This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bYltsTs4vMlq2P5MebwtUYlP9vY.roa File: bYltsTs4vMlq2P5MebwtUYlP9vY.roa (raw, json) Hash identifier: PykDk1BLIxWY4JwRE+mhxp6otVDK/I20kxoiRR9Ntmc= Subject key identifier: 6D:89:6D:B1:3B:38:BC:C9:6A:D8:FE:4C:79:BC:2D:51:89:4F:F6:F6 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B52C3F69859665041CBCE815DF864AE19 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bYltsTs4vMlq2P5MebwtUYlP9vY.roa Signing time: Sat 21 Oct 2023 15:04:16 +0000 ROA not before: Sat 21 Oct 2023 15:04:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:52c3:eb2b/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:52:c3:f6:98:59:66:50:41:cb:ce:81:5d:f8:64:ae:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 21 15:04:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6d896db13b38bcc96ad8fe4c79bc2d51894ff6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:0f:af:d0:e6:23:1a:e7:0d:ff:fe:8c:53: 62:e6:65:ba:0e:9f:ce:2a:41:07:ae:8d:f9:10:dc: 70:52:7b:00:b8:01:1c:34:b9:47:56:60:e7:b2:63: 64:00:28:38:c5:14:95:3a:59:31:19:28:ea:e1:30: 81:63:cb:4e:ce:eb:f2:33:50:d8:2f:7b:34:6b:6e: fc:80:04:61:87:55:a4:23:d1:7b:f4:88:72:89:72: de:d6:f7:c2:2d:bd:00:c1:64:69:05:8d:b1:c1:31: fa:8f:3c:8e:ef:69:12:27:2f:84:80:c7:7e:c9:df: 10:e6:2a:6a:95:74:4c:f1:b5:59:64:d4:da:db:2f: af:a2:47:ed:1c:8d:80:09:27:29:27:9b:31:6a:b5: 70:05:69:bf:80:fd:ad:11:02:57:7f:3d:5c:54:89: aa:45:72:ac:bc:68:da:a0:c1:46:9f:7d:19:a6:61: 6c:ec:5b:b8:3d:00:23:9c:9a:85:bc:34:f5:11:5a: a4:cf:ef:69:4c:8c:99:76:bd:4d:fe:b5:1e:57:6e: 33:c8:b7:40:ea:90:3d:95:30:c0:a1:5b:3a:af:10: 80:94:ac:a7:e9:4f:23:5b:3a:44:fd:dd:a8:e2:67: 0c:a9:5f:5b:d0:74:d9:23:28:9e:f2:53:d3:13:8a: c2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:89:6D:B1:3B:38:BC:C9:6A:D8:FE:4C:79:BC:2D:51:89:4F:F6:F6 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bYltsTs4vMlq2P5MebwtUYlP9vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 80:9d:93:c1:e1:c7:19:4f:89:cf:38:20:f6:92:54:62:51:73: a2:c6:98:27:7c:60:91:8a:20:be:c6:23:0d:d6:48:60:b3:54: d2:18:0e:a5:f0:38:81:fd:e8:3d:63:db:8c:39:e8:80:2d:35: df:d4:47:99:8a:9a:15:99:fb:1f:4a:99:d9:a4:35:13:1f:bc: 70:45:14:c9:50:cd:ef:6f:65:1f:1e:a4:63:5f:03:02:61:44: 0f:66:b5:e4:16:34:87:a9:72:5d:c4:e7:6e:ab:2a:44:8b:b2: bf:bf:9d:da:11:d7:35:5e:ac:50:56:e3:45:3e:4d:5b:56:9f: 8f:81:18:1d:71:5e:23:4d:85:73:ee:36:eb:65:bb:60:27:1d: 1d:93:18:9c:6c:5d:b0:66:6a:cc:eb:93:48:88:39:42:4f:3c: d5:86:78:6b:68:96:cd:8f:76:2f:49:79:ef:f3:b7:fc:ee:a7: 69:f3:bf:78:98:20:05:39:e0:91:49:28:37:71:de:92:a4:c5: d6:19:24:53:0e:96:61:a7:7a:95:cd:6e:09:c6:53:be:fa:35: 84:65:e6:c6:1e:fa:5a:ca:7a:5d:df:20:98:41:25:c0:aa:2b: ef:6e:69:a6:0a:e3:ba:fa:35:23:ae:97:ca:69:8b:99:72:8c: 99:19:5e:d6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYtSw/aYWWZQQcvOgV34ZK4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDIxMTUwNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDg5NmRiMTNiMzhiY2M5NmFkOGZlNGM3OWJjMmQ1MTg5NGZmNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcUPr9DmIxrnDf/+jFNi5mW6Dp/O KkEHro35ENxwUnsAuAEcNLlHVmDnsmNkACg4xRSVOlkxGSjq4TCBY8tOzuvyM1DY L3s0a278gARhh1WkI9F79IhyiXLe1vfCLb0AwWRpBY2xwTH6jzyO72kSJy+EgMd+ yd8Q5ipqlXRM8bVZZNTa2y+vokftHI2ACScpJ5sxarVwBWm/gP2tEQJXfz1cVImq RXKsvGjaoMFGn30ZpmFs7Fu4PQAjnJqFvDT1EVqkz+9pTIyZdr1N/rUeV24zyLdA 6pA9lTDAoVs6rxCAlKyn6U8jWzpE/d2o4mcMqV9b0HTZIyie8lPTE4rCoQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG2JbbE7OLzJatj+THm8LVGJT/b2MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvYllsdHNUczR2TWxxMlA1TWVid3RVWWxQOXZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAICdk8HhxxlPic84IPaS VGJRc6LGmCd8YJGKIL7GIw3WSGCzVNIYDqXwOIH96D1j24w56IAtNd/UR5mKmhWZ +x9KmdmkNRMfvHBFFMlQze9vZR8epGNfAwJhRA9mteQWNIepcl3E526rKkSLsr+/ ndoR1zVerFBW40U+TVtWn4+BGB1xXiNNhXPuNutlu2AnHR2TGJxsXbBmaszrk0iI OUJPPNWGeGtols2Pdi9Jee/zt/zup2nzv3iYIAU54JFJKDdx3pKkxdYZJFMOlmGn epXNbgnGU776NYRl5sYe+lrKel3fIJhBJcCqK+9uaaYK47r6NSOul8ppi5lyjJkZ XtY= -----END CERTIFICATE-----Generated at Mon Dec 29 23:44:48 2025 by rpki-client