This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3bU2wK45Z65F_G1oIbYRy-8QDTc.roa File: 3bU2wK45Z65F_G1oIbYRy-8QDTc.roa (raw, json) Hash identifier: IHmseCBwzJVZkbouymQKPz9vegyzcXcrp6rTRflDUoQ= Subject key identifier: DD:B5:36:C0:AE:39:67:AE:45:FC:6D:68:21:B6:11:CB:EF:10:0D:37 Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Certificate serial: 018AA789080B838F74FDB8681DEC5BB6E0A2 Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3bU2wK45Z65F_G1oIbYRy-8QDTc.roa Signing time: Mon 18 Sep 2023 09:04:50 +0000 ROA not before: Mon 18 Sep 2023 09:04:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:a788:c20a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:a7:89:08:0b:83:8f:74:fd:b8:68:1d:ec:5b:b6:e0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Validity Not Before: Sep 18 09:04:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ddb536c0ae3967ae45fc6d6821b611cbef100d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:db:bf:64:f6:50:f2:03:20:81:2e:c6:71: 42:52:7b:97:89:a2:85:1a:a6:64:22:66:97:b0:93: 71:02:d0:58:65:02:d6:b8:2d:40:2e:f8:54:eb:0a: 31:21:1a:88:60:69:4c:2f:7d:2e:c3:89:4a:b7:55: 73:67:a9:7a:b1:16:a8:91:b6:5d:84:b8:8d:c4:f1: eb:dc:02:12:8f:3f:be:b7:51:0d:82:67:fc:c6:b7: 13:db:77:de:90:05:02:d4:b9:47:5a:97:36:c0:ef: 71:10:6e:20:0f:d4:48:37:c1:a8:42:bb:ac:40:6e: e5:b5:23:54:bc:49:57:58:3d:41:78:70:25:3c:c6: 5a:2e:59:dc:6f:18:fe:a6:d4:3b:0c:f9:ce:30:ed: d1:ef:f6:72:8f:37:d5:aa:4a:20:4e:59:cb:e3:a1: 0e:5d:29:22:6a:8d:e2:87:ce:e1:6c:b3:d2:ff:14: dd:61:22:9c:04:9a:b5:db:e1:ad:a3:f9:e1:bb:ad: e9:05:69:20:88:0e:f9:bc:7a:fb:3b:33:99:d1:07: f1:1b:c3:15:bc:26:e9:02:14:42:b5:51:f9:44:74: 8a:3e:14:60:0f:09:df:36:21:17:20:d9:a9:7e:c2: ad:00:3f:1c:15:5b:c1:0b:87:9b:28:6e:6e:94:4f: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:36:C0:AE:39:67:AE:45:FC:6D:68:21:B6:11:CB:EF:10:0D:37 X509v3 Authority Key Identifier: keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/3bU2wK45Z65F_G1oIbYRy-8QDTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 2c:6f:d0:c6:8b:eb:90:77:98:b0:43:87:a8:1e:a9:bc:b8:6a: 2f:c6:e9:8c:44:88:3d:eb:03:4d:88:4b:a3:03:91:d4:46:b8: 5a:97:5f:34:35:0b:e2:d5:5f:1f:64:e4:56:5d:1e:ca:36:3b: 3c:a9:0b:5a:ce:da:dc:e2:7f:3b:64:f7:f6:fa:61:7a:b4:71: e3:bd:5e:c6:86:c7:3f:52:b1:d8:59:45:28:c6:5b:a7:a6:d7: b7:fb:5a:31:84:ec:ca:89:4d:54:92:9f:bb:fc:0b:00:aa:7f: 47:df:14:7d:4f:5b:46:39:3d:c6:db:57:1f:ff:7c:93:37:59: c9:b2:7e:83:e7:64:a2:58:fc:02:2d:b7:85:eb:93:ef:c5:19: b9:7b:59:90:f2:13:78:91:39:79:87:a2:2a:68:01:48:e6:9f: ee:e9:cd:76:5e:0d:22:d8:db:24:a4:87:e8:33:ff:d5:4f:c5: fd:21:69:51:f6:d6:66:85:47:ea:a5:df:56:41:aa:be:7e:11: 7b:3b:2b:a0:eb:09:63:95:ae:e1:dd:c2:2f:ab:dc:19:68:65: 31:6a:71:c6:f4:d5:ae:c2:87:88:14:d2:12:74:9a:bc:a3:89: d4:58:21:14:4c:dd:55:0d:d4:22:46:9c:27:7e:eb:77:69:77: 38:92:63:66 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYqniQgLg490/bhoHexbtuCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5 NjcyNzUwHhcNMjMwOTE4MDkwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGI1MzZjMGFlMzk2N2FlNDVmYzZkNjgyMWI2MTFjYmVmMTAwZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2nbv2T2UPIDIIEuxnFCUnuXiaKF GqZkImaXsJNxAtBYZQLWuC1ALvhU6woxIRqIYGlML30uw4lKt1VzZ6l6sRaokbZd hLiNxPHr3AISjz++t1ENgmf8xrcT23fekAUC1LlHWpc2wO9xEG4gD9RIN8GoQrus QG7ltSNUvElXWD1BeHAlPMZaLlncbxj+ptQ7DPnOMO3R7/ZyjzfVqkogTlnL46EO XSkiao3ih87hbLPS/xTdYSKcBJq12+Gto/nhu63pBWkgiA75vHr7OzOZ0QfxG8MV vCbpAhRCtVH5RHSKPhRgDwnfNiEXINmpfsKtAD8cFVvBC4ebKG5ulE+p9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFN21NsCuOWeuRfxtaCG2EcvvEA03MB8GA1UdIwQY MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt ODNmY2QyMjU0ODJhLzEvM2JVMndLNDVaNjVGX0cxb0liWVJ5LThRRFRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACxv0MaL65B3mLBDh6ge qby4ai/G6YxEiD3rA02IS6MDkdRGuFqXXzQ1C+LVXx9k5FZdHso2OzypC1rO2tzi fztk9/b6YXq0ceO9XsaGxz9SsdhZRSjGW6em17f7WjGE7MqJTVSSn7v8CwCqf0ff FH1PW0Y5PcbbVx//fJM3WcmyfoPnZKJY/AItt4Xrk+/FGbl7WZDyE3iROXmHoipo AUjmn+7pzXZeDSLY2ySkh+gz/9VPxf0haVH21maFR+ql31ZBqr5+EXs7K6DrCWOV ruHdwi+r3BloZTFqccb01a7Ch4gU0hJ0mryjidRYIRRM3VUN1CJGnCd+63dpdziS Y2Y= -----END CERTIFICATE-----Generated at Tue Dec 30 04:34:07 2025 by rpki-client