This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KYBCvjxWWo44GWxPRlIaknJ7Lq8.roa File: KYBCvjxWWo44GWxPRlIaknJ7Lq8.roa (raw, json) Hash identifier: TuxgIQCzERW+xu657m9tDnIDgWClLkecqtZ8OMclHVY= Subject key identifier: 29:80:42:BE:3C:56:5A:8E:38:19:6C:4F:46:52:1A:92:72:7B:2E:AF Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F17B86BD8419AF63C0D7521C81F0A493A Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KYBCvjxWWo44GWxPRlIaknJ7Lq8.roa Signing time: Fri 26 Apr 2024 00:05:13 +0000 ROA not before: Fri 26 Apr 2024 00:05:13 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128 2001:67c:64:ffff:0:18f:17b7:babc/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:17:b8:6b:d8:41:9a:f6:3c:0d:75:21:c8:1f:0a:49:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: Apr 26 00:05:13 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=298042be3c565a8e38196c4f46521a92727b2eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:fc:3a:96:84:33:07:a5:75:fd:f3:22:b4: 00:58:ed:05:6e:17:4f:58:18:40:bf:0c:5c:22:da: 29:cc:fe:f6:2d:3f:5f:88:07:c1:c0:ad:58:5a:10: 53:26:3f:96:10:0e:54:c5:16:27:27:9f:f0:1b:08: 30:00:a9:62:84:7b:81:0a:96:5b:5f:c6:c6:8e:8f: d9:f7:eb:b7:0a:80:79:f8:50:e1:b6:de:13:ee:c5: 1e:17:03:18:d0:e7:49:b0:e8:7e:b2:0b:a9:5d:a0: 88:7f:d6:45:88:a7:b9:6d:af:58:84:a7:dc:9e:25: 42:7c:ea:96:21:b1:05:bf:99:ed:f1:d1:e6:c8:7b: 38:4f:80:68:b0:78:35:83:e2:64:30:77:c8:a8:db: f3:9c:ea:8e:2f:a2:3d:65:fe:8a:95:2e:44:3b:68: 19:fe:e7:22:35:46:2f:ca:2c:da:b8:7e:97:de:ea: 7d:3d:6c:1e:e2:23:b9:4a:87:d0:13:00:80:1b:6e: 76:8f:5c:0c:a6:b7:c4:f8:ec:73:ad:08:ac:32:b4: a6:14:1e:a2:6e:65:6b:51:a1:b0:f2:68:cd:fe:b3: 39:22:ab:31:d4:57:58:88:38:49:a6:bd:5e:60:53: f7:32:9a:a6:dc:42:70:9a:12:fa:14:9d:b7:4b:2a: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:80:42:BE:3C:56:5A:8E:38:19:6C:4F:46:52:1A:92:72:7B:2E:AF X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/KYBCvjxWWo44GWxPRlIaknJ7Lq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64:ffff:0:18f:543:9e41/128 2001:67c:64:ffff:0:18f:17b7:babc/128 Signature Algorithm: sha256WithRSAEncryption c7:24:42:47:35:ee:4e:18:6f:48:60:11:0a:5d:95:42:cd:7d: 3f:84:13:fe:7b:0f:d2:6a:bc:0a:f0:17:08:60:33:14:ae:c3: 94:97:50:bd:3e:ce:32:da:12:ae:c9:a8:d4:72:99:d3:3a:e6: ea:3f:be:69:c1:81:4d:4a:21:9d:e4:1a:d2:d1:7b:42:8a:54: 27:90:c3:44:de:ca:05:a1:65:70:e3:50:0f:4a:63:04:e1:2d: 47:7a:6a:46:14:c5:e8:9b:e4:75:23:84:6e:f0:fe:39:6e:42: d5:47:49:be:ea:77:98:54:a4:58:20:f0:27:5e:f4:1b:0c:e6: 9b:48:66:2d:73:84:df:b3:c2:5f:a7:5c:19:04:1f:2c:b3:b8: b7:99:98:0f:cf:37:5c:f5:c7:1e:b1:9c:ce:a0:db:7a:84:b9: e0:7a:13:14:4a:ca:06:6a:5a:45:14:26:2d:5b:3d:d9:d8:62: 99:ea:f1:56:0d:5c:0f:2a:46:8e:f4:60:fd:4a:02:d4:31:a8: 8b:ce:49:5c:35:97:92:01:34:28:70:c0:e2:92:61:87:d9:aa: d1:53:fe:70:ea:cc:2d:11:1c:79:0e:cc:b2:a3:46:e9:99:8a: 59:a4:a0:80:62:69:a3:02:e6:0d:5d:c2:98:9d:23:2c:0f:9b: ac:87:89:ea -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAY8XuGvYQZr2PA11IcgfCkk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNDI2MDAwNTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTgwNDJiZTNjNTY1YThlMzgxOTZjNGY0NjUyMWE5MjcyN2IyZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/T8OpaEMweldf3zIrQAWO0FbhdP WBhAvwxcItopzP72LT9fiAfBwK1YWhBTJj+WEA5UxRYnJ5/wGwgwAKlihHuBCpZb X8bGjo/Z9+u3CoB5+FDhtt4T7sUeFwMY0OdJsOh+sgupXaCIf9ZFiKe5ba9YhKfc niVCfOqWIbEFv5nt8dHmyHs4T4BosHg1g+JkMHfIqNvznOqOL6I9Zf6KlS5EO2gZ /uciNUYvyizauH6X3up9PWwe4iO5SofQEwCAG252j1wMprfE+OxzrQisMrSmFB6i bmVrUaGw8mjN/rM5Iqsx1FdYiDhJpr1eYFP3Mpqm3EJwmhL6FJ23SyoK7QIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFCmAQr48VlqOOBlsT0ZSGpJyey6vMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvS1lCQ3ZqeFdXbzQ0R1d4UFJsSWFrbko3THE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAMBAIAATAGAwQDwQAYMCwE AgACMCYDEQAgAQZ8AGT//wAAAY8FQ55BAxEAIAEGfABk//8AAAGPF7e6vDANBgkq hkiG9w0BAQsFAAOCAQEAxyRCRzXuThhvSGARCl2VQs19P4QT/nsP0mq8CvAXCGAz FK7DlJdQvT7OMtoSrsmo1HKZ0zrm6j++acGBTUohneQa0tF7QopUJ5DDRN7KBaFl cONQD0pjBOEtR3pqRhTF6JvkdSOEbvD+OW5C1UdJvup3mFSkWCDwJ170Gwzmm0hm LXOE37PCX6dcGQQfLLO4t5mYD883XPXHHrGczqDbeoS54HoTFErKBmpaRRQmLVs9 2dhimerxVg1cDypGjvRg/UoC1DGoi85JXDWXkgE0KHDA4pJhh9mq0VP+cOrMLREc eQ7MsqNG6ZmKWaSggGJpowLmDV3CmJ0jLA+brIeJ6g== -----END CERTIFICATE-----Generated at Sun Dec 21 11:24:46 2025 by rpki-client