This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZHpEMM6G-K-2hQFGybueXZx8F1k.roa File: ZHpEMM6G-K-2hQFGybueXZx8F1k.roa (raw, json) Hash identifier: tMTF5cDoTKZtj2tj2P96/pdob5cl7uoAR7aUkMa6sFI= Subject key identifier: 64:7A:44:30:CE:86:F8:AF:B6:85:01:46:C9:BB:9E:5D:9C:7C:17:59 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018BB01BDB78FF965A3FA389DAD7E316D6B4 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZHpEMM6G-K-2hQFGybueXZx8F1k.roa Signing time: Wed 08 Nov 2023 18:04:57 +0000 ROA not before: Wed 08 Nov 2023 18:04:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:b01b:38c4/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:b0:1b:db:78:ff:96:5a:3f:a3:89:da:d7:e3:16:d6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 8 18:04:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=647a4430ce86f8afb6850146c9bb9e5d9c7c1759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:cc:b5:d1:8c:b7:4e:25:b7:50:e5:5b:f7: 38:64:23:a7:14:5b:5c:f4:c3:19:24:e4:18:43:e8: 79:04:a9:ba:ec:cc:92:34:3b:68:bf:3b:5d:67:92: 4c:46:9c:a7:b7:86:09:c9:fe:59:64:ec:b1:fc:ad: 46:89:02:d5:c4:cf:d4:f2:8f:fb:a7:90:a2:5d:99: 1d:ce:ff:39:9c:75:f1:8f:61:d3:4f:d5:84:8d:0f: 43:ad:93:db:05:f6:3e:a1:2a:db:86:39:7d:32:25: a4:a1:2d:ee:c7:14:f9:a9:56:92:34:d6:a6:16:75: 13:ef:a0:e5:22:e3:27:01:ab:0e:fa:ca:b5:61:cb: 75:74:d9:0c:4e:2d:9c:ab:e4:8c:6f:76:8c:6a:95: c6:84:d6:54:88:7a:1a:11:5f:a6:8b:c9:22:55:d0: aa:98:1e:89:d2:4d:de:a3:b1:48:4f:31:f6:52:3e: 49:b2:cc:f7:de:dd:4c:4e:1e:35:5b:05:65:e1:36: 49:0f:be:8f:e7:f2:75:1e:c0:b5:ed:d5:25:6d:3e: cb:ee:51:ff:41:20:41:b5:60:7c:b2:24:83:90:8d: 92:08:82:42:e9:30:3e:e3:b0:a4:51:88:de:6f:83: d2:ab:b0:01:e9:46:cf:b1:12:1f:5d:63:db:2e:d2: ff:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7A:44:30:CE:86:F8:AF:B6:85:01:46:C9:BB:9E:5D:9C:7C:17:59 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZHpEMM6G-K-2hQFGybueXZx8F1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption cf:3a:4f:b4:14:49:80:4d:8a:30:01:5d:7f:df:cb:e0:bd:19: 77:aa:f8:d6:26:87:c8:f3:24:41:23:2d:f6:43:d4:29:f0:9b: 2a:7c:cd:da:72:b5:f0:dd:80:00:4a:f8:7d:96:aa:0e:31:1c: e4:3f:8a:03:2e:86:d3:e4:62:e9:4a:64:0d:87:bd:ba:92:c0: ae:b5:98:66:a6:49:ca:b8:5a:90:02:5f:6e:dc:f5:a9:56:ff: 74:9a:4a:f6:9e:50:ab:7b:0c:81:e8:dd:35:85:e3:26:7e:91: 5c:06:36:8c:6d:91:51:63:32:98:9c:1e:20:24:7b:59:4e:05: c7:14:b4:e6:e8:1f:cd:ca:37:7b:8b:67:e4:67:fa:31:99:f0: 52:6b:71:73:3f:17:66:12:9e:4d:c1:04:78:d4:66:dc:87:f1: 96:37:64:e2:b7:f6:7f:b5:0d:e4:50:39:77:ef:65:da:e2:ec: 88:76:72:42:dd:f5:cf:f0:a7:66:18:9d:23:9d:92:b9:27:73: 8c:dc:55:c0:e8:f9:21:c3:59:91:30:ff:b0:cc:ef:84:6f:8b: bd:03:27:f1:4c:76:df:fa:d3:d8:ae:23:4c:04:0b:40:4b:dd: ca:07:78:3c:37:11:74:55:43:df:a3:2c:a9:55:02:db:72:9d: e3:25:ef:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYuwG9t4/5ZaP6OJ2tfjFta0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTA4MTgwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDdhNDQzMGNlODZmOGFmYjY4NTAxNDZjOWJiOWU1ZDljN2MxNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzjMtdGMt04lt1DlW/c4ZCOnFFtc 9MMZJOQYQ+h5BKm67MySNDtovztdZ5JMRpynt4YJyf5ZZOyx/K1GiQLVxM/U8o/7 p5CiXZkdzv85nHXxj2HTT9WEjQ9DrZPbBfY+oSrbhjl9MiWkoS3uxxT5qVaSNNam FnUT76DlIuMnAasO+sq1Yct1dNkMTi2cq+SMb3aMapXGhNZUiHoaEV+mi8kiVdCq mB6J0k3eo7FITzH2Uj5Jssz33t1MTh41WwVl4TZJD76P5/J1HsC17dUlbT7L7lH/ QSBBtWB8siSDkI2SCIJC6TA+47CkUYjeb4PSq7AB6UbPsRIfXWPbLtL/HQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGR6RDDOhvivtoUBRsm7nl2cfBdZMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvWkhwRU1NNkctSy0yaFFGR3lidWVYWng4RjFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAM86T7QUSYBNijABXX/f y+C9GXeq+NYmh8jzJEEjLfZD1Cnwmyp8zdpytfDdgABK+H2Wqg4xHOQ/igMuhtPk YulKZA2HvbqSwK61mGamScq4WpACX27c9alW/3SaSvaeUKt7DIHo3TWF4yZ+kVwG NoxtkVFjMpicHiAke1lOBccUtOboH83KN3uLZ+Rn+jGZ8FJrcXM/F2YSnk3BBHjU ZtyH8ZY3ZOK39n+1DeRQOXfvZdri7Ih2ckLd9c/wp2YYnSOdkrknc4zcVcDo+SHD WZEw/7DM74Rvi70DJ/FMdt/609iuI0wEC0BL3coHeDw3EXRVQ9+jLKlVAttyneMl 78g= -----END CERTIFICATE-----Generated at Mon Dec 29 14:39:01 2025 by rpki-client