This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vxzqbi1zJ6XEFsist4Ec1cVxTdU.roa File: vxzqbi1zJ6XEFsist4Ec1cVxTdU.roa (raw, json) Hash identifier: RxbpnBY8IOWstTrqRh8Fh4yu+pygAZANt85SGWI9igo= Subject key identifier: BF:1C:EA:6E:2D:73:27:A5:C4:16:C8:AC:B7:81:1C:D5:C5:71:4D:D5 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C47D06B549DD54B3FA9DF99B97A8871E2 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vxzqbi1zJ6XEFsist4Ec1cVxTdU.roa Signing time: Fri 08 Dec 2023 05:04:50 +0000 ROA not before: Fri 08 Dec 2023 05:04:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64:ffff:0:18c:47d0:1ac/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:47:d0:6b:54:9d:d5:4b:3f:a9:df:99:b9:7a:88:71:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 8 05:04:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=bf1cea6e2d7327a5c416c8acb7811cd5c5714dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:ac:e7:1e:b0:06:2c:d2:c5:65:08:75:8f: 0f:37:73:18:6b:92:39:d0:aa:e2:11:df:ea:72:72: a4:0d:7a:77:af:b6:f1:9c:ef:06:7e:d8:36:19:30: b3:e4:27:17:b1:0c:d9:db:59:27:7f:4b:20:bd:e8: 00:36:1d:22:18:f8:29:bd:8c:a4:40:ec:e3:38:a5: f7:d7:58:69:62:0a:da:60:d3:0f:fc:5a:70:10:81: 30:61:2b:60:e9:8b:0f:1a:57:d4:12:e7:9d:06:fd: 51:4c:78:2e:bd:8f:88:75:96:31:fd:dc:fb:6c:92: 48:d5:c1:7d:4e:71:15:ec:cb:94:7f:83:d3:da:bb: 4b:dc:99:7d:44:25:d4:0a:98:ff:35:68:9c:fa:13: 4b:d3:1a:7a:5d:2d:b9:99:ff:54:32:e8:9b:69:ac: ac:c2:c4:b1:71:50:80:c5:54:17:6d:e8:d2:2e:e0: ac:de:6a:68:f8:ea:66:33:8e:81:10:12:82:5c:89: d2:df:ef:01:de:a6:e5:76:85:31:d3:48:63:fb:75: a9:6a:e7:a5:d8:2f:9c:0a:94:1f:60:72:66:31:d3: 0a:7c:2e:54:66:18:c4:cc:c8:68:44:7e:df:a5:72: 72:ff:f8:a0:33:94:ba:d7:49:64:be:f9:c2:31:59: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1C:EA:6E:2D:73:27:A5:C4:16:C8:AC:B7:81:1C:D5:C5:71:4D:D5 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vxzqbi1zJ6XEFsist4Ec1cVxTdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption aa:7a:e7:7d:ca:8a:f2:49:2c:3a:ad:ba:09:17:e5:2f:9e:48: 20:d1:78:15:31:7f:c6:8a:c6:f1:be:35:db:ac:55:33:2d:7e: ce:a3:19:66:f7:af:8c:0d:cc:81:0a:be:9b:4d:9c:b8:86:ea: 63:39:a9:db:11:69:b7:ea:8c:d3:d8:63:5f:dd:49:f9:e9:36: 61:68:9a:0a:9e:5a:de:5c:3e:0b:21:9a:18:ee:83:82:99:8b: f6:a4:89:6e:90:32:e0:7f:dc:a1:8e:56:ca:ea:67:9e:49:ed: 75:03:d5:c4:f4:e9:38:4d:57:74:d8:fa:99:ef:a4:2c:11:b7: 83:04:c8:4c:76:68:21:cd:f7:dd:07:ef:b0:a6:14:49:a9:e3: 22:8b:0a:75:fa:6c:49:c9:1f:52:f5:83:9d:0a:4d:04:42:26: 8f:d3:b2:b4:af:59:40:74:57:f9:ab:1c:ea:fc:f9:30:4f:ee: f9:c6:cc:14:ac:ce:f0:9a:a1:48:6e:6d:7d:d9:10:77:c9:d3: a5:2f:91:f4:7f:71:81:18:1a:20:a8:a3:8f:e0:35:be:05:d9: 0e:27:6a:1d:a4:cf:df:5d:da:d3:29:be:77:ff:7e:bf:e8:6e: 6d:c5:34:96:49:fa:e6:b3:84:bc:2d:ce:a0:7c:99:17:d8:59: 4d:b6:15:32 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYxH0GtUndVLP6nfmbl6iHHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjA4MDUwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjFjZWE2ZTJkNzMyN2E1YzQxNmM4YWNiNzgxMWNkNWM1NzE0ZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRys5x6wBizSxWUIdY8PN3MYa5I5 0KriEd/qcnKkDXp3r7bxnO8Gftg2GTCz5CcXsQzZ21knf0sgvegANh0iGPgpvYyk QOzjOKX311hpYgraYNMP/FpwEIEwYStg6YsPGlfUEuedBv1RTHguvY+IdZYx/dz7 bJJI1cF9TnEV7MuUf4PT2rtL3Jl9RCXUCpj/NWic+hNL0xp6XS25mf9UMuibaays wsSxcVCAxVQXbejSLuCs3mpo+OpmM46BEBKCXInS3+8B3qbldoUx00hj+3Wpauel 2C+cCpQfYHJmMdMKfC5UZhjEzMhoRH7fpXJy//igM5S610lkvvnCMVm6CwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL8c6m4tcyelxBbIrLeBHNXFcU3VMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvdnh6cWJpMXpKNlhFRnNpc3Q0RWMxY1Z4VGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKp6533KivJJLDqtugkX 5S+eSCDReBUxf8aKxvG+NdusVTMtfs6jGWb3r4wNzIEKvptNnLiG6mM5qdsRabfq jNPYY1/dSfnpNmFomgqeWt5cPgshmhjug4KZi/akiW6QMuB/3KGOVsrqZ55J7XUD 1cT06ThNV3TY+pnvpCwRt4MEyEx2aCHN990H77CmFEmp4yKLCnX6bEnJH1L1g50K TQRCJo/TsrSvWUB0V/mrHOr8+TBP7vnGzBSszvCaoUhubX3ZEHfJ06UvkfR/cYEY GiCoo4/gNb4F2Q4nah2kz99d2tMpvnf/fr/obm3FNJZJ+uazhLwtzqB8mRfYWU22 FTI= -----END CERTIFICATE-----Generated at Mon Dec 29 00:48:08 2025 by rpki-client