This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tcCOfMnD0xph6bk4vFk3_GfWJgk.roa File: tcCOfMnD0xph6bk4vFk3_GfWJgk.roa (raw, json) Hash identifier: DrLtVs8sLNlAQzTTKnd+PVoAKkhAaisOD9GpDq8Oq9U= Subject key identifier: B5:C0:8E:7C:C9:C3:D3:1A:61:E9:B9:38:BC:59:37:FC:67:D6:26:09 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018ABB468B74B7B93C7C58CE49BC6400EBCB Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tcCOfMnD0xph6bk4vFk3_GfWJgk.roa Signing time: Fri 22 Sep 2023 05:04:37 +0000 ROA not before: Fri 22 Sep 2023 05:04:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:bb46:50a2/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:bb:46:8b:74:b7:b9:3c:7c:58:ce:49:bc:64:00:eb:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Sep 22 05:04:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=b5c08e7cc9c3d31a61e9b938bc5937fc67d62609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:f7:d6:ae:1c:0d:be:c3:7d:85:1f:95:90: 9b:5b:c8:01:3c:72:8d:c5:f3:10:18:00:96:d4:8b: 53:3c:8b:99:42:e4:f7:64:09:55:ac:59:18:53:8b: 35:41:01:83:8d:c5:d6:f0:54:b5:54:27:34:4c:66: 7e:e1:9f:73:51:47:0a:3f:14:08:e9:71:d2:cf:38: 3a:70:00:22:bb:86:b7:a1:c1:f3:f0:76:b7:aa:21: 8c:d0:2f:62:f0:2c:57:56:a7:8b:a1:f0:5e:b5:38: d5:88:86:f5:d0:e0:d0:8f:b2:49:f4:08:91:c7:d9: c0:54:1f:a0:71:f5:d5:1d:8c:cd:01:a5:3a:8c:f8: b5:59:c5:a4:90:50:48:5c:21:dc:57:ad:3c:10:8a: e4:c0:47:c3:19:5e:93:fc:a2:fd:2f:2f:4e:e8:80: 3c:a2:3d:8c:3a:39:74:2d:d9:c9:39:df:7a:12:14: 24:8a:47:df:f4:43:aa:24:9f:e3:14:25:f7:a2:43: 53:4f:07:b1:b0:d4:ab:9f:ff:11:f5:07:5f:11:fa: d3:b3:eb:2b:7d:8a:5a:05:96:15:20:51:2c:43:d7: 79:12:70:a0:1b:3e:d5:2a:51:c9:14:91:a0:53:71: 05:b3:e1:e7:de:47:86:be:ef:25:54:25:e8:7c:8d: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C0:8E:7C:C9:C3:D3:1A:61:E9:B9:38:BC:59:37:FC:67:D6:26:09 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tcCOfMnD0xph6bk4vFk3_GfWJgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 0d:36:c5:aa:c8:74:35:32:d6:3c:06:fe:7c:89:a9:1b:45:97: 72:f7:27:70:2e:cb:7e:e0:5a:3a:49:70:96:a6:38:99:93:ef: ba:35:5f:01:3e:6b:cb:2f:2f:d5:11:f3:1e:02:f9:16:33:67: 06:fc:74:95:a8:df:35:da:98:55:b9:f7:8f:90:94:e1:c6:dc: 15:6b:69:df:37:85:91:fd:44:e9:2c:d1:58:72:c8:8b:b8:65: f0:0b:47:e1:cc:08:ea:bd:7c:a1:6c:a0:4f:54:fd:ea:52:9c: 00:3b:8c:59:d9:cf:04:08:d5:e7:84:b4:63:2b:7e:17:2a:74: ef:8b:49:46:5d:0f:e2:a2:b4:2b:c3:b1:ed:86:ff:25:1d:63: 99:06:46:08:3d:67:f9:fe:17:75:c2:a1:6e:e3:70:14:e4:a4: 63:f5:01:5a:3c:46:35:cb:02:46:50:a1:e9:82:d7:4e:11:3c: 96:70:1c:16:08:89:36:21:11:e7:60:c0:61:86:cf:33:f3:af: 9f:c8:38:ea:94:93:6a:7d:1c:12:5e:a8:34:0c:57:e8:3e:0d: 29:8b:f5:e0:a7:d3:5f:de:e7:58:31:ab:12:f3:66:c3:c1:77: 8a:30:f1:c8:e6:b6:aa:b6:5d:c0:a4:73:4b:33:41:1f:b9:f7: 5b:ef:5e:38 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYq7Rot0t7k8fFjOSbxkAOvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMwOTIyMDUwNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWMwOGU3Y2M5YzNkMzFhNjFlOWI5MzhiYzU5MzdmYzY3ZDYyNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4731q4cDb7DfYUflZCbW8gBPHKN xfMQGACW1ItTPIuZQuT3ZAlVrFkYU4s1QQGDjcXW8FS1VCc0TGZ+4Z9zUUcKPxQI 6XHSzzg6cAAiu4a3ocHz8Ha3qiGM0C9i8CxXVqeLofBetTjViIb10ODQj7JJ9AiR x9nAVB+gcfXVHYzNAaU6jPi1WcWkkFBIXCHcV608EIrkwEfDGV6T/KL9Ly9O6IA8 oj2MOjl0LdnJOd96EhQkikff9EOqJJ/jFCX3okNTTwexsNSrn/8R9QdfEfrTs+sr fYpaBZYVIFEsQ9d5EnCgGz7VKlHJFJGgU3EFs+Hn3keGvu8lVCXofI28xQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLXAjnzJw9MaYem5OLxZN/xn1iYJMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvdGNDT2ZNbkQweHBoNmJrNHZGazNfR2ZXSmdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA02xarIdDUy1jwG/nyJ qRtFl3L3J3Auy37gWjpJcJamOJmT77o1XwE+a8svL9UR8x4C+RYzZwb8dJWo3zXa mFW594+QlOHG3BVrad83hZH9ROks0VhyyIu4ZfALR+HMCOq9fKFsoE9U/epSnAA7 jFnZzwQI1eeEtGMrfhcqdO+LSUZdD+KitCvDse2G/yUdY5kGRgg9Z/n+F3XCoW7j cBTkpGP1AVo8RjXLAkZQoemC104RPJZwHBYIiTYhEedgwGGGzzPzr5/IOOqUk2p9 HBJeqDQMV+g+DSmL9eCn01/e51gxqxLzZsPBd4ow8cjmtqq2XcCkc0szQR+591vv Xjg= -----END CERTIFICATE-----Generated at Tue Dec 23 15:23:39 2025 by rpki-client