This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZEHV7LYgZQZN0ONvGc_n1I1ph_s.roa File: ZEHV7LYgZQZN0ONvGc_n1I1ph_s.roa (raw, json) Hash identifier: 4gsKdjJGHoPYKKquWWEHMXH2U0QsNkYSUv+EV1M6+dc= Subject key identifier: 64:41:D5:EC:B6:20:65:06:4D:D0:E3:6F:19:CF:E7:D4:8D:69:87:FB Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C27A125BFCFFE6BC3B411DD0563C43285 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZEHV7LYgZQZN0ONvGc_n1I1ph_s.roa Signing time: Fri 01 Dec 2023 23:05:21 +0000 ROA not before: Fri 01 Dec 2023 23:05:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64:ffff:0:18c:27a0:d66c/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:27:a1:25:bf:cf:fe:6b:c3:b4:11:dd:05:63:c4:32:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 1 23:05:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6441d5ecb62065064dd0e36f19cfe7d48d6987fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:54:bc:54:56:25:5e:fd:48:64:28:36:62:90: 70:3c:ef:45:b7:e5:30:b8:1f:8b:8b:a6:60:03:10: 4e:47:84:03:e0:4a:bf:19:5f:31:1b:a0:a1:4e:64: 0b:85:a4:dc:97:d0:8c:82:bd:c0:9e:46:f8:3b:76: 07:80:73:fe:27:3d:e8:fd:a9:3d:e5:ea:7e:87:b6: 6d:26:77:7b:4d:6f:d4:25:74:8b:69:95:77:ed:e8: b5:1c:de:97:f5:82:7e:00:4b:dd:f7:21:6c:4a:50: 80:4a:08:f1:4f:0f:6f:4c:d1:1b:a0:cc:9b:88:bf: 80:49:04:63:a6:ed:3b:12:1a:ef:6c:e6:b0:8e:32: 85:0c:62:66:d6:a7:9b:06:89:f6:6f:b0:8d:64:84: 81:40:59:a0:4d:cc:50:6f:5c:39:44:21:63:ae:f7: c7:86:bc:d1:72:d1:d1:65:d6:e1:65:e9:b4:39:eb: 75:12:a9:33:a4:98:4e:93:df:d6:ef:ca:2d:c3:8b: e8:db:78:a7:68:5c:a2:85:ab:00:10:f2:a9:cb:1b: e0:9a:5f:3f:49:9a:08:8d:44:0a:c6:db:41:57:c2: a4:5f:14:a6:2d:6d:b9:17:37:33:00:25:6e:50:dd: 0a:b9:b0:23:91:6f:8e:f5:c1:d8:7a:38:c4:36:48: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:41:D5:EC:B6:20:65:06:4D:D0:E3:6F:19:CF:E7:D4:8D:69:87:FB X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZEHV7LYgZQZN0ONvGc_n1I1ph_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption ce:e0:6d:49:42:0d:98:61:fb:95:b2:a2:f6:c4:a5:54:68:bb: b5:b4:7d:57:02:12:00:55:be:33:92:32:fb:bb:f9:c7:8a:8e: 43:ad:cb:e7:d4:85:66:a1:ea:4f:1a:43:3d:c0:bb:28:f4:1f: 95:1a:8e:59:e2:83:ae:f5:a5:2d:c2:ac:bc:6e:d0:d0:6f:93: e8:1e:34:f4:8e:dc:3d:f3:fd:d2:01:58:dc:f6:35:4e:f4:bd: 61:d8:66:b5:e9:1d:e5:e0:c0:d3:f1:07:a5:c9:a4:5a:7e:88: 6e:56:b8:86:ef:f6:c1:ff:07:3b:45:73:4f:cb:72:78:26:1c: a2:d7:19:d3:32:43:05:3a:49:e1:43:09:6e:c3:8c:25:fe:78: 7f:3e:f2:3e:c7:d0:99:e4:fa:05:4e:a4:98:b8:a7:ff:cd:ab: 4a:ca:22:ff:58:21:7f:c0:1f:e9:56:c3:2c:06:5f:d8:8c:f8: 27:f7:71:22:23:69:a7:b5:92:f9:22:13:c0:44:f3:e0:c4:d4: 47:91:10:c1:5c:e7:74:5c:87:1f:48:81:12:3b:03:fe:6c:9d: 89:b5:de:f5:19:20:a0:95:e7:95:ed:81:c3:c3:24:c5:f6:65: 7e:3a:4b:b7:94:c0:7f:14:2f:2f:2b:b5:96:47:37:83:dd:c3: 54:a0:3d:de -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYwnoSW/z/5rw7QR3QVjxDKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjAxMjMwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDQxZDVlY2I2MjA2NTA2NGRkMGUzNmYxOWNmZTdkNDhkNjk4N2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VS8VFYlXv1IZCg2YpBwPO9Ft+Uw uB+Li6ZgAxBOR4QD4Eq/GV8xG6ChTmQLhaTcl9CMgr3Ankb4O3YHgHP+Jz3o/ak9 5ep+h7ZtJnd7TW/UJXSLaZV37ei1HN6X9YJ+AEvd9yFsSlCASgjxTw9vTNEboMyb iL+ASQRjpu07EhrvbOawjjKFDGJm1qebBon2b7CNZISBQFmgTcxQb1w5RCFjrvfH hrzRctHRZdbhZem0Oet1EqkzpJhOk9/W78otw4vo23inaFyihasAEPKpyxvgml8/ SZoIjUQKxttBV8KkXxSmLW25FzczACVuUN0KubAjkW+O9cHYejjENkjlywIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGRB1ey2IGUGTdDjbxnP59SNaYf7MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvWkVIVjdMWWdaUVpOME9OdkdjX24xSTFwaF9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAM7gbUlCDZhh+5WyovbE pVRou7W0fVcCEgBVvjOSMvu7+ceKjkOty+fUhWah6k8aQz3Auyj0H5Uajlnig671 pS3CrLxu0NBvk+geNPSO3D3z/dIBWNz2NU70vWHYZrXpHeXgwNPxB6XJpFp+iG5W uIbv9sH/BztFc0/LcngmHKLXGdMyQwU6SeFDCW7DjCX+eH8+8j7H0Jnk+gVOpJi4 p//Nq0rKIv9YIX/AH+lWwywGX9iM+Cf3cSIjaae1kvkiE8BE8+DE1EeREMFc53Rc hx9IgRI7A/5snYm13vUZIKCV55XtgcPDJMX2ZX46S7eUwH8ULy8rtZZHN4Pdw1Sg Pd4= -----END CERTIFICATE-----Generated at Sun Dec 28 03:21:33 2025 by rpki-client