This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yYr6e0hB4mq25R2t2xBTv2al3hE.roa File: yYr6e0hB4mq25R2t2xBTv2al3hE.roa (raw, json) Hash identifier: +RuJ+dYmcRYsJV2GKB05JpxXSDNR2/TLxAtM9OVLa74= Subject key identifier: C9:8A:FA:7B:48:41:E2:6A:B6:E5:1D:AD:DB:10:53:BF:66:A5:DE:11 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018AF801D33C78E7FFF661D90EE64F360595 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yYr6e0hB4mq25R2t2xBTv2al3hE.roa Signing time: Wed 04 Oct 2023 00:06:23 +0000 ROA not before: Wed 04 Oct 2023 00:06:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:f801:10d5/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:f8:01:d3:3c:78:e7:ff:f6:61:d9:0e:e6:4f:36:05:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 4 00:06:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=c98afa7b4841e26ab6e51daddb1053bf66a5de11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:d6:ab:42:42:bc:33:7c:df:22:3d:93:67: 64:ff:cf:7b:ef:5a:7a:b6:12:15:b0:ec:f2:53:1c: 0d:0f:cb:a0:1c:3f:38:8b:fc:80:45:63:8f:ad:8f: 52:3b:b3:89:79:35:a8:1a:75:33:08:d2:fa:5e:30: c0:81:37:d0:e1:2a:3c:db:02:09:58:17:0e:fe:18: b5:3e:8d:ac:17:01:c6:2a:49:85:4d:51:6b:c2:c6: 4a:db:6e:8b:a9:7a:db:04:d5:9e:a6:ef:51:a9:33: 83:90:f1:87:cc:b2:85:84:bb:34:d5:7b:57:5f:c4: 79:50:20:8c:f9:d5:1d:de:cb:8a:09:7b:4d:19:43: 1a:c8:99:71:2d:95:da:ff:1c:ec:54:d5:98:d7:8c: f3:6f:04:11:6e:d0:ce:f7:ab:5a:fe:b2:28:5c:7c: 54:9b:7b:59:ae:11:26:0e:6a:63:0b:89:46:b6:22: ca:af:31:df:34:45:dd:5a:58:55:0f:f9:f0:56:77: 40:4d:33:0b:ad:39:48:6f:f6:45:a7:cf:a1:1a:61: e1:5b:70:e0:8b:5f:37:9c:e7:20:70:29:7b:7f:85: e6:d1:96:a5:1c:15:64:19:b7:53:0d:c4:cb:06:a5: 22:20:b7:cf:36:84:08:e0:db:b7:0a:22:60:3b:bf: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:FA:7B:48:41:E2:6A:B6:E5:1D:AD:DB:10:53:BF:66:A5:DE:11 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/yYr6e0hB4mq25R2t2xBTv2al3hE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 82:94:5b:8a:69:ad:ae:69:a7:79:45:66:fd:bb:20:92:fe:a8: 0b:83:1c:b3:8d:7b:12:42:a3:f1:0c:42:b8:81:52:27:62:c2: 97:c0:d9:b3:1c:72:fb:49:f5:03:bd:72:14:1a:4c:25:ca:bc: 70:7f:ee:94:30:d4:d1:e1:a5:f4:fc:22:37:eb:fb:e8:2a:e0: 3f:1a:41:a7:77:1f:f0:2f:f0:00:a5:d6:ce:26:98:69:12:3f: f2:a5:c2:77:95:d8:15:b4:6f:0c:ef:f2:74:be:c8:50:2d:dc: f2:a7:f2:b9:d8:ae:53:99:94:fb:64:6c:bd:fc:cd:8a:1a:99: 4f:a0:0a:45:50:4a:31:8b:8e:db:2a:78:64:11:29:3f:1d:94: e7:8a:b6:83:42:b6:a0:28:a0:34:36:28:9f:2d:a0:bc:3a:05: 16:31:eb:17:fa:62:24:23:21:59:e1:3a:56:d5:36:c0:04:66: c3:a5:1b:d2:05:ef:5f:1d:4c:9c:96:79:d2:c0:e6:97:0f:1c: 51:d9:a1:01:a3:31:04:dd:50:64:20:09:03:2f:19:9e:26:c9: 0d:35:1e:cd:5e:79:94:d1:8a:d1:4e:05:88:7b:6d:8f:7a:27: 1b:1f:9e:be:ed:75:60:d0:91:1b:8c:0e:ab:fc:0a:cb:c5:5a: 9e:05:7a:3e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYr4AdM8eOf/9mHZDuZPNgWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDA0MDAwNjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOThhZmE3YjQ4NDFlMjZhYjZlNTFkYWRkYjEwNTNiZjY2YTVkZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6LWq0JCvDN83yI9k2dk/89771p6 thIVsOzyUxwND8ugHD84i/yARWOPrY9SO7OJeTWoGnUzCNL6XjDAgTfQ4So82wIJ WBcO/hi1Po2sFwHGKkmFTVFrwsZK226LqXrbBNWepu9RqTODkPGHzLKFhLs01XtX X8R5UCCM+dUd3suKCXtNGUMayJlxLZXa/xzsVNWY14zzbwQRbtDO96ta/rIoXHxU m3tZrhEmDmpjC4lGtiLKrzHfNEXdWlhVD/nwVndATTMLrTlIb/ZFp8+hGmHhW3Dg i183nOcgcCl7f4Xm0ZalHBVkGbdTDcTLBqUiILfPNoQI4Nu3CiJgO79qIwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMmK+ntIQeJqtuUdrdsQU79mpd4RMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEveVlyNmUwaEI0bXEyNVIydDJ4QlR2MmFsM2hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIKUW4ppra5pp3lFZv27 IJL+qAuDHLONexJCo/EMQriBUidiwpfA2bMccvtJ9QO9chQaTCXKvHB/7pQw1NHh pfT8Ijfr++gq4D8aQad3H/Av8ACl1s4mmGkSP/KlwneV2BW0bwzv8nS+yFAt3PKn 8rnYrlOZlPtkbL38zYoamU+gCkVQSjGLjtsqeGQRKT8dlOeKtoNCtqAooDQ2KJ8t oLw6BRYx6xf6YiQjIVnhOlbVNsAEZsOlG9IF718dTJyWedLA5pcPHFHZoQGjMQTd UGQgCQMvGZ4myQ01Hs1eeZTRitFOBYh7bY96Jxsfnr7tdWDQkRuMDqv8CsvFWp4F ej4= -----END CERTIFICATE-----Generated at Fri Jan 2 09:55:12 2026 by rpki-client