This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MFr6Hd0PVKWZvns_Pv-8IbzE5GA.roa File: MFr6Hd0PVKWZvns_Pv-8IbzE5GA.roa (raw, json) Hash identifier: ezMI+B6MCTdFHMkWlyBY29tstSLC/JWJJ+/4q5mM/Ck= Subject key identifier: 30:5A:FA:1D:DD:0F:54:A5:99:BE:7B:3F:3E:FF:BC:21:BC:C4:E4:60 Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Certificate serial: 018A94701E4C172B02FC52334D577AAD4ED6 Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MFr6Hd0PVKWZvns_Pv-8IbzE5GA.roa Signing time: Thu 14 Sep 2023 16:04:50 +0000 ROA not before: Thu 14 Sep 2023 16:04:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:946f:b214/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:94:70:1e:4c:17:2b:02:fc:52:33:4d:57:7a:ad:4e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Validity Not Before: Sep 14 16:04:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=305afa1ddd0f54a599be7b3f3effbc21bcc4e460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:6a:ff:12:04:20:94:32:74:94:38:72:ef: e6:49:8e:83:16:79:b4:d3:3e:48:2a:4e:92:be:95: f7:ab:02:37:55:bc:c5:ad:aa:b0:05:4f:2f:b5:55: cc:d7:f8:43:f4:9a:9e:40:c0:d1:23:ce:d2:30:8d: 9e:33:9d:e4:14:0d:c1:cf:17:bb:30:83:03:9a:ad: 47:3b:2c:37:18:ba:b0:1d:08:0d:05:2a:eb:76:06: f1:0e:9d:32:c3:0e:21:01:49:60:d7:24:7e:c0:eb: 19:f6:bf:d8:78:e7:42:7c:d7:06:5e:74:6f:e9:bc: 17:0c:84:c6:23:7c:b8:4a:05:8c:e4:69:9a:fa:ee: 45:7e:8a:67:ea:13:90:ae:89:cf:b8:96:38:19:3f: af:cd:bf:d2:ba:dc:eb:cc:d1:c2:a9:11:18:49:09: 31:e3:a5:be:b7:33:5b:24:fc:25:19:2a:3d:6e:e9: 0e:6a:5a:61:e8:5b:5f:82:4d:18:8c:52:03:c1:fd: d8:f5:db:a8:e3:9e:25:12:fe:5e:1e:0c:0f:cc:a0: 9e:8a:46:43:8c:3c:5d:aa:57:e6:1f:6b:98:fe:c2: a3:6f:f6:2e:19:8a:ad:cb:35:98:e8:1d:53:1e:bd: db:00:4d:85:7a:f5:56:15:d0:d8:40:64:6f:ba:90: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5A:FA:1D:DD:0F:54:A5:99:BE:7B:3F:3E:FF:BC:21:BC:C4:E4:60 X509v3 Authority Key Identifier: keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MFr6Hd0PVKWZvns_Pv-8IbzE5GA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 94:f5:59:31:5c:00:28:91:43:f7:85:19:a3:5a:e3:f1:24:c7: 4b:8f:6a:16:36:2b:b7:66:32:33:a8:60:b2:75:18:98:e7:c7: 90:27:51:c4:45:34:59:ab:60:39:dc:a2:9a:76:40:b3:d6:62: 5f:5b:fc:4a:94:16:7c:30:ad:33:d9:18:a0:70:d1:09:bb:88: bc:91:f7:a1:b9:06:f2:7d:91:c7:a3:d6:a4:b5:f0:ec:12:7c: fc:e1:0e:a4:d3:b0:05:88:cb:cc:a1:de:76:3e:24:bb:51:48: 19:a7:ef:12:f3:70:c0:25:d7:8c:36:f3:57:ec:3f:a2:62:63: 0b:06:e6:30:78:c6:62:b7:f2:7c:a2:6c:34:0b:bd:76:7c:4e: 72:d0:8d:4b:ca:de:e9:29:82:d1:fe:ca:75:fd:a6:8f:9f:6c: 9b:3a:4b:bd:68:72:f9:05:02:df:d9:d0:bf:7d:49:bd:40:44: 10:c5:61:19:59:c2:3d:e7:8f:b2:66:16:4d:c9:c6:a8:6d:18: fe:36:6d:25:4c:14:16:ec:52:4c:de:7d:ca:5f:7f:5d:7b:7b: 96:9d:e8:f4:5c:9c:11:22:62:8a:c7:59:84:c8:c6:7d:ce:d3: 95:ed:00:51:65:6a:d8:b8:00:26:dd:95:b2:22:67:66:ed:7c: af:b2:f7:e5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYqUcB5MFysC/FIzTVd6rU7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5 NjcyNzUwHhcNMjMwOTE0MTYwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDVhZmExZGRkMGY1NGE1OTliZTdiM2YzZWZmYmMyMWJjYzRlNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0dq/xIEIJQydJQ4cu/mSY6DFnm0 0z5IKk6SvpX3qwI3VbzFraqwBU8vtVXM1/hD9JqeQMDRI87SMI2eM53kFA3Bzxe7 MIMDmq1HOyw3GLqwHQgNBSrrdgbxDp0yww4hAUlg1yR+wOsZ9r/YeOdCfNcGXnRv 6bwXDITGI3y4SgWM5Gma+u5Ffopn6hOQronPuJY4GT+vzb/SutzrzNHCqREYSQkx 46W+tzNbJPwlGSo9bukOalph6Ftfgk0YjFIDwf3Y9duo454lEv5eHgwPzKCeikZD jDxdqlfmH2uY/sKjb/YuGYqtyzWY6B1THr3bAE2FevVWFdDYQGRvupBu8wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDBa+h3dD1Slmb57Pz7/vCG8xORgMB8GA1UdIwQY MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt ODNmY2QyMjU0ODJhLzEvTUZyNkhkMFBWS1dadm5zX1B2LThJYnpFNUdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJT1WTFcACiRQ/eFGaNa 4/Ekx0uPahY2K7dmMjOoYLJ1GJjnx5AnUcRFNFmrYDncopp2QLPWYl9b/EqUFnww rTPZGKBw0Qm7iLyR96G5BvJ9kcej1qS18OwSfPzhDqTTsAWIy8yh3nY+JLtRSBmn 7xLzcMAl14w281fsP6JiYwsG5jB4xmK38nyibDQLvXZ8TnLQjUvK3ukpgtH+ynX9 po+fbJs6S71ocvkFAt/Z0L99Sb1ARBDFYRlZwj3nj7JmFk3JxqhtGP42bSVMFBbs Ukzefcpff117e5ad6PRcnBEiYorHWYTIxn3O05XtAFFlati4ACbdlbIiZ2btfK+y 9+U= -----END CERTIFICATE-----Generated at Wed Dec 24 03:00:57 2025 by rpki-client