This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emc8zntv9QixN9qK_U0dVd8w0Kw.roa File: emc8zntv9QixN9qK_U0dVd8w0Kw.roa (raw, json) Hash identifier: ee+pQH/inddr+JqeeYOsNQXSFa/wZg7Q8d6524IfMHY= Subject key identifier: 7A:67:3C:CE:7B:6F:F5:08:B1:37:DA:8A:FD:4D:1D:55:DF:30:D0:AC Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B8E030BC17849CDEE4954C9ED5407F860 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emc8zntv9QixN9qK_U0dVd8w0Kw.roa Signing time: Thu 02 Nov 2023 03:10:46 +0000 ROA not before: Thu 02 Nov 2023 03:10:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64:ffff:0:18b:8dfe:da99/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:8e:03:0b:c1:78:49:cd:ee:49:54:c9:ed:54:07:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 2 03:10:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=7a673cce7b6ff508b137da8afd4d1d55df30d0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:fb:09:3b:cc:05:62:4d:34:27:ed:30:d5: ef:18:ba:a0:28:20:fb:9a:0e:d6:3d:49:d8:aa:33: f1:f2:a6:f3:23:46:b1:7d:54:cd:b0:c6:81:08:c9: 2d:0e:76:36:61:db:a6:cd:2f:68:97:bb:18:73:ef: 41:1f:15:f0:49:11:e9:99:57:b7:7c:ba:a6:a1:c5: 3c:b6:11:d2:fb:61:71:c0:69:91:c9:3f:13:cd:8e: 92:f9:b4:f8:fc:94:2e:68:15:4c:1b:5c:db:c6:9e: b8:56:f0:d5:22:19:c6:60:6b:35:23:d4:8d:fc:1e: 62:1e:a7:da:c3:ac:7b:af:cb:77:12:8f:52:0a:4d: dd:89:f0:f1:ab:80:0d:b1:7b:cd:c7:f4:bd:69:86: 17:7f:09:0f:13:76:13:b0:b9:91:dd:10:0b:5a:2f: 91:6c:7b:cf:e9:21:22:e1:43:e6:96:76:7b:b5:b0: 11:9d:8c:44:03:16:be:81:8a:4a:35:9d:27:d6:d2: 85:cf:51:56:04:19:c7:9d:ff:8d:d3:d2:63:2f:d0: 4e:c2:9c:64:f3:dd:a9:59:f1:60:61:33:fe:35:c9: 3f:3e:da:cb:37:ea:64:47:33:2d:0a:50:41:2a:cf: 02:07:6b:0e:c3:01:d7:65:fe:d6:ab:ee:85:f4:95: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:3C:CE:7B:6F:F5:08:B1:37:DA:8A:FD:4D:1D:55:DF:30:D0:AC X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/emc8zntv9QixN9qK_U0dVd8w0Kw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 83:64:ed:99:4d:14:75:05:85:6f:9f:f3:f7:08:e0:d0:be:c8: bd:8f:9c:34:4e:d2:39:99:d7:e7:d5:36:41:f7:39:d9:6a:56: b2:d9:1c:24:00:6d:47:cb:fe:9b:a1:81:7c:1b:0c:cd:4a:f1: c8:b7:79:9a:54:e2:53:ff:69:53:3b:16:54:be:95:15:5f:22: 7f:6d:b8:12:bd:33:c2:49:40:1b:b3:6a:98:86:bc:30:54:2f: 7a:f5:a7:ab:fe:f6:bc:9f:d6:21:88:57:47:97:8e:59:81:7d: f5:f1:44:1a:22:bc:1d:09:3d:d0:9d:ed:0c:cc:f0:e0:69:66: e3:b4:ed:8f:de:74:32:a1:44:7a:15:e5:d7:83:ee:8b:70:19: 52:2e:23:75:cb:65:34:cf:9e:48:d6:b3:fc:67:4c:18:7f:de: 79:07:3a:93:25:5a:d4:27:6b:8b:7c:bf:73:84:17:c4:b2:9c: 07:26:b2:cb:45:1e:78:c6:73:c1:a4:f6:51:be:93:cc:8e:ce: 09:42:5a:e5:c5:80:9e:1d:57:17:36:d1:0b:88:87:15:8e:9f: 00:17:cf:74:9a:ac:11:e9:6e:00:c2:e6:43:6d:11:5a:58:c6: 10:c8:9b:22:29:f3:5a:24:3a:4e:5b:0d:2d:b6:c1:b9:ce:ce: 32:8d:26:44 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYuOAwvBeEnN7klUye1UB/hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTAyMDMxMDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTY3M2NjZTdiNmZmNTA4YjEzN2RhOGFmZDRkMWQ1NWRmMzBkMGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyn7CTvMBWJNNCftMNXvGLqgKCD7 mg7WPUnYqjPx8qbzI0axfVTNsMaBCMktDnY2YdumzS9ol7sYc+9BHxXwSRHpmVe3 fLqmocU8thHS+2FxwGmRyT8TzY6S+bT4/JQuaBVMG1zbxp64VvDVIhnGYGs1I9SN /B5iHqfaw6x7r8t3Eo9SCk3difDxq4ANsXvNx/S9aYYXfwkPE3YTsLmR3RALWi+R bHvP6SEi4UPmlnZ7tbARnYxEAxa+gYpKNZ0n1tKFz1FWBBnHnf+N09JjL9BOwpxk 892pWfFgYTP+Nck/PtrLN+pkRzMtClBBKs8CB2sOwwHXZf7Wq+6F9JVjzwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHpnPM57b/UIsTfaiv1NHVXfMNCsMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvZW1jOHpudHY5UWl4TjlxS19VMGRWZDh3MEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAINk7ZlNFHUFhW+f8/cI 4NC+yL2PnDRO0jmZ1+fVNkH3OdlqVrLZHCQAbUfL/puhgXwbDM1K8ci3eZpU4lP/ aVM7FlS+lRVfIn9tuBK9M8JJQBuzapiGvDBUL3r1p6v+9ryf1iGIV0eXjlmBffXx RBoivB0JPdCd7QzM8OBpZuO07Y/edDKhRHoV5deD7otwGVIuI3XLZTTPnkjWs/xn TBh/3nkHOpMlWtQna4t8v3OEF8SynAcmsstFHnjGc8Gk9lG+k8yOzglCWuXFgJ4d Vxc20QuIhxWOnwAXz3SarBHpbgDC5kNtEVpYxhDImyIp81okOk5bDS22wbnOzjKN JkQ= -----END CERTIFICATE-----Generated at Wed Dec 31 23:29:33 2025 by rpki-client