This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m_FK40JNgO8TIER8TNvpNjnNqfM.roa File: m_FK40JNgO8TIER8TNvpNjnNqfM.roa (raw, json) Hash identifier: mYOQChceeWKpnCaTb/eIHwMU6vvT6sNv+6kxYLVAfjw= Subject key identifier: 9B:F1:4A:E3:42:4D:80:EF:13:20:44:7C:4C:DB:E9:36:39:CD:A9:F3 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B642741ECD5F4025F01DC90EFE2F13BEF Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m_FK40JNgO8TIER8TNvpNjnNqfM.roa Signing time: Wed 25 Oct 2023 00:06:16 +0000 ROA not before: Wed 25 Oct 2023 00:06:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:6426:f86a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:64:27:41:ec:d5:f4:02:5f:01:dc:90:ef:e2:f1:3b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 25 00:06:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=9bf14ae3424d80ef1320447c4cdbe93639cda9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:9e:e1:d7:d5:27:25:cd:bb:bc:59:8a:54: 71:f0:73:64:1d:44:96:75:4b:5a:2d:c5:a1:26:f1: 65:69:08:2b:68:b9:10:e2:b6:5f:d2:b2:de:a3:22: 9b:ce:4d:72:ec:25:fe:5a:f3:b2:cc:ae:57:a3:a0: 76:a3:4e:20:e1:64:1b:a4:04:70:19:aa:a4:c8:8e: bd:13:a1:4a:56:ee:84:21:dc:2e:71:b6:05:1d:7b: 71:3d:38:a6:d4:95:27:ed:a1:9c:5b:10:2d:e2:00: c0:41:c4:b5:e5:34:69:c3:c7:6e:08:d8:3d:de:80: 85:59:12:c0:4c:73:de:5d:d1:94:a2:d3:44:58:4b: 55:ab:af:60:a0:75:03:0d:1e:19:05:db:84:01:3f: 02:cb:a0:43:fa:07:2a:f3:60:2b:ce:e5:7d:51:d9: bb:2b:38:c6:96:aa:8a:06:4b:d0:4b:62:31:07:e8: aa:d9:6f:73:74:f7:79:6a:07:0d:4a:e8:ed:10:15: 36:da:75:bc:8b:80:f7:f1:16:ac:a0:c2:ee:8d:cb: ef:9f:e5:2e:95:c5:a9:1d:69:22:2d:b3:05:b8:d5: 1f:73:c4:c2:f0:d3:1c:d2:a5:5f:a8:57:7c:66:01: 2a:cb:de:cf:6d:12:53:c9:af:7d:f1:4a:60:fc:7c: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:4A:E3:42:4D:80:EF:13:20:44:7C:4C:DB:E9:36:39:CD:A9:F3 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m_FK40JNgO8TIER8TNvpNjnNqfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 67:b2:24:7a:b9:f3:07:00:a7:a8:12:b0:0f:2a:66:0d:f9:8d: e6:da:3a:54:56:ab:e4:50:5b:78:88:28:5c:77:3e:92:e8:47: a7:06:f4:ab:fe:f6:1d:ff:c5:7f:c5:49:a8:4e:23:5c:10:f8: 8a:bb:2f:5a:c6:a4:e8:da:a8:50:0b:97:71:f5:83:bd:e9:e2: dd:0e:09:02:83:54:49:c5:ee:49:09:63:14:0b:2f:19:d2:e9: b8:ea:68:f3:1b:91:e6:0c:9e:4a:1a:13:d7:47:4a:61:37:76: bb:0d:81:4d:7b:61:19:e8:6d:33:46:0a:11:a2:81:26:20:8a: ee:be:6c:04:88:0a:78:53:50:0e:11:2e:35:6b:34:04:4d:53: 22:d4:4d:97:70:34:b7:62:c5:6b:78:d5:4d:57:fe:3c:ac:ab: fb:ba:f0:e7:07:ff:28:e4:fb:5d:f8:ad:83:28:05:a1:39:50: f2:a5:db:94:95:83:45:71:c6:ef:94:88:91:c6:93:80:20:a4: 31:3e:61:5e:39:42:0b:8f:8b:13:3b:1c:0c:d7:fd:bb:0e:ad: ae:c9:3e:15:ec:4b:9e:9b:ac:52:d0:fd:5b:7a:80:6f:20:77: 1b:f3:e1:dd:a5:f6:38:54:97:ac:d2:51:a6:e6:65:f5:83:c8: b4:cc:0f:47 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYtkJ0Hs1fQCXwHckO/i8TvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDI1MDAwNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmYxNGFlMzQyNGQ4MGVmMTMyMDQ0N2M0Y2RiZTkzNjM5Y2RhOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbye4dfVJyXNu7xZilRx8HNkHUSW dUtaLcWhJvFlaQgraLkQ4rZf0rLeoyKbzk1y7CX+WvOyzK5Xo6B2o04g4WQbpARw GaqkyI69E6FKVu6EIdwucbYFHXtxPTim1JUn7aGcWxAt4gDAQcS15TRpw8duCNg9 3oCFWRLATHPeXdGUotNEWEtVq69goHUDDR4ZBduEAT8Cy6BD+gcq82ArzuV9Udm7 KzjGlqqKBkvQS2IxB+iq2W9zdPd5agcNSujtEBU22nW8i4D38RasoMLujcvvn+Uu lcWpHWkiLbMFuNUfc8TC8NMc0qVfqFd8ZgEqy97PbRJTya998Upg/Hx0yQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJvxSuNCTYDvEyBEfEzb6TY5zanzMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvbV9GSzQwSk5nTzhUSUVSOFROdnBOam5OcWZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGeyJHq58wcAp6gSsA8q Zg35jebaOlRWq+RQW3iIKFx3PpLoR6cG9Kv+9h3/xX/FSahOI1wQ+Iq7L1rGpOja qFALl3H1g73p4t0OCQKDVEnF7kkJYxQLLxnS6bjqaPMbkeYMnkoaE9dHSmE3drsN gU17YRnobTNGChGigSYgiu6+bASICnhTUA4RLjVrNARNUyLUTZdwNLdixWt41U1X /jysq/u68OcH/yjk+134rYMoBaE5UPKl25SVg0Vxxu+UiJHGk4AgpDE+YV45QguP ixM7HAzX/bsOra7JPhXsS56brFLQ/Vt6gG8gdxvz4d2l9jhUl6zSUabmZfWDyLTM D0c= -----END CERTIFICATE-----Generated at Sun Jan 11 11:26:21 2026 by rpki-client