This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eBZ2DNB9Z-o5Z8pUhJN8bqAnqiI.roa File: eBZ2DNB9Z-o5Z8pUhJN8bqAnqiI.roa (raw, json) Hash identifier: 8NqwdAHjkcMiD+mimVVVAyzpJdlAHV1L2NS+4LystYk= Subject key identifier: 78:16:76:0C:D0:7D:67:EA:39:67:CA:54:84:93:7C:6E:A0:27:AA:22 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B3F783745CCC3B3396F6D337F099D72F0 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eBZ2DNB9Z-o5Z8pUhJN8bqAnqiI.roa Signing time: Tue 17 Oct 2023 21:08:44 +0000 ROA not before: Tue 17 Oct 2023 21:08:44 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64:ffff:0:18b:3f74:2217/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:3f:78:37:45:cc:c3:b3:39:6f:6d:33:7f:09:9d:72:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 17 21:08:44 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=7816760cd07d67ea3967ca5484937c6ea027aa22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f9:2e:d2:6a:a1:fd:1e:a1:5d:4c:15:b3:03: b1:dc:5d:ee:93:54:26:ff:cc:9f:11:54:e6:f7:c2: f4:95:68:77:42:8e:7b:c6:8e:2a:62:c6:b3:51:b0: 37:a6:b9:2f:5c:53:fa:a5:ea:b2:f0:29:a3:1f:a8: 07:57:df:02:e4:0f:d5:5d:ab:7c:cb:f6:70:eb:f9: ca:95:00:02:15:dc:98:32:db:79:35:8e:27:e5:29: 97:e2:5d:42:27:14:80:2c:98:f7:82:75:dd:91:6e: 18:bc:35:4f:f0:4f:c3:12:69:c4:42:77:f4:93:19: 52:a6:ad:18:74:55:c3:3c:52:74:b2:79:5b:7e:d9: 25:a1:b9:04:9e:1f:10:01:71:11:4a:5d:2f:4b:a4: 72:58:23:a3:9c:8f:6b:3f:4f:c8:2d:da:ef:30:4d: 6c:66:10:ae:b5:02:56:69:b8:58:c2:29:7c:0c:b7: 23:75:c9:5c:57:19:db:2f:03:21:e8:df:29:be:9f: 09:0f:16:cb:99:a0:c6:17:28:30:4c:60:48:65:e6: f2:e6:45:f4:e9:48:8f:02:a2:4c:57:b2:37:97:10: 3d:7a:63:2b:e5:58:2b:19:0c:e9:9f:0b:f9:3f:31: cb:ff:76:9b:00:d5:fb:cd:9c:34:e9:0c:c5:d8:12: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:16:76:0C:D0:7D:67:EA:39:67:CA:54:84:93:7C:6E:A0:27:AA:22 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eBZ2DNB9Z-o5Z8pUhJN8bqAnqiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 12:2d:97:42:79:c7:b6:bb:f5:cc:3e:18:b7:ee:ea:bd:2f:d8: ea:3a:7e:18:34:08:9e:2a:36:48:c1:47:da:70:d6:34:9d:65: 2d:bf:0c:9a:b0:0d:45:ea:d3:c6:27:07:a1:58:9b:5d:88:40: 15:74:27:f7:d1:bf:01:e9:7d:dc:df:1b:a4:db:13:a3:5a:3f: 90:ad:8a:86:ba:79:ed:63:28:79:9e:21:af:ad:95:c3:12:7b: 1e:9b:1a:16:63:93:2d:90:a6:e2:96:89:2f:d5:88:01:67:53: de:a3:75:8f:48:2f:42:c5:80:1f:d1:55:60:10:3b:5e:fe:ef: 4f:ce:e0:97:02:f3:e4:a6:21:22:1a:ff:22:e6:37:88:08:86: 69:0f:9a:6b:6f:44:d5:24:18:30:84:25:7a:e5:89:51:41:d6: d1:14:bd:aa:4d:9b:79:1c:eb:77:77:14:36:6d:a3:91:87:e3: e3:d8:fc:0c:60:63:fc:7b:a5:f5:56:e3:4a:8a:3c:f9:1c:6d: e5:90:36:70:29:bf:92:be:86:3d:ae:84:7b:64:83:b0:da:f0: ad:4f:09:fa:7c:31:81:fe:2d:e3:bb:95:a8:eb:d1:b6:a1:78: 48:b9:fc:83:3c:83:18:a4:59:0a:52:cf:ad:db:d4:3f:e4:49: 13:fe:88:cd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYs/eDdFzMOzOW9tM38JnXLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDE3MjEwODQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODE2NzYwY2QwN2Q2N2VhMzk2N2NhNTQ4NDkzN2M2ZWEwMjdhYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvku0mqh/R6hXUwVswOx3F3uk1Qm /8yfEVTm98L0lWh3Qo57xo4qYsazUbA3prkvXFP6peqy8CmjH6gHV98C5A/VXat8 y/Zw6/nKlQACFdyYMtt5NY4n5SmX4l1CJxSALJj3gnXdkW4YvDVP8E/DEmnEQnf0 kxlSpq0YdFXDPFJ0snlbftklobkEnh8QAXERSl0vS6RyWCOjnI9rP0/ILdrvME1s ZhCutQJWabhYwil8DLcjdclcVxnbLwMh6N8pvp8JDxbLmaDGFygwTGBIZeby5kX0 6UiPAqJMV7I3lxA9emMr5VgrGQzpnwv5PzHL/3abANX7zZw06QzF2BIBmQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHgWdgzQfWfqOWfKVISTfG6gJ6oiMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvZUJaMkROQjlaLW81WjhwVWhKTjhicUFucWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABItl0J5x7a79cw+GLfu 6r0v2Oo6fhg0CJ4qNkjBR9pw1jSdZS2/DJqwDUXq08YnB6FYm12IQBV0J/fRvwHp fdzfG6TbE6NaP5Ctioa6ee1jKHmeIa+tlcMSex6bGhZjky2QpuKWiS/ViAFnU96j dY9IL0LFgB/RVWAQO17+70/O4JcC8+SmISIa/yLmN4gIhmkPmmtvRNUkGDCEJXrl iVFB1tEUvapNm3kc63d3FDZto5GH4+PY/AxgY/x7pfVW40qKPPkcbeWQNnApv5K+ hj2uhHtkg7Da8K1PCfp8MYH+LeO7lajr0baheEi5/IM8gxikWQpSz63b1D/kSRP+ iM0= -----END CERTIFICATE-----Generated at Mon Dec 29 00:46:25 2025 by rpki-client