This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zONnZsNhs43kD9wAbYXt-LPgg3Q.roa File: zONnZsNhs43kD9wAbYXt-LPgg3Q.roa (raw, json) Hash identifier: 07YP/Xoc8ReB1ZsAV2/ZxYAiVlGX7gij8Ev3L5UvaC0= Subject key identifier: CC:E3:67:66:C3:61:B3:8D:E4:0F:DC:00:6D:85:ED:F8:B3:E0:83:74 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C4A2C8433B2B29B16C1BC79B95880F456 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zONnZsNhs43kD9wAbYXt-LPgg3Q.roa Signing time: Fri 08 Dec 2023 16:04:40 +0000 ROA not before: Fri 08 Dec 2023 16:04:40 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18c:4a2c:3794/128 maxlen: 128 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:4a:2c:84:33:b2:b2:9b:16:c1:bc:79:b9:58:80:f4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 8 16:04:40 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=cce36766c361b38de40fdc006d85edf8b3e08374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:cd:b9:d0:49:40:32:27:9a:2c:c8:34:6d: 18:b9:ca:63:27:83:e1:a0:c4:bf:6c:07:9a:6a:22: 16:2a:a7:dc:3e:8c:23:6b:6c:6e:94:11:d3:33:d0: 4f:f1:11:94:dc:50:87:41:5c:5f:66:df:b5:1a:59: 88:0e:56:78:cb:f1:02:ed:d6:66:a9:0a:4b:60:b4: 1d:07:ff:1b:b2:3e:3a:6b:e5:a9:d2:a8:7f:19:17: 14:6d:72:26:93:04:33:5b:c8:33:a3:d7:7c:a9:72: 21:d1:8e:1c:10:a7:c6:74:c4:3f:1d:90:b8:06:3c: cd:73:99:8e:31:94:22:71:53:2e:01:6e:e5:95:a8: fd:fa:43:77:03:c4:50:9e:86:b9:ee:49:b9:5a:2c: 6d:39:e2:81:cd:c4:2f:42:66:35:75:7a:2e:2d:b0: 9f:80:70:6b:1f:30:86:66:fb:cd:2c:b5:9d:ae:ef: 86:88:8b:ef:d0:4a:68:8f:60:d3:6f:6b:43:bb:05: 2c:dd:11:90:44:2b:cf:74:14:cc:6c:46:6e:fd:ab: 7b:eb:d8:7e:95:4e:6d:da:6c:1b:61:59:09:b4:c2: 46:bd:eb:e5:d7:e7:73:74:81:26:62:4e:b9:21:e3: c9:bb:3f:fb:b6:6a:1a:86:0d:c5:57:40:30:18:e4: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E3:67:66:C3:61:B3:8D:E4:0F:DC:00:6D:85:ED:F8:B3:E0:83:74 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zONnZsNhs43kD9wAbYXt-LPgg3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 09:ca:86:13:f5:f6:33:11:4e:61:55:26:69:72:a7:b5:ee:e2: f7:dd:08:fd:09:14:50:19:be:b2:14:89:94:67:d7:33:75:bc: d4:9f:34:b9:71:78:d7:b8:9e:5e:f9:29:14:11:a7:40:c1:6e: 70:05:97:58:a1:0b:ee:7c:13:9f:3f:d1:eb:97:3d:5b:58:61: 53:32:49:13:31:e2:98:14:60:ea:dd:cc:69:2a:23:bc:19:87: c0:53:93:f2:79:e4:bc:f6:7a:12:45:21:d3:11:27:d4:42:6d: fb:48:89:13:b3:e8:26:c7:24:80:12:d6:b7:78:c7:14:e7:6b: 0b:31:b8:db:08:9e:2b:68:56:dd:16:d7:45:62:03:25:6d:18: 82:bd:e7:3f:f9:0f:74:f1:1b:bf:54:c3:14:9c:b2:08:e4:9f: 25:86:94:2c:76:f1:c2:78:33:bb:df:b9:9b:52:2e:7a:84:a5: 15:e9:ff:60:ca:7f:4b:8d:32:cf:6a:ef:74:f0:b8:71:bf:b0: 17:2b:59:47:57:2c:35:e2:ae:b9:18:ef:df:0f:9b:75:56:cd: 93:f6:51:bd:5c:46:6b:1a:36:6e:15:49:c8:5b:18:cc:4c:7f: 8e:6b:a0:6c:b3:81:58:b9:e4:b7:26:9a:60:0d:36:2f:c6:c2: a9:b1:7a:f3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYxKLIQzsrKbFsG8eblYgPRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjA4MTYwNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2UzNjc2NmMzNjFiMzhkZTQwZmRjMDA2ZDg1ZWRmOGIzZTA4Mzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuDNudBJQDInmizING0YucpjJ4Ph oMS/bAeaaiIWKqfcPowja2xulBHTM9BP8RGU3FCHQVxfZt+1GlmIDlZ4y/EC7dZm qQpLYLQdB/8bsj46a+Wp0qh/GRcUbXImkwQzW8gzo9d8qXIh0Y4cEKfGdMQ/HZC4 BjzNc5mOMZQicVMuAW7llaj9+kN3A8RQnoa57km5WixtOeKBzcQvQmY1dXouLbCf gHBrHzCGZvvNLLWdru+GiIvv0Epoj2DTb2tDuwUs3RGQRCvPdBTMbEZu/at769h+ lU5t2mwbYVkJtMJGvevl1+dzdIEmYk65IePJuz/7tmoahg3FV0AwGOQibQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMzjZ2bDYbON5A/cAG2F7fiz4IN0MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvek9OblpzTmhzNDNrRDl3QWJZWHQtTFBnZzNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAnKhhP19jMRTmFVJmly p7Xu4vfdCP0JFFAZvrIUiZRn1zN1vNSfNLlxeNe4nl75KRQRp0DBbnAFl1ihC+58 E58/0euXPVtYYVMySRMx4pgUYOrdzGkqI7wZh8BTk/J55Lz2ehJFIdMRJ9RCbftI iROz6CbHJIAS1rd4xxTnawsxuNsInitoVt0W10ViAyVtGIK95z/5D3TxG79UwxSc sgjknyWGlCx28cJ4M7vfuZtSLnqEpRXp/2DKf0uNMs9q73TwuHG/sBcrWUdXLDXi rrkY798Pm3VWzZP2Ub1cRmsaNm4VSchbGMxMf45roGyzgVi55LcmmmANNi/Gwqmx evM= -----END CERTIFICATE-----Generated at Sun Dec 28 23:24:07 2025 by rpki-client