This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xAZwWdXdK1455BQo_vwm0vtxHJE.roa File: xAZwWdXdK1455BQo_vwm0vtxHJE.roa (raw, json) Hash identifier: q4YGXEzyMV4WlrrH0SzQiie1TVcYmkTKYRjoeC5/xcc= Subject key identifier: C4:06:70:59:D5:DD:2B:5E:39:E4:14:28:FE:FC:26:D2:FB:71:1C:91 Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Certificate serial: 018A604BF208DF21B67243D5BFA34988A13F Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xAZwWdXdK1455BQo_vwm0vtxHJE.roa Signing time: Mon 04 Sep 2023 13:05:04 +0000 ROA not before: Mon 04 Sep 2023 13:05:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:604b:1ef1/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:60:4b:f2:08:df:21:b6:72:43:d5:bf:a3:49:88:a1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Validity Not Before: Sep 4 13:05:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=c4067059d5dd2b5e39e41428fefc26d2fb711c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9e:f6:81:f9:82:6c:86:a1:ab:c7:49:f6:5a: 89:9d:78:c6:e1:79:d2:21:18:72:07:8a:10:46:7d: e4:2a:e6:4e:53:d5:5b:66:db:64:3c:87:0c:1f:49: 0b:a5:3b:67:aa:5e:5a:c3:2c:2d:3a:88:7a:3b:e2: ec:d0:d7:1f:4c:1b:1c:7a:93:3f:45:ae:00:1a:ae: 17:7f:ee:25:05:e7:6b:b7:d8:fc:4c:77:5a:e9:f4: 45:ae:f0:a8:1b:13:24:82:27:74:5c:75:37:59:44: 4a:03:2b:99:80:ac:b4:eb:9b:98:e6:0c:44:07:45: d7:87:d3:7f:25:1d:aa:cb:f0:ec:ff:61:3e:bd:e0: bc:42:08:c0:aa:30:b9:fc:54:f4:3b:05:41:3d:65: 42:6c:67:0c:03:8f:f2:c5:a8:e0:75:ee:e0:c0:f4: ea:28:a7:23:2f:97:f6:55:c4:ac:6b:b5:68:ad:21: 14:35:83:57:51:35:0e:91:0d:b6:51:80:d8:d0:37: bf:44:66:5f:47:66:44:b1:7a:38:9a:e3:e8:8e:04: ed:39:37:1b:66:6f:5a:af:72:41:f4:29:73:7e:2b: 36:fd:88:cd:7b:ca:44:b8:29:e0:3e:87:e7:6b:7c: 1f:eb:c6:2a:b4:12:d2:c6:9a:63:2e:11:6b:b2:81: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:70:59:D5:DD:2B:5E:39:E4:14:28:FE:FC:26:D2:FB:71:1C:91 X509v3 Authority Key Identifier: keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xAZwWdXdK1455BQo_vwm0vtxHJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption a3:c1:3a:c2:b9:31:a8:a3:f1:af:08:2c:53:80:b2:7f:45:28: c9:a2:03:9f:8e:8d:14:c6:88:7a:d0:c1:e7:b0:e4:4f:d7:9d: 45:2a:ad:c0:98:fa:96:87:33:a3:d6:21:6d:77:7c:e5:4e:38: b1:b6:c2:8f:3b:3c:90:ca:58:a9:e1:8e:5e:48:e5:3b:b4:92: 86:b3:aa:3a:1d:03:ac:87:38:66:ac:2a:af:69:c2:ce:da:52: e5:82:80:5f:4e:42:71:67:1e:02:53:22:0c:02:56:49:e2:e8: 98:1f:57:ae:0e:b7:2a:68:76:65:f9:70:a0:e0:ce:aa:da:80: da:72:5a:08:2f:bd:aa:ce:3f:93:a0:f8:48:55:4c:a2:fb:5d: fd:3f:c7:79:7d:b0:9c:88:26:9a:cf:54:d3:9d:39:cd:b3:45: 71:9e:ab:94:db:a9:8e:de:04:bd:56:9d:31:71:7f:bf:e7:a4: 4b:e0:86:64:9f:c7:fa:c5:96:1d:5d:8f:ea:ff:a2:b2:62:45: e3:d4:00:49:88:ac:0f:90:ba:a6:18:db:64:dc:81:5a:1a:b9: d9:52:14:f3:1d:0d:af:6f:84:a4:14:31:32:33:6d:36:f4:11: 1a:ac:6a:e4:b3:15:8c:68:a9:83:30:cf:22:7b:61:d7:ec:b2: 7d:1e:d0:86 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYpgS/II3yG2ckPVv6NJiKE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5 NjcyNzUwHhcNMjMwOTA0MTMwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDA2NzA1OWQ1ZGQyYjVlMzllNDE0MjhmZWZjMjZkMmZiNzExYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp72gfmCbIahq8dJ9lqJnXjG4XnS IRhyB4oQRn3kKuZOU9VbZttkPIcMH0kLpTtnql5awywtOoh6O+Ls0NcfTBscepM/ Ra4AGq4Xf+4lBedrt9j8THda6fRFrvCoGxMkgid0XHU3WURKAyuZgKy065uY5gxE B0XXh9N/JR2qy/Ds/2E+veC8QgjAqjC5/FT0OwVBPWVCbGcMA4/yxajgde7gwPTq KKcjL5f2VcSsa7VorSEUNYNXUTUOkQ22UYDY0De/RGZfR2ZEsXo4muPojgTtOTcb Zm9ar3JB9Clzfis2/YjNe8pEuCngPofna3wf68YqtBLSxppjLhFrsoF1/QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMQGcFnV3SteOeQUKP78JtL7cRyRMB8GA1UdIwQY MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt ODNmY2QyMjU0ODJhLzEveEFad1dkWGRLMTQ1NUJRb192d20wdnR4SEpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKPBOsK5Maij8a8ILFOA sn9FKMmiA5+OjRTGiHrQweew5E/XnUUqrcCY+paHM6PWIW13fOVOOLG2wo87PJDK WKnhjl5I5Tu0koazqjodA6yHOGasKq9pws7aUuWCgF9OQnFnHgJTIgwCVkni6Jgf V64OtypodmX5cKDgzqragNpyWggvvarOP5Og+EhVTKL7Xf0/x3l9sJyIJprPVNOd Oc2zRXGeq5TbqY7eBL1WnTFxf7/npEvghmSfx/rFlh1dj+r/orJiRePUAEmIrA+Q uqYY22TcgVoaudlSFPMdDa9vhKQUMTIzbTb0ERqsauSzFYxoqYMwzyJ7Ydfssn0e 0IY= -----END CERTIFICATE-----Generated at Wed Dec 24 13:38:44 2025 by rpki-client