This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ujRT7NHPDOJfGsaUzFkZbpsohhs.roa File: ujRT7NHPDOJfGsaUzFkZbpsohhs.roa (raw, json) Hash identifier: +neiARZepB9jRiGGUJlGUsQbZxyZbMQpk+E2fBPBw4Y= Subject key identifier: BA:34:53:EC:D1:CF:0C:E2:5F:1A:C6:94:CC:59:19:6E:9B:28:86:1B Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B67D14F3C5C7D46E54C3F2932D9849604 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ujRT7NHPDOJfGsaUzFkZbpsohhs.roa Signing time: Wed 25 Oct 2023 17:10:52 +0000 ROA not before: Wed 25 Oct 2023 17:10:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18b:67cb:7c78/128 maxlen: 128 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:67:d1:4f:3c:5c:7d:46:e5:4c:3f:29:32:d9:84:96:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 25 17:10:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ba3453ecd1cf0ce25f1ac694cc59196e9b28861b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7a:f4:9c:1f:d0:54:de:15:87:07:b3:ea:e5: 23:f1:18:08:41:13:26:0f:47:42:ed:eb:01:a6:52: b5:20:17:b8:fb:c4:d6:68:10:e7:a5:5a:01:2a:0f: 33:6c:90:02:25:c0:2b:3a:1a:09:03:6d:2a:14:f5: 13:e8:c3:63:77:eb:0d:57:1e:45:0b:6d:a4:62:bf: c2:db:6e:5f:01:62:bc:d9:a6:24:02:a4:ff:48:1c: 50:c5:44:d9:0e:e4:df:db:0b:5b:d2:20:7d:4b:79: ad:d1:0a:09:12:58:bc:94:cb:08:29:29:78:f7:95: b2:94:d0:fb:9c:1d:1d:31:77:a4:5f:88:22:6b:d7: 85:cf:52:68:c6:b2:b6:fe:db:b9:df:33:f1:25:3e: 60:da:d4:ee:23:16:c7:97:fb:42:c0:d6:e3:e2:6f: 6e:9d:5a:8b:47:73:df:e1:f7:ad:b2:4d:fb:75:d0: 72:f7:75:a6:92:84:f0:27:6f:bc:5e:54:5c:c5:84: d7:ea:21:9c:54:d8:0b:47:82:8e:1a:df:90:12:24: 0c:fe:4b:70:69:25:73:05:ff:f2:c3:fc:f2:eb:23: 39:07:2f:e0:13:a5:0d:86:7c:aa:d0:50:c0:1e:95: c9:74:47:fb:b0:ed:1f:2f:41:75:c2:e9:fe:c0:c9: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:53:EC:D1:CF:0C:E2:5F:1A:C6:94:CC:59:19:6E:9B:28:86:1B X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ujRT7NHPDOJfGsaUzFkZbpsohhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 5c:0c:09:59:cd:22:0b:33:f7:70:7b:03:ab:ef:ac:24:bc:4d: da:da:6e:d9:c8:fe:b4:be:f9:b4:9d:c3:1c:9a:05:c7:09:5f: 18:a4:3f:4c:74:1e:22:03:92:72:7c:51:64:04:03:ba:d6:46: f2:19:d3:09:8b:93:2e:86:f0:3b:fc:5b:aa:7e:a2:be:f6:07: ba:cf:c1:1f:c4:50:4c:bf:53:4d:4d:89:10:91:ae:14:dc:0d: 94:19:d3:d1:27:af:4c:89:15:b0:d6:d7:69:fc:2c:31:72:a8: bd:3c:e0:5c:52:66:6b:84:94:9c:73:21:9c:8b:d1:7a:22:c9: 56:9c:89:c0:8e:99:aa:45:af:6b:9a:f3:a8:a2:11:f9:0c:c9: 38:43:39:2c:78:ae:82:67:18:a8:7b:ea:d9:db:d4:8c:1c:a2: a4:3e:2a:d4:93:30:47:35:9b:9c:b5:80:bc:24:de:ab:44:8b: 67:ab:7a:be:c5:2f:eb:6e:f9:56:c1:ae:2d:60:3a:e6:fa:b8: dd:0d:be:32:65:58:0a:c8:88:da:43:40:2a:71:32:01:c5:1e: 8e:92:f7:fb:e0:36:22:f4:61:9b:63:5e:81:16:0f:4d:65:ae: 1f:33:00:42:1f:2d:95:4b:db:b1:ee:7d:89:fd:09:2f:fe:fa: d5:55:f9:b4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYtn0U88XH1G5Uw/KTLZhJYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDI1MTcxMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTM0NTNlY2QxY2YwY2UyNWYxYWM2OTRjYzU5MTk2ZTliMjg4NjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3r0nB/QVN4Vhwez6uUj8RgIQRMm D0dC7esBplK1IBe4+8TWaBDnpVoBKg8zbJACJcArOhoJA20qFPUT6MNjd+sNVx5F C22kYr/C225fAWK82aYkAqT/SBxQxUTZDuTf2wtb0iB9S3mt0QoJEli8lMsIKSl4 95WylND7nB0dMXekX4gia9eFz1JoxrK2/tu53zPxJT5g2tTuIxbHl/tCwNbj4m9u nVqLR3Pf4fetsk37ddBy93WmkoTwJ2+8XlRcxYTX6iGcVNgLR4KOGt+QEiQM/ktw aSVzBf/yw/zy6yM5By/gE6UNhnyq0FDAHpXJdEf7sO0fL0F1wun+wMl1wQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLo0U+zRzwziXxrGlMxZGW6bKIYbMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvdWpSVDdOSFBET0pmR3NhVXpGa1picHNvaGhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFwMCVnNIgsz93B7A6vv rCS8TdrabtnI/rS++bSdwxyaBccJXxikP0x0HiIDknJ8UWQEA7rWRvIZ0wmLky6G 8Dv8W6p+or72B7rPwR/EUEy/U01NiRCRrhTcDZQZ09Enr0yJFbDW12n8LDFyqL08 4FxSZmuElJxzIZyL0XoiyVacicCOmapFr2ua86iiEfkMyThDOSx4roJnGKh76tnb 1IwcoqQ+KtSTMEc1m5y1gLwk3qtEi2erer7FL+tu+VbBri1gOub6uN0NvjJlWArI iNpDQCpxMgHFHo6S9/vgNiL0YZtjXoEWD01lrh8zAEIfLZVL27HufYn9CS/++tVV +bQ= -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:04 2025 by rpki-client