05:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=549060950c0abea9a1b2e50719ca00db15d76cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:c6:9c:27:df:f8:b5:69:e2:fb:a3:92:e5: 95:19:09:9f:ce:14:8a:23:71:61:60:98:09:d5:1c: 75:9a:21:9e:1b:20:f5:19:cc:e9:d3:df:f0:ce:f8: 42:b7:6e:6d:3c:0b:67:b3:f0:b7:53:93:e4:fe:e7: bd:ff:88:4d:75:99:e8:a0:9c:34:03:32:24:d7:ff: 10:8a:08:39:dd:73:4d:c7:e6:12:74:33:95:67:68: 2b:8b:8f:4f:57:5d:20:33:e9:8b:dc:6e:de:ca:64: df:9a:3a:6b:93:35:15:3c:80:4c:8e:e8:2f:bf:ef: af:93:34:b0:a5:75:18:b2:b5:d6:62:85:65:f4:7c: e6:1e:44:68:d2:cf:a8:38:40:ba:df:86:ef:87:fc: d5:be:94:38:6a:62:42:63:bf:75:cf:ec:d5:70:96: 48:b2:d4:10:9e:83:46:13:8c:db:ab:7c:7e:cb:32: 7d:24:4b:e4:6c:74:d9:60:9f:1d:61:e7:ec:53:14: b0:07:e2:0d:87:8b:73:2e:e6:94:e5:da:91:f4:63: 75:6f:6f:7c:77:74:16:57:e0:9f:ae:b1:5c:79:43: 28:23:36:b6:06:82:84:28:e5:79:c1:31:96:27:02: 27:76:a6:07:d8:42:94:3f:89:c2:7b:73:6f:ef:34: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:90:60:95:0C:0A:BE:A9:A1:B2:E5:07:19:CA:00:DB:15:D7:6C:FC X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VJBglQwKvqmhsuUHGcoA2xXXbPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption d1:fb:80:85:9c:a0:25:fe:ec:80:c6:97:30:f4:46:44:e3:49: 80:3b:2c:e8:84:3c:3a:04:fb:69:bd:40:d8:12:8a:4a:fc:2a: e2:81:38:93:9f:55:bd:b3:ec:42:a9:9d:da:9a:c5:12:73:37: 0e:36:6c:92:08:48:5c:78:d3:c8:99:ba:0a:61:10:df:33:da: e7:7f:b2:f6:50:82:ae:7c:5f:72:22:e4:3c:b2:63:af:de:36: 6f:01:9b:ce:85:eb:7b:b4:32:c4:0f:9c:f3:dd:ec:c3:2c:a9: 3b:e2:e7:f0:b4:b6:6e:9c:71:77:d8:83:89:98:cd:be:5a:40: de:8c:35:52:26:32:e3:a6:f3:b8:f8:13:d4:e8:37:8b:67:ae: 60:27:28:5d:f1:c9:73:8c:81:32:4e:24:e6:8a:33:be:6f:c2: 8d:1c:6e:55:9f:dc:73:ba:2e:a7:b8:9b:31:ba:31:2d:2d:d8: 3b:7a:c5:bd:c7:5c:15:50:1d:57:c7:4b:41:47:d5:43:03:da: bb:6f:2a:4e:4c:11:f4:aa:bb:6f:e6:fb:85:4a:6e:4c:bd:02: 0b:36:05:c4:af:7d:ce:1e:3a:ec:93:08:26:9c:e4:70:c6:dd: e3:84:38:ec:aa:ee:04:b8:4e:0b:ed:af:e3:dc:07:f1:a8:c2: 08:d4:e2:f2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYv4NUGE9RQykZu+RZlAK6FoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTIyMTgwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDkwNjA5NTBjMGFiZWE5YTFiMmU1MDcxOWNhMDBkYjE1ZDc2Y2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunvGnCff+LVp4vujkuWVGQmfzhSK I3FhYJgJ1Rx1miGeGyD1Gczp09/wzvhCt25tPAtns/C3U5Pk/ue9/4hNdZnooJw0 AzIk1/8Qigg53XNNx+YSdDOVZ2gri49PV10gM+mL3G7eymTfmjprkzUVPIBMjugv v++vkzSwpXUYsrXWYoVl9HzmHkRo0s+oOEC634bvh/zVvpQ4amJCY791z+zVcJZI stQQnoNGE4zbq3x+yzJ9JEvkbHTZYJ8dYefsUxSwB+INh4tzLuaU5dqR9GN1b298 d3QWV+CfrrFceUMoIza2BoKEKOV5wTGWJwIndqYH2EKUP4nCe3Nv7zQ0UwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFSQYJUMCr6pobLlBxnKANsV12z8MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvVkpCZ2xRd0t2cW1oc3VVSEdjb0EyeFhYYlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBANH7gIWcoCX+7IDGlzD0 RkTjSYA7LOiEPDoE+2m9QNgSikr8KuKBOJOfVb2z7EKpndqaxRJzNw42bJIISFx4 08iZugphEN8z2ud/svZQgq58X3Ii5DyyY6/eNm8Bm86F63u0MsQPnPPd7MMsqTvi 5/C0tm6ccXfYg4mYzb5aQN6MNVImMuOm87j4E9ToN4tnrmAnKF3xyXOMgTJOJOaK M75vwo0cblWf3HO6Lqe4mzG6MS0t2Dt6xb3HXBVQHVfHS0FH1UMD2rtvKk5MEfSq u2/m+4VKbky9Ags2BcSvfc4eOuyTCCac5HDG3eOEOOyq7gS4Tgvtr+PcB/GowgjU 4vI= -----END CERTIFICATE-----Generated at Thu Dec 25 03:34:07 2025 by rpki-client