This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gsE8tz-Wr55hkntztHsZ8o4HIQQ.roa File: gsE8tz-Wr55hkntztHsZ8o4HIQQ.roa (raw, json) Hash identifier: f4K0V4RHIUDBPdq+JFQDKDtf5DcSj7C0P3vduyvbvNc= Subject key identifier: 82:C1:3C:B7:3F:96:AF:9E:61:92:7B:73:B4:7B:19:F2:8E:07:21:04 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018BDF50447BCE0AA3E92758A47B13EC171A Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gsE8tz-Wr55hkntztHsZ8o4HIQQ.roa Signing time: Fri 17 Nov 2023 22:04:21 +0000 ROA not before: Fri 17 Nov 2023 22:04:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 2001:67c:64:ffff:0:18b:df50:25b0/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:df:50:44:7b:ce:0a:a3:e9:27:58:a4:7b:13:ec:17:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 17 22:04:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=82c13cb73f96af9e61927b73b47b19f28e072104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b2:a5:57:5c:ae:50:f6:46:86:5b:4c:42:52: e5:64:f0:87:83:de:5f:ce:80:8e:46:7d:57:1e:18: f4:55:b4:9b:39:39:35:e6:58:08:9c:cb:70:3c:ac: a5:7d:e8:9e:3e:1a:f5:4d:65:21:c8:b2:17:26:47: 77:b7:66:e4:a9:99:7e:24:0f:2e:25:a2:b1:6e:23: 13:44:5c:e7:e7:f8:cc:de:67:e4:17:3e:f7:72:15: 3a:5c:9d:d1:c2:bd:87:38:fd:b7:ec:c0:80:7d:0b: 9a:b1:bb:d2:a4:ed:b5:9e:e2:0d:5c:d1:60:73:db: a1:48:87:5c:34:66:69:b7:cf:a1:7d:5f:93:34:12: 2d:13:87:a3:43:11:0f:4e:fa:fc:e7:af:64:83:5e: 0e:48:4d:93:5b:c3:81:5b:4b:97:b5:64:77:78:a3: f6:d6:eb:c5:06:14:e8:1d:14:c8:10:c2:0c:b0:4f: 2d:6a:5e:69:89:76:9a:c4:49:52:33:ab:fb:70:d6: ef:41:d5:29:ce:04:7f:15:17:16:2e:68:fc:ab:8a: a0:b6:93:fe:4c:b1:fb:b7:1d:cf:a0:a1:ae:46:c1: a7:5c:86:12:da:ab:01:44:d7:0b:48:7b:0c:64:f2: b0:0e:51:96:d6:ce:1e:ff:e2:e0:27:e1:11:28:09: 26:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C1:3C:B7:3F:96:AF:9E:61:92:7B:73:B4:7B:19:F2:8E:07:21:04 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gsE8tz-Wr55hkntztHsZ8o4HIQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 79:68:0a:34:9e:91:91:d1:6e:d3:61:0b:f0:36:44:6a:e1:c1: a1:1c:fa:55:34:e3:e4:6b:13:a8:6b:95:8c:49:09:23:49:8b: 8d:16:45:99:8a:3a:ff:38:ca:c6:dd:6d:20:6c:a0:0f:b7:af: cb:7e:ba:84:5d:57:72:46:b3:85:54:65:2d:c0:32:5a:d4:4f: 38:c1:63:d5:b3:27:1e:f2:e0:79:f7:5c:95:4b:7f:96:4f:a2: fc:d4:39:ad:fd:33:6b:64:37:2d:60:7d:d4:c2:66:cd:45:79: ee:e6:08:5e:81:69:50:90:8f:90:38:81:d4:e5:77:a6:40:fa: a7:83:70:a6:ce:be:bd:7e:24:18:e2:c7:e7:45:d5:a0:25:ec: 4b:7c:bb:93:d3:73:8e:c3:90:a5:c8:0c:47:57:f3:a1:02:6b: 6b:1c:17:30:db:47:e0:46:ca:55:69:0b:90:cc:07:d4:9b:c9: 66:7a:e6:77:b9:7a:b2:c7:37:62:92:16:1d:84:43:4e:90:22: be:13:ce:99:56:16:f3:52:69:39:df:c5:bc:c3:bd:d5:09:96: a2:2b:db:4b:c8:55:db:db:8e:f3:fa:aa:85:0d:3b:61:78:6a: 90:fa:94:40:4b:78:c5:56:45:65:e9:d6:eb:e3:f5:d2:67:d5: 4b:10:15:61 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYvfUER7zgqj6SdYpHsT7BcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTE3MjIwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmMxM2NiNzNmOTZhZjllNjE5MjdiNzNiNDdiMTlmMjhlMDcyMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrKlV1yuUPZGhltMQlLlZPCHg95f zoCORn1XHhj0VbSbOTk15lgInMtwPKylfeiePhr1TWUhyLIXJkd3t2bkqZl+JA8u JaKxbiMTRFzn5/jM3mfkFz73chU6XJ3Rwr2HOP237MCAfQuasbvSpO21nuINXNFg c9uhSIdcNGZpt8+hfV+TNBItE4ejQxEPTvr8569kg14OSE2TW8OBW0uXtWR3eKP2 1uvFBhToHRTIEMIMsE8tal5piXaaxElSM6v7cNbvQdUpzgR/FRcWLmj8q4qgtpP+ TLH7tx3PoKGuRsGnXIYS2qsBRNcLSHsMZPKwDlGW1s4e/+LgJ+ERKAkmIQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFILBPLc/lq+eYZJ7c7R7GfKOByEEMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvZ3NFOHR6LVdyNTVoa250enRIc1o4bzRISVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHloCjSekZHRbtNhC/A2 RGrhwaEc+lU04+RrE6hrlYxJCSNJi40WRZmKOv84ysbdbSBsoA+3r8t+uoRdV3JG s4VUZS3AMlrUTzjBY9WzJx7y4Hn3XJVLf5ZPovzUOa39M2tkNy1gfdTCZs1Fee7m CF6BaVCQj5A4gdTld6ZA+qeDcKbOvr1+JBjix+dF1aAl7Et8u5PTc47DkKXIDEdX 86ECa2scFzDbR+BGylVpC5DMB9SbyWZ65ne5erLHN2KSFh2EQ06QIr4TzplWFvNS aTnfxbzDvdUJlqIr20vIVdvbjvP6qoUNO2F4apD6lEBLeMVWRWXp1uvj9dJn1UsQ FWE= -----END CERTIFICATE-----Generated at Fri Jan 2 09:55:38 2026 by rpki-client