This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CmSppJH6Jsk5DCl6OVmcPEr9lTI.roa File: CmSppJH6Jsk5DCl6OVmcPEr9lTI.roa (raw, json) Hash identifier: 66ZbFQLNO75hxBqfkWYEaClBQsyhHl13rDlsszCztao= Subject key identifier: 0A:64:A9:A4:91:FA:26:C9:39:0C:29:7A:39:59:9C:3C:4A:FD:95:32 Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F3894089C2940489E59A8C43E3B255436 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CmSppJH6Jsk5DCl6OVmcPEr9lTI.roa Signing time: Thu 02 May 2024 09:12:56 +0000 ROA not before: Thu 02 May 2024 09:12:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:38:94:08:9c:29:40:48:9e:59:a8:c4:3e:3b:25:54:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 2 09:12:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=0a64a9a491fa26c9390c297a39599c3c4afd9532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:cd:b7:9c:cd:25:a0:0e:a7:9f:51:69:1b: 53:c8:dd:20:c2:11:74:77:55:6d:5f:fd:6d:d2:4c: c1:24:9c:ae:26:a7:a3:10:0d:f7:8e:a0:20:62:f6: a3:3a:b8:88:18:53:5a:a9:1c:b4:06:42:52:5e:01: 75:5d:24:5b:68:3e:cf:e9:05:02:a6:50:cd:f2:07: 2d:2a:14:07:4e:07:0a:76:61:b4:e3:ff:34:56:9a: d8:3e:3c:9b:20:3d:59:8b:0a:c8:ef:43:af:15:2f: 0f:6b:7e:08:74:da:a5:79:22:03:7e:61:74:ed:ba: 37:93:4b:f9:f5:4a:53:3f:a7:2f:91:8a:35:a6:f3: 93:03:25:6c:84:24:71:c1:66:37:d1:d7:ec:fc:be: f3:18:88:5f:91:87:b5:40:40:b7:97:15:ed:15:f0: 80:65:94:a7:c6:36:3b:ea:07:81:6c:dc:44:be:dc: bd:03:f6:ff:09:5a:2e:6e:80:29:3f:b6:ba:de:f9: 20:74:f7:4b:cc:15:2b:47:11:09:b0:79:88:a8:95: 0d:4f:9a:5f:af:a7:b2:11:9b:46:6b:00:6d:61:a1: 65:cd:48:77:86:44:29:36:61:9e:33:7c:2c:18:7c: e9:c0:39:5f:ff:be:78:db:aa:1e:a0:d8:44:a4:0f: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:A9:A4:91:FA:26:C9:39:0C:29:7A:39:59:9C:3C:4A:FD:95:32 X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CmSppJH6Jsk5DCl6OVmcPEr9lTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 35:13:b1:cd:f1:bc:63:e1:ba:e6:9f:c0:a7:08:fa:06:18:28: d2:6d:fa:59:28:46:cd:ab:92:df:50:9c:13:ea:46:72:2e:98: 72:33:5a:fb:d5:ec:06:88:4e:f2:75:f8:f2:4f:77:f3:3c:91: 4b:a3:21:7a:c2:fc:16:32:0f:5c:91:c5:26:77:c2:58:af:68: ef:93:d1:07:18:74:4e:c3:53:c6:7b:b3:a4:8a:ee:57:39:8e: 2d:b1:d9:42:4b:39:c0:82:72:ce:c8:8f:b1:6b:45:70:28:5f: 44:32:e5:a5:58:01:37:c3:87:e1:c7:59:c0:f4:91:23:41:93: d0:cb:98:d1:c5:de:54:9b:e3:ea:63:95:e2:2e:36:85:54:43: b4:c6:49:df:47:c1:6c:45:15:fc:d7:a3:ca:1b:74:df:f8:30: 91:5d:3e:1d:5b:7f:51:df:ba:c6:d4:ae:d5:fa:f7:19:a3:c9: 53:49:37:c7:12:20:a0:fe:cb:d6:ac:71:87:b1:1b:3a:91:96: 96:1f:3a:79:34:1a:34:ca:00:6a:69:13:99:d4:7d:c7:1f:a9: 09:02:25:b5:46:1c:de:e2:f3:aa:35:2c:b9:32:8c:84:5b:3d: 45:ad:24:85:c0:1a:25:96:11:d9:cc:0f:36:48:77:f1:7a:f5: 2f:63:c0:e8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY84lAicKUBInlmoxD47JVQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTAyMDkxMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTY0YTlhNDkxZmEyNmM5MzkwYzI5N2EzOTU5OWMzYzRhZmQ5NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V7Nt5zNJaAOp59RaRtTyN0gwhF0 d1VtX/1t0kzBJJyuJqejEA33jqAgYvajOriIGFNaqRy0BkJSXgF1XSRbaD7P6QUC plDN8gctKhQHTgcKdmG04/80VprYPjybID1ZiwrI70OvFS8Pa34IdNqleSIDfmF0 7bo3k0v59UpTP6cvkYo1pvOTAyVshCRxwWY30dfs/L7zGIhfkYe1QEC3lxXtFfCA ZZSnxjY76geBbNxEvty9A/b/CVouboApP7a63vkgdPdLzBUrRxEJsHmIqJUNT5pf r6eyEZtGawBtYaFlzUh3hkQpNmGeM3wsGHzpwDlf/75426oeoNhEpA+nXwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFApkqaSR+ibJOQwpejlZnDxK/ZUyMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvQ21TcHBKSDZKc2s1RENsNk9WbWNQRXI5bFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADUTsc3xvGPhuuafwKcI +gYYKNJt+lkoRs2rkt9QnBPqRnIumHIzWvvV7AaITvJ1+PJPd/M8kUujIXrC/BYy D1yRxSZ3wlivaO+T0QcYdE7DU8Z7s6SK7lc5ji2x2UJLOcCCcs7Ij7FrRXAoX0Qy 5aVYATfDh+HHWcD0kSNBk9DLmNHF3lSb4+pjleIuNoVUQ7TGSd9HwWxFFfzXo8ob dN/4MJFdPh1bf1HfusbUrtX69xmjyVNJN8cSIKD+y9ascYexGzqRlpYfOnk0GjTK AGppE5nUfccfqQkCJbVGHN7i86o1LLkyjIRbPUWtJIXAGiWWEdnMDzZId/F69S9j wOg= -----END CERTIFICATE-----Generated at Thu Dec 18 09:58:59 2025 by rpki-client