This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eQUsOsS2vYMcUSD7AVt0YpBn5vw.roa File: eQUsOsS2vYMcUSD7AVt0YpBn5vw.roa (raw, json) Hash identifier: Xr7DkG+LCsHPUCmD4dPQcB3DIRmEb69WPLqTDH1f5m0= Subject key identifier: 79:05:2C:3A:C4:B6:BD:83:1C:51:20:FB:01:5B:74:62:90:67:E6:FC Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C133DB9B8707697F970DE312F3D748A40 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eQUsOsS2vYMcUSD7AVt0YpBn5vw.roa Signing time: Tue 28 Nov 2023 00:04:21 +0000 ROA not before: Tue 28 Nov 2023 00:04:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18c:133d:930d/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:13:3d:b9:b8:70:76:97:f9:70:de:31:2f:3d:74:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 28 00:04:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=79052c3ac4b6bd831c5120fb015b74629067e6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0b:e2:18:43:39:a9:11:63:ff:d3:16:a5:ee: b0:07:2e:d7:2d:a5:f0:bf:1c:2b:60:9d:bd:f5:88: 2e:1c:3a:1a:b7:96:60:35:a2:17:d8:ad:fd:31:b6: 20:be:63:2c:ee:2f:41:1e:f1:e5:33:62:96:af:09: 5a:7f:2a:4a:92:1a:af:3d:9a:8f:a4:88:28:c3:57: 98:fc:35:65:37:0c:66:fc:63:d5:25:ca:64:03:a3: de:65:6b:e9:6d:fa:b6:98:4e:78:29:7e:6e:55:94: 51:da:43:9c:99:27:11:82:a2:70:16:de:02:3b:d1: 7c:42:32:67:4a:ba:70:cb:65:47:84:08:d0:01:8e: 77:cf:f9:91:cc:83:b5:ee:71:63:b4:c8:6b:c2:2e: e6:d8:c7:d3:11:45:bf:23:ef:38:23:f7:53:5a:9d: 03:f5:35:04:c5:7b:16:c8:d8:54:55:80:51:72:4d: dc:d9:fd:9d:6a:7a:93:d9:c8:0b:99:81:0a:bd:e1: c2:dd:e6:a5:6a:b8:6a:f9:87:71:5a:1c:1a:96:3d: 89:75:94:37:ba:3d:66:f5:8f:8c:ea:60:9c:a8:1b: 12:62:56:0b:c7:7f:bf:46:89:7e:dd:87:9f:78:5a: 82:17:ad:c7:a8:64:fc:d7:38:b1:0e:61:5a:b1:38: a6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:05:2C:3A:C4:B6:BD:83:1C:51:20:FB:01:5B:74:62:90:67:E6:FC X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eQUsOsS2vYMcUSD7AVt0YpBn5vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 9c:d4:6b:a1:b0:8f:16:f5:a9:de:80:39:b3:48:f1:7d:cf:f6: 2e:ec:65:d7:ac:e4:95:ee:12:c1:ff:35:05:68:46:88:37:4b: 3f:1b:64:cc:f8:f5:2a:61:50:60:0c:01:2a:09:85:de:8d:0f: 70:3d:3f:7a:50:31:d9:81:ed:12:82:3b:24:a8:fc:ce:09:cb: 55:93:29:92:07:29:c5:df:50:f5:de:94:ef:40:49:79:38:9e: bf:84:0d:98:ed:2f:a0:8c:85:8d:f0:63:1e:cc:e0:40:ba:70: ac:3e:49:a1:bc:d1:26:0c:02:a3:78:91:94:34:e9:a1:96:8c: 02:d6:7b:f4:e9:7a:e4:9d:88:f6:95:58:20:09:40:0c:a6:3e: 22:67:14:7a:e6:7d:d0:ee:19:47:d5:96:60:54:21:33:7b:bb: 87:b6:a3:1b:e3:35:fd:33:15:c9:f3:7a:28:a7:5d:c2:30:da: 89:6a:6e:42:a5:f9:f8:f7:b8:ff:d4:c4:08:9b:6b:15:a1:29: 78:86:5f:76:15:bf:64:f0:ed:ca:0f:34:1f:b6:fb:98:0a:a1: 2b:29:96:02:42:5e:f9:84:3b:59:15:88:c8:ff:9e:84:d3:08: fd:5d:7d:e9:00:39:06:fa:3a:8a:e6:62:51:d2:f5:a6:95:d7: ba:2e:a8:09 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYwTPbm4cHaX+XDeMS89dIpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTI4MDAwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTA1MmMzYWM0YjZiZDgzMWM1MTIwZmIwMTViNzQ2MjkwNjdlNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgviGEM5qRFj/9MWpe6wBy7XLaXw vxwrYJ299YguHDoat5ZgNaIX2K39MbYgvmMs7i9BHvHlM2KWrwlafypKkhqvPZqP pIgow1eY/DVlNwxm/GPVJcpkA6PeZWvpbfq2mE54KX5uVZRR2kOcmScRgqJwFt4C O9F8QjJnSrpwy2VHhAjQAY53z/mRzIO17nFjtMhrwi7m2MfTEUW/I+84I/dTWp0D 9TUExXsWyNhUVYBRck3c2f2danqT2cgLmYEKveHC3ealarhq+YdxWhwalj2JdZQ3 uj1m9Y+M6mCcqBsSYlYLx3+/Rol+3YefeFqCF63HqGT81zixDmFasTimWwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHkFLDrEtr2DHFEg+wFbdGKQZ+b8MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvZVFVc09zUzJ2WU1jVVNEN0FWdDBZcEJuNXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJzUa6Gwjxb1qd6AObNI 8X3P9i7sZdes5JXuEsH/NQVoRog3Sz8bZMz49SphUGAMASoJhd6ND3A9P3pQMdmB 7RKCOySo/M4Jy1WTKZIHKcXfUPXelO9ASXk4nr+EDZjtL6CMhY3wYx7M4EC6cKw+ SaG80SYMAqN4kZQ06aGWjALWe/TpeuSdiPaVWCAJQAymPiJnFHrmfdDuGUfVlmBU ITN7u4e2oxvjNf0zFcnzeiinXcIw2olqbkKl+fj3uP/UxAibaxWhKXiGX3YVv2Tw 7coPNB+2+5gKoSsplgJCXvmEO1kViMj/noTTCP1dfekAOQb6OormYlHS9aaV17ou qAk= -----END CERTIFICATE-----Generated at Thu Jan 8 23:11:58 2026 by rpki-client