This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eZlA4yTfJ8lRHZ9d7Bo8koTJsXQ.roa File: eZlA4yTfJ8lRHZ9d7Bo8koTJsXQ.roa (raw, json) Hash identifier: vkDSpVJbHsq5gjv8r4Qeqm/hYPJqA0couCp7znr27pI= Subject key identifier: 79:99:40:E3:24:DF:27:C9:51:1D:9F:5D:EC:1A:3C:92:84:C9:B1:74 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C4619DF51D6F4D164680949CD11CE9715 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eZlA4yTfJ8lRHZ9d7Bo8koTJsXQ.roa Signing time: Thu 07 Dec 2023 21:05:49 +0000 ROA not before: Thu 07 Dec 2023 21:05:49 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18c:4619:bb5b/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:46:19:df:51:d6:f4:d1:64:68:09:49:cd:11:ce:97:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 7 21:05:49 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=799940e324df27c9511d9f5dec1a3c9284c9b174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:06:cb:50:94:c1:ed:8d:d0:44:41:9a:c5: 9a:d8:58:96:c2:ea:59:77:4f:68:c9:a5:2b:2f:82: 9c:8c:4b:b6:a1:f8:c3:51:22:84:1c:91:7e:d7:91: 3d:8a:40:c3:b5:ad:4e:a5:9c:9e:8f:8d:49:65:09: ef:fe:96:96:3c:07:62:26:bb:e1:5a:d5:ff:9c:7b: 83:1b:93:de:dd:60:fd:5a:db:5d:46:eb:34:10:2c: fb:af:9c:45:0f:d6:55:c8:69:1d:00:8a:42:1f:cd: f8:e9:a5:92:39:7f:be:1c:97:70:e8:06:34:d0:e6: 97:fe:22:c8:51:33:8e:c6:bc:d3:cf:b8:8f:a8:24: 4d:70:8d:91:82:9b:ea:70:cb:b1:01:cd:76:4e:7c: 53:c3:ef:a1:d8:27:16:1d:aa:d1:94:48:dc:cd:07: 30:93:03:89:d7:53:80:3b:0a:d8:21:d6:ff:87:b2: 12:68:f8:b9:28:14:f4:3a:01:a5:20:d0:87:a1:17: 23:ec:7e:c4:25:d4:ea:ed:46:61:7a:9b:ed:ac:f2: b9:80:be:b0:ed:f7:05:47:fe:f5:aa:ea:74:e0:c7: 42:73:f4:99:6d:3a:4c:2c:46:2a:50:65:b8:3e:07: ec:32:ac:5e:85:a5:81:88:6f:c6:91:82:e0:99:e7: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:99:40:E3:24:DF:27:C9:51:1D:9F:5D:EC:1A:3C:92:84:C9:B1:74 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/eZlA4yTfJ8lRHZ9d7Bo8koTJsXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption ca:7e:2c:81:3a:87:5c:2e:13:be:4f:ea:a7:8b:87:54:77:5a: af:6d:22:53:11:25:dd:72:49:94:40:67:6c:60:ec:48:85:49: 06:0e:5c:e3:c6:48:34:b4:fb:86:53:20:42:c6:13:37:a3:04: 7a:79:f8:d9:22:d1:81:41:83:05:49:b9:65:ca:2b:6c:75:dc: aa:f5:d0:fc:91:7b:c9:6f:7a:89:33:e0:39:29:89:8f:87:97: dc:ea:d1:91:0a:50:78:be:c6:47:ea:24:b8:b3:26:ca:d8:f9: 0d:a8:26:65:fd:8a:e8:e8:f2:f8:e4:7c:5f:ee:53:35:71:c3: eb:9b:b0:1e:84:35:bf:d3:45:86:65:dd:ef:c7:ae:d3:9b:68: fc:15:77:20:ef:b0:7a:8c:47:4f:32:a9:02:69:51:c8:e0:fa: dd:c1:b0:dd:9b:c0:c0:8b:b5:2b:d1:76:a5:77:a2:19:07:b1: b2:80:62:88:aa:fd:52:75:b9:57:11:0c:83:dd:40:6f:5b:42: b8:c4:fa:03:79:1c:00:62:9c:31:e2:bd:e5:9a:e5:06:15:40: d8:fd:88:ac:7c:8d:6d:fd:9e:c3:8b:44:b9:7d:ed:0e:77:33: 3c:99:0b:7b:e1:46:2a:21:40:27:01:9a:d4:09:59:8d:82:05: ab:14:ba:ff -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYxGGd9R1vTRZGgJSc0RzpcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjA3MjEwNTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTk5NDBlMzI0ZGYyN2M5NTExZDlmNWRlYzFhM2M5Mjg0YzliMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnkGy1CUwe2N0ERBmsWa2FiWwupZ d09oyaUrL4KcjEu2ofjDUSKEHJF+15E9ikDDta1OpZyej41JZQnv/paWPAdiJrvh WtX/nHuDG5Pe3WD9WttdRus0ECz7r5xFD9ZVyGkdAIpCH8346aWSOX++HJdw6AY0 0OaX/iLIUTOOxrzTz7iPqCRNcI2RgpvqcMuxAc12TnxTw++h2CcWHarRlEjczQcw kwOJ11OAOwrYIdb/h7ISaPi5KBT0OgGlINCHoRcj7H7EJdTq7UZhepvtrPK5gL6w 7fcFR/71qup04MdCc/SZbTpMLEYqUGW4PgfsMqxehaWBiG/GkYLgmecOOQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHmZQOMk3yfJUR2fXewaPJKEybF0MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvZVpsQTR5VGZKOGxSSFo5ZDdCbzhrb1RKc1hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMp+LIE6h1wuE75P6qeL h1R3Wq9tIlMRJd1ySZRAZ2xg7EiFSQYOXOPGSDS0+4ZTIELGEzejBHp5+Nki0YFB gwVJuWXKK2x13Kr10PyRe8lveokz4DkpiY+Hl9zq0ZEKUHi+xkfqJLizJsrY+Q2o JmX9iujo8vjkfF/uUzVxw+ubsB6ENb/TRYZl3e/HrtObaPwVdyDvsHqMR08yqQJp Ucjg+t3BsN2bwMCLtSvRdqV3ohkHsbKAYoiq/VJ1uVcRDIPdQG9bQrjE+gN5HABi nDHiveWa5QYVQNj9iKx8jW39nsOLRLl97Q53MzyZC3vhRiohQCcBmtQJWY2CBasU uv8= -----END CERTIFICATE-----Generated at Sun Dec 28 23:21:54 2025 by rpki-client