This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/D1hm1nNr4H3OkahIGx1O4QlY4-Y.roa File: D1hm1nNr4H3OkahIGx1O4QlY4-Y.roa (raw, json) Hash identifier: 3v9cm0M/c+9RDIjLsBD+s+knvJFOFTbEfBnoPk8EvT0= Subject key identifier: 0F:58:66:D6:73:6B:E0:7D:CE:91:A8:48:1B:1D:4E:E1:09:58:E3:E6 Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018FA55B698D378F54C1C83F3C1A74A31468 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/D1hm1nNr4H3OkahIGx1O4QlY4-Y.roa Signing time: Thu 23 May 2024 12:09:42 +0000 ROA not before: Thu 23 May 2024 12:09:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:a5:5b:69:8d:37:8f:54:c1:c8:3f:3c:1a:74:a3:14:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 23 12:09:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=0f5866d6736be07dce91a8481b1d4ee10958e3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:83:40:fb:fb:6d:d3:12:d3:b7:27:cb:c7: 44:df:ef:61:12:ab:36:7d:7a:9d:b7:ec:e6:40:7c: 9d:34:1a:f9:3c:af:7c:d1:81:4d:78:62:9a:62:cc: ee:93:11:e3:31:10:9c:5c:45:ef:72:8b:27:71:2e: 64:ad:68:fb:42:82:54:a7:21:59:a0:36:8e:34:39: b9:8c:c7:3c:18:33:cb:bd:ac:bd:10:d7:9c:99:d8: 22:d9:30:32:89:c9:d4:ca:3a:e2:9c:25:f9:36:b1: fd:1e:70:b0:36:30:e9:00:38:55:6e:d8:3a:a4:0c: 1e:d7:a4:3f:81:18:d4:0e:9b:7d:38:12:e6:4e:80: f3:10:d1:9a:f8:b1:93:84:8d:bd:9e:ee:be:cb:b2: 6d:51:b5:72:c5:8d:5e:15:87:cd:57:7a:9a:50:c2: 1b:67:e6:1e:d1:22:75:69:5d:a0:59:5e:51:6d:ef: 2c:c9:1f:d0:25:96:69:c6:88:34:95:9a:7c:5f:6a: b6:85:ac:38:89:12:69:9f:c1:bf:cd:a0:0d:62:dc: 31:8d:3e:5a:0a:a9:19:3a:a6:96:a5:08:5f:44:c7: f5:8d:92:8a:bd:ba:44:d6:60:97:47:72:7d:c7:0f: ba:91:fb:28:5c:36:9e:25:9f:94:73:5d:ed:99:14: 5d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:58:66:D6:73:6B:E0:7D:CE:91:A8:48:1B:1D:4E:E1:09:58:E3:E6 X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/D1hm1nNr4H3OkahIGx1O4QlY4-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 3a:d5:49:52:78:50:c6:f5:af:ad:14:75:87:45:55:35:5c:25: 9d:9f:a3:f2:f2:3b:a5:29:73:1a:d4:58:9c:da:f8:c5:0f:a0: 21:72:eb:e2:a2:3a:a1:7c:ba:42:4a:39:19:1b:db:0c:0d:3c: bd:a1:2a:d4:1a:c5:e6:96:64:7b:1c:54:eb:a3:13:d5:d0:55: d0:d6:fd:4e:80:85:95:94:2e:a6:3d:16:dd:b3:dc:86:ad:67: 31:3a:5a:41:12:95:f4:c4:36:84:e2:7d:23:af:61:82:fb:b7: ee:72:7a:5f:33:0a:35:fa:80:e2:c0:12:26:82:fe:76:00:33: 3a:d4:76:eb:f0:b5:fd:bc:a6:e5:b7:01:04:8a:e6:cc:03:ba: a8:77:59:56:23:83:81:da:31:ff:1f:8c:24:83:dc:de:0a:cd: 94:f7:31:02:c9:6b:41:6b:1d:b0:98:d3:b8:b8:4e:ad:b5:ab: 81:6e:64:87:12:74:8c:dd:1c:bc:90:d0:fd:af:ca:8a:a7:c3: 64:63:69:84:1f:bd:92:f9:29:aa:2d:90:5f:1d:51:d7:26:a8: 7c:21:fd:80:aa:9a:41:8f:32:ce:c9:e4:3f:ae:11:ca:3e:36: 3a:1d:0f:62:9d:dc:ae:54:ca:45:ba:0b:71:15:b3:0c:65:60: 70:23:f4:34 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY+lW2mNN49Uwcg/PBp0oxRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTIzMTIwOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjU4NjZkNjczNmJlMDdkY2U5MWE4NDgxYjFkNGVlMTA5NThlM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFeDQPv7bdMS07cny8dE3+9hEqs2 fXqdt+zmQHydNBr5PK980YFNeGKaYszukxHjMRCcXEXvcosncS5krWj7QoJUpyFZ oDaONDm5jMc8GDPLvay9ENecmdgi2TAyicnUyjrinCX5NrH9HnCwNjDpADhVbtg6 pAwe16Q/gRjUDpt9OBLmToDzENGa+LGThI29nu6+y7JtUbVyxY1eFYfNV3qaUMIb Z+Ye0SJ1aV2gWV5Rbe8syR/QJZZpxog0lZp8X2q2haw4iRJpn8G/zaANYtwxjT5a CqkZOqaWpQhfRMf1jZKKvbpE1mCXR3J9xw+6kfsoXDaeJZ+Uc13tmRRdIwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA9YZtZza+B9zpGoSBsdTuEJWOPmMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvRDFobTFuTnI0SDNPa2FoSUd4MU80UWxZNC1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADrVSVJ4UMb1r60UdYdF VTVcJZ2fo/LyO6UpcxrUWJza+MUPoCFy6+KiOqF8ukJKORkb2wwNPL2hKtQaxeaW ZHscVOujE9XQVdDW/U6AhZWULqY9Ft2z3IatZzE6WkESlfTENoTifSOvYYL7t+5y el8zCjX6gOLAEiaC/nYAMzrUduvwtf28puW3AQSK5swDuqh3WVYjg4HaMf8fjCSD 3N4KzZT3MQLJa0FrHbCY07i4Tq21q4FuZIcSdIzdHLyQ0P2vyoqnw2RjaYQfvZL5 KaotkF8dUdcmqHwh/YCqmkGPMs7J5D+uEco+NjodD2Kd3K5UykW6C3EVswxlYHAj 9DQ= -----END CERTIFICATE-----Generated at Sun Dec 21 12:00:50 2025 by rpki-client