This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uc9xasjp0w1oOtSlZT_GD0XcYHU.roa File: uc9xasjp0w1oOtSlZT_GD0XcYHU.roa (raw, json) Hash identifier: JHv6dSMg7gtBIqJG1vDPvvmFYqufsO+zbySxtfyqqCY= Subject key identifier: B9:CF:71:6A:C8:E9:D3:0D:68:3A:D4:A5:65:3F:C6:0F:45:DC:60:75 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C1AC13FC385B61511EFA676996F513645 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uc9xasjp0w1oOtSlZT_GD0XcYHU.roa Signing time: Wed 29 Nov 2023 11:05:21 +0000 ROA not before: Wed 29 Nov 2023 11:05:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 2001:67c:64:ffff:0:18c:1ac0:9065/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:1a:c1:3f:c3:85:b6:15:11:ef:a6:76:99:6f:51:36:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 29 11:05:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=b9cf716ac8e9d30d683ad4a5653fc60f45dc6075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:04:86:e9:04:aa:38:f9:95:27:93:12:eb: ad:9b:c7:da:ac:50:95:15:e4:c6:48:d7:34:72:26: c3:94:64:71:d2:a7:7a:dd:35:a6:1a:1a:a8:82:ea: c3:4b:d1:53:95:05:6c:0e:41:d5:73:a3:b4:98:90: 92:bc:2a:2d:63:d1:6e:c1:a0:eb:af:5d:95:d2:ce: 65:61:da:74:be:b7:96:78:f7:1c:12:bb:4c:5b:5f: fe:35:39:8f:ad:36:82:ab:83:e5:42:18:33:d3:b4: 5c:ac:3b:7b:38:93:6a:f5:b3:2b:97:19:49:46:8e: 89:e9:31:18:9c:83:06:05:13:58:cd:60:95:b3:2e: 89:4c:71:ec:27:5a:ab:66:b6:7e:03:c3:71:63:5d: 1c:64:d8:ee:fc:fa:de:59:07:30:3e:8c:5d:7b:40: 4d:25:01:00:0a:c0:97:cf:91:47:7e:fd:2a:b6:5f: 98:46:b9:f6:b7:8a:ce:d6:bd:38:1c:a4:3f:92:65: 66:7e:87:9d:14:d1:bf:40:da:e9:b2:54:57:4b:aa: 9c:b3:4a:d3:43:78:3a:3e:0c:b0:b1:8d:d8:ac:f0: 3d:2d:11:0f:ec:ff:f4:95:70:79:6f:d8:fd:57:93: 09:29:01:09:76:ca:fe:e1:8e:8c:40:cd:d4:8e:e9: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CF:71:6A:C8:E9:D3:0D:68:3A:D4:A5:65:3F:C6:0F:45:DC:60:75 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uc9xasjp0w1oOtSlZT_GD0XcYHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 06:dc:ae:d2:91:83:29:6f:54:2c:65:06:7f:cf:f7:9f:89:3a: 61:4f:62:16:37:05:8a:aa:ee:2a:80:55:a9:6a:28:cf:8c:3a: 2a:b1:d8:bd:0c:e1:a2:5c:08:c8:32:8a:99:8c:d4:ed:0a:8e: b5:85:a4:8e:55:5f:e0:41:1c:f9:3b:4a:f7:a5:d8:c9:ab:d4: e1:ae:91:b7:a7:55:7c:b1:5d:d6:73:ca:8a:ac:ab:3e:05:15: 56:86:93:58:5e:57:aa:2b:55:c3:f8:70:dd:39:72:25:65:5b: 52:6e:ab:9a:5c:68:ea:43:61:e1:1f:8c:40:ab:2c:9b:00:df: 59:a6:64:f6:0d:59:2d:74:75:f3:b5:fe:7f:32:7d:21:37:72: 4e:2b:04:fd:55:b1:00:ef:48:4f:49:ef:e6:47:fa:fc:81:12: bf:eb:78:50:7d:f6:ad:da:3a:83:6d:88:ec:78:c0:29:66:81: 00:af:6c:f7:a7:93:63:e1:b5:3f:b5:94:65:4e:54:b5:2c:cb: 43:55:ba:b3:a0:42:a8:fc:06:cd:ef:92:a1:d1:f4:38:4e:b7: 32:45:9f:ff:a9:a1:0c:f6:2e:a2:26:e7:44:4b:b6:00:dd:5d: 4e:6a:e9:65:35:b6:34:95:ca:49:1b:2b:f1:06:11:50:7b:57: cb:ac:bd:ce -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYwawT/DhbYVEe+mdplvUTZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTI5MTEwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWNmNzE2YWM4ZTlkMzBkNjgzYWQ0YTU2NTNmYzYwZjQ1ZGM2MDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpcEhukEqjj5lSeTEuutm8farFCV FeTGSNc0cibDlGRx0qd63TWmGhqogurDS9FTlQVsDkHVc6O0mJCSvCotY9FuwaDr r12V0s5lYdp0vreWePccErtMW1/+NTmPrTaCq4PlQhgz07RcrDt7OJNq9bMrlxlJ Ro6J6TEYnIMGBRNYzWCVsy6JTHHsJ1qrZrZ+A8NxY10cZNju/PreWQcwPoxde0BN JQEACsCXz5FHfv0qtl+YRrn2t4rO1r04HKQ/kmVmfoedFNG/QNrpslRXS6qcs0rT Q3g6PgywsY3YrPA9LREP7P/0lXB5b9j9V5MJKQEJdsr+4Y6MQM3UjunHWQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLnPcWrI6dMNaDrUpWU/xg9F3GB1MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvdWM5eGFzanAwdzFvT3RTbFpUX0dEMFhjWUhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAbcrtKRgylvVCxlBn/P 95+JOmFPYhY3BYqq7iqAValqKM+MOiqx2L0M4aJcCMgyipmM1O0KjrWFpI5VX+BB HPk7Svel2Mmr1OGukbenVXyxXdZzyoqsqz4FFVaGk1heV6orVcP4cN05ciVlW1Ju q5pcaOpDYeEfjECrLJsA31mmZPYNWS10dfO1/n8yfSE3ck4rBP1VsQDvSE9J7+ZH +vyBEr/reFB99q3aOoNtiOx4wClmgQCvbPenk2PhtT+1lGVOVLUsy0NVurOgQqj8 Bs3vkqHR9DhOtzJFn/+poQz2LqIm50RLtgDdXU5q6WU1tjSVykkbK/EGEVB7V8us vc4= -----END CERTIFICATE-----Generated at Wed Dec 31 00:16:59 2025 by rpki-client