This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1ydUSkXaEjPvMcHlj6sU8XPBmGA.roa File: 1ydUSkXaEjPvMcHlj6sU8XPBmGA.roa (raw, json) Hash identifier: 27IFkFMcx1QvmhTETuQfYfWGMiDuEZXPRSSWGLBdT10= Subject key identifier: D7:27:54:4A:45:DA:12:33:EF:31:C1:E5:8F:AB:14:F1:73:C1:98:60 Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Certificate serial: 018A52905255AD26D2AF79A91E598E39E1E1 Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1ydUSkXaEjPvMcHlj6sU8XPBmGA.roa Signing time: Fri 01 Sep 2023 21:05:04 +0000 ROA not before: Fri 01 Sep 2023 21:05:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:528f:7666/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:52:90:52:55:ad:26:d2:af:79:a9:1e:59:8e:39:e1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Validity Not Before: Sep 1 21:05:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d727544a45da1233ef31c1e58fab14f173c19860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ef:5b:d7:ba:16:f8:34:bb:98:be:16:e5:c3: a2:b4:84:88:31:1b:09:42:9b:b5:15:64:b3:f1:e9: 6a:e9:7d:80:17:4e:57:fa:f9:e7:32:03:b5:7a:11: 5a:84:b0:9e:51:02:91:77:1d:d3:e4:d7:e0:d1:60: 73:37:c4:0b:4b:20:6a:ca:fc:9b:90:1e:90:5c:9a: b4:04:fb:e5:d1:f4:1b:9b:6f:53:e8:08:12:d4:4d: df:92:5c:d4:22:1b:ea:66:6c:d7:40:1e:ef:95:31: 73:46:e7:cb:26:80:db:e8:89:3f:63:cb:09:41:46: 1b:44:1a:43:ec:ff:b1:22:d6:9f:47:7e:53:4b:64: 80:00:83:0d:b4:7d:3a:6a:ab:fd:89:a2:60:5b:0a: 65:fc:5d:53:85:36:d6:d9:1f:4b:ef:10:74:3e:7d: 49:96:6c:14:0e:33:23:b2:ca:9c:91:3e:c2:39:39: a8:b6:90:b1:1d:6e:60:c2:96:86:2b:3a:cc:e9:fd: 96:86:68:71:31:1c:34:41:5b:45:09:fc:c6:fb:14: 7f:f0:7c:95:80:66:33:77:fa:71:84:be:c1:d7:ce: 33:bb:b8:e1:8e:99:18:8b:95:0e:98:df:ff:18:78: ad:59:34:34:77:45:2e:55:24:9f:05:73:af:5b:9a: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:54:4A:45:DA:12:33:EF:31:C1:E5:8F:AB:14:F1:73:C1:98:60 X509v3 Authority Key Identifier: keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1ydUSkXaEjPvMcHlj6sU8XPBmGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 00:8b:44:a0:80:f0:27:87:9a:62:99:d1:6f:1c:d4:15:ff:76: 9a:ce:2e:c0:9c:ac:b8:ca:6f:9f:24:de:d9:ab:9a:84:93:e5: 7a:7a:12:6f:2d:61:8a:78:09:c7:51:d0:c9:c2:4a:a4:c5:d2: d3:5a:71:6e:f2:6b:33:2e:c8:5a:33:37:4b:7e:98:3c:d2:a7: 7f:0b:bf:87:97:4f:f6:f3:f6:bf:7a:b1:45:60:f5:c4:1c:c2: 82:14:eb:b3:2f:e1:ee:ee:c3:a7:ce:15:6c:e4:5c:ea:7f:48: e5:d4:ba:d8:08:8e:6c:ab:5f:d2:94:6b:6e:f9:60:30:52:f8: 95:af:3c:af:8e:c3:eb:7b:69:18:a2:dd:20:03:2c:df:fb:1a: 63:eb:62:14:8e:6a:fa:14:6c:ff:a1:1b:6c:4c:0f:25:53:46: ec:38:e2:b0:2e:bc:c6:08:3b:12:d0:e4:d7:18:39:32:12:5d: 13:d3:23:64:b4:c9:87:04:00:49:7e:7b:4f:dd:cf:f2:a1:5b: 51:85:57:88:b9:dc:42:68:73:51:55:08:f8:67:be:c5:e4:c0: fb:7b:51:9d:43:09:82:b2:79:31:ca:37:b1:c1:c1:e1:17:ca: 40:d8:2a:bc:15:33:01:eb:f3:8e:c3:48:75:42:20:a7:53:71: 11:c0:4b:e4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYpSkFJVrSbSr3mpHlmOOeHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5 NjcyNzUwHhcNMjMwOTAxMjEwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzI3NTQ0YTQ1ZGExMjMzZWYzMWMxZTU4ZmFiMTRmMTczYzE5ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO9b17oW+DS7mL4W5cOitISIMRsJ Qpu1FWSz8elq6X2AF05X+vnnMgO1ehFahLCeUQKRdx3T5Nfg0WBzN8QLSyBqyvyb kB6QXJq0BPvl0fQbm29T6AgS1E3fklzUIhvqZmzXQB7vlTFzRufLJoDb6Ik/Y8sJ QUYbRBpD7P+xItafR35TS2SAAIMNtH06aqv9iaJgWwpl/F1ThTbW2R9L7xB0Pn1J lmwUDjMjssqckT7COTmotpCxHW5gwpaGKzrM6f2WhmhxMRw0QVtFCfzG+xR/8HyV gGYzd/pxhL7B184zu7jhjpkYi5UOmN//GHitWTQ0d0UuVSSfBXOvW5oJYQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNcnVEpF2hIz7zHB5Y+rFPFzwZhgMB8GA1UdIwQY MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt ODNmY2QyMjU0ODJhLzEvMXlkVVNrWGFFalB2TWNIbGo2c1U4WFBCbUdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAACLRKCA8CeHmmKZ0W8c 1BX/dprOLsCcrLjKb58k3tmrmoST5Xp6Em8tYYp4CcdR0MnCSqTF0tNacW7yazMu yFozN0t+mDzSp38Lv4eXT/bz9r96sUVg9cQcwoIU67Mv4e7uw6fOFWzkXOp/SOXU utgIjmyrX9KUa275YDBS+JWvPK+Ow+t7aRii3SADLN/7GmPrYhSOavoUbP+hG2xM DyVTRuw44rAuvMYIOxLQ5NcYOTISXRPTI2S0yYcEAEl+e0/dz/KhW1GFV4i53EJo c1FVCPhnvsXkwPt7UZ1DCYKyeTHKN7HBweEXykDYKrwVMwHr847DSHVCIKdTcRHA S+Q= -----END CERTIFICATE-----Generated at Mon Dec 29 08:28:13 2025 by rpki-client