This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iZhTL0EvQob4yBI3BFTL-i3juGQ.roa File: iZhTL0EvQob4yBI3BFTL-i3juGQ.roa (raw, json) Hash identifier: LHklXpNJ/zX5uyQe9OSo4dryokx6JPPH0piMtJiY2J8= Subject key identifier: 89:98:53:2F:41:2F:42:86:F8:C8:12:37:04:54:CB:FA:2D:E3:B8:64 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C1DF84EA5472AB8686DB7E3944E5FB210 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iZhTL0EvQob4yBI3BFTL-i3juGQ.roa Signing time: Thu 30 Nov 2023 02:04:21 +0000 ROA not before: Thu 30 Nov 2023 02:04:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 2001:67c:64:ffff:0:18c:1df8:cdb/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:1d:f8:4e:a5:47:2a:b8:68:6d:b7:e3:94:4e:5f:b2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 30 02:04:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=8998532f412f4286f8c812370454cbfa2de3b864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:17:4f:00:56:8a:1a:1b:57:dc:42:42:f4:ac: 47:33:30:fc:ca:9f:5d:4b:39:0b:82:cf:ad:45:cf: ca:aa:8d:31:78:4e:a8:06:35:71:09:22:11:9e:3d: b4:c8:fb:06:75:98:e6:f4:3c:b4:0c:0e:c0:43:38: 02:c5:32:98:3e:d4:da:ab:c7:3a:28:cb:ab:de:17: cd:eb:e8:d7:49:82:e2:cb:5d:41:23:05:5a:ee:ef: 09:03:14:7f:5e:61:be:4f:34:7d:25:c0:70:a3:ed: 58:c9:95:85:46:b9:94:c5:7c:59:2f:ae:57:af:3f: f4:4e:4c:45:9b:28:c3:d3:d3:08:ec:7c:01:28:ac: 7d:84:c9:f2:0b:16:d6:39:03:a3:14:8a:08:33:73: 76:ec:33:25:c2:9a:63:9a:4b:f6:ee:c4:ca:7a:cc: b8:da:22:15:da:14:98:30:3b:2c:27:86:6c:34:34: fb:d0:0f:b5:75:fa:2a:96:64:19:7d:cb:79:0e:32: fa:b5:fc:f9:dc:ce:1a:32:3e:aa:78:83:7e:b4:70: 5e:00:b9:a3:8c:e3:f1:76:b8:f6:06:05:94:db:52: 44:f1:f5:e9:d3:36:82:0f:ad:87:a7:25:ab:ce:bf: 14:1a:b5:b4:5b:1c:f7:6c:49:db:e5:49:e9:bd:a6: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:98:53:2F:41:2F:42:86:F8:C8:12:37:04:54:CB:FA:2D:E3:B8:64 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iZhTL0EvQob4yBI3BFTL-i3juGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 80:a6:36:38:39:63:c6:6d:a0:0e:2d:8d:3a:00:44:48:71:75: 84:be:bb:e5:39:2a:7f:41:d5:80:a4:bc:2c:fc:c3:52:14:04: 96:6b:70:91:cf:10:5c:9c:e9:c0:53:bf:d8:f2:42:a7:0f:57: 75:53:9b:03:ee:24:3a:89:ec:6a:be:52:d5:c1:97:eb:7c:b9: dc:03:5c:4b:b3:03:a0:21:01:a1:e6:f2:b4:42:60:eb:04:75: 49:be:5a:ef:fc:0a:14:66:ba:d1:c8:f9:d3:5e:1d:0f:2e:6d: e6:42:3b:f8:1a:20:00:c5:19:71:43:4c:83:c3:1f:c4:e4:31: c6:f1:98:0e:51:21:1c:ce:51:f1:e4:35:7f:bd:50:ba:48:43: 56:25:91:cb:c1:fb:90:57:71:a8:99:2a:7d:32:5a:8d:d2:46: fe:9d:78:bf:d5:f0:e7:33:2b:f7:b2:ab:b3:70:dc:a2:68:e3: 19:af:bd:79:a7:fa:60:c1:f0:56:77:ae:45:ed:a7:f1:ce:b4: 87:7a:6c:84:8c:8f:71:84:c0:50:60:ce:e9:d6:c1:cb:55:40: 0a:fa:61:d8:4e:52:86:1a:e6:99:7b:29:3b:a8:6c:58:6d:7a: 32:0e:a4:59:c5:25:32:31:48:04:f9:c1:34:a5:18:04:60:1b: 8d:ff:59:f2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYwd+E6lRyq4aG2345ROX7IQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTMwMDIwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTk4NTMyZjQxMmY0Mjg2ZjhjODEyMzcwNDU0Y2JmYTJkZTNiODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRdPAFaKGhtX3EJC9KxHMzD8yp9d SzkLgs+tRc/Kqo0xeE6oBjVxCSIRnj20yPsGdZjm9Dy0DA7AQzgCxTKYPtTaq8c6 KMur3hfN6+jXSYLiy11BIwVa7u8JAxR/XmG+TzR9JcBwo+1YyZWFRrmUxXxZL65X rz/0TkxFmyjD09MI7HwBKKx9hMnyCxbWOQOjFIoIM3N27DMlwppjmkv27sTKesy4 2iIV2hSYMDssJ4ZsNDT70A+1dfoqlmQZfct5DjL6tfz53M4aMj6qeIN+tHBeALmj jOPxdrj2BgWU21JE8fXp0zaCD62HpyWrzr8UGrW0Wxz3bEnb5UnpvaaumwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFImYUy9BL0KG+MgSNwRUy/ot47hkMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvaVpoVEwwRXZRb2I0eUJJM0JGVEwtaTNqdUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAICmNjg5Y8ZtoA4tjToA REhxdYS+u+U5Kn9B1YCkvCz8w1IUBJZrcJHPEFyc6cBTv9jyQqcPV3VTmwPuJDqJ 7Gq+UtXBl+t8udwDXEuzA6AhAaHm8rRCYOsEdUm+Wu/8ChRmutHI+dNeHQ8ubeZC O/gaIADFGXFDTIPDH8TkMcbxmA5RIRzOUfHkNX+9ULpIQ1YlkcvB+5BXcaiZKn0y Wo3SRv6deL/V8OczK/eyq7Nw3KJo4xmvvXmn+mDB8FZ3rkXtp/HOtId6bISMj3GE wFBgzunWwctVQAr6YdhOUoYa5pl7KTuobFhtejIOpFnFJTIxSAT5wTSlGARgG43/ WfI= -----END CERTIFICATE-----Generated at Wed Dec 31 00:12:16 2025 by rpki-client