This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/iPuIXdXgC2YOYBVRgLjbbbyVQTo.roa File: iPuIXdXgC2YOYBVRgLjbbbyVQTo.roa (raw, json) Hash identifier: i+gpbckxFxkr3f81yMe26++YR/RPm9hs+qH7x2x9cvQ= Subject key identifier: 88:FB:88:5D:D5:E0:0B:66:0E:60:15:51:80:B8:DB:6D:BC:95:41:3A Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F570C538A985F652D46E84D984A0A0C02 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/iPuIXdXgC2YOYBVRgLjbbbyVQTo.roa Signing time: Wed 08 May 2024 07:12:56 +0000 ROA not before: Wed 08 May 2024 07:12:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:57:0c:53:8a:98:5f:65:2d:46:e8:4d:98:4a:0a:0c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 8 07:12:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=88fb885dd5e00b660e60155180b8db6dbc95413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:85:47:ba:e3:fe:51:6d:a4:00:51:d5:f2: 11:48:3e:b8:0b:4c:b0:d9:21:dc:25:f7:54:59:a6: 19:76:27:b4:89:80:3d:a4:7a:1f:5e:e8:6a:a4:dd: 74:85:f5:96:98:53:bf:df:20:9c:16:aa:31:5b:15: ed:4b:73:cd:c2:9f:df:d0:d4:d3:76:8a:9e:ad:9d: c4:89:8c:ee:b1:86:69:2d:6e:e4:98:3a:6a:4d:eb: 83:d1:ba:83:fb:2e:87:bf:ba:bf:b8:01:7b:9c:da: ae:db:26:b3:41:1a:33:ea:e4:3c:1f:18:05:b2:8f: 39:9c:8e:45:33:47:26:ef:09:26:58:18:d1:7a:ec: 09:21:db:8f:cc:33:7c:70:86:32:b1:66:0b:f5:ef: 77:47:54:1e:6c:58:22:a7:dc:28:a0:9c:ea:d4:d7: 58:82:e4:8b:4c:5e:db:1e:40:80:f4:de:8f:18:68: bb:c7:d4:40:80:42:a4:b9:83:b8:85:38:12:85:fe: d0:ec:97:07:90:5e:17:b1:7f:a7:0a:b3:64:27:fc: ac:71:8e:56:d0:fa:18:e9:10:de:e2:7b:25:3e:4d: c0:66:60:ee:8f:40:1a:e7:9c:f8:bd:7d:7b:5c:a4: 23:31:6b:d6:64:b2:1f:ab:44:32:26:ca:a8:fe:ed: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FB:88:5D:D5:E0:0B:66:0E:60:15:51:80:B8:DB:6D:BC:95:41:3A X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/iPuIXdXgC2YOYBVRgLjbbbyVQTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 65:4e:24:74:3f:2e:d5:0c:ae:ce:ca:a4:1a:3c:59:3d:c6:ff: 62:3f:b6:e4:2e:c9:d8:5b:0b:67:e2:66:eb:35:4d:d6:93:a6: 74:ff:44:78:2e:87:87:06:fe:b4:43:06:bd:75:6b:7d:03:62: f0:a3:1e:07:55:4c:21:d6:de:74:43:41:45:5b:d5:40:54:45: 69:a2:d8:c5:7d:c9:f0:2f:af:cb:1a:28:09:75:4e:27:07:f2: 41:07:19:c6:68:6e:68:14:7e:62:59:25:3b:c3:9f:c5:a2:dd: 3f:9e:6a:7a:2f:f2:1d:32:d2:bf:40:c9:8e:69:62:24:96:7c: 98:06:05:73:2d:36:24:75:a3:2d:d4:db:17:2c:d4:2c:cb:33: d6:15:af:0a:2c:fe:31:d4:dc:dc:01:cd:c2:51:15:46:3e:53: 43:8d:44:66:40:d1:12:0a:f3:ed:c4:46:23:ba:12:6b:77:f3: 80:14:0e:d0:9c:76:89:fe:80:ab:24:c2:26:ec:ac:e7:cb:9a: 92:0a:05:38:b0:33:64:1b:8d:6c:ec:0e:b5:7c:e2:5a:79:81: b3:8e:86:f1:96:f8:3f:e4:a4:07:83:e1:df:d2:be:24:11:65: 6f:1d:f1:d8:3f:4e:e1:f9:31:e1:a6:04:43:1a:93:d7:6b:cc: d3:8b:af:8b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY9XDFOKmF9lLUboTZhKCgwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTA4MDcxMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGZiODg1ZGQ1ZTAwYjY2MGU2MDE1NTE4MGI4ZGI2ZGJjOTU0MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rmFR7rj/lFtpABR1fIRSD64C0yw 2SHcJfdUWaYZdie0iYA9pHofXuhqpN10hfWWmFO/3yCcFqoxWxXtS3PNwp/f0NTT doqerZ3EiYzusYZpLW7kmDpqTeuD0bqD+y6Hv7q/uAF7nNqu2yazQRoz6uQ8HxgF so85nI5FM0cm7wkmWBjReuwJIduPzDN8cIYysWYL9e93R1QebFgip9wooJzq1NdY guSLTF7bHkCA9N6PGGi7x9RAgEKkuYO4hTgShf7Q7JcHkF4XsX+nCrNkJ/yscY5W 0PoY6RDe4nslPk3AZmDuj0Aa55z4vX17XKQjMWvWZLIfq0QyJsqo/u11IwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIj7iF3V4AtmDmAVUYC42228lUE6MB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvaVB1SVhkWGdDMllPWUJWUmdMamJiYnlWUVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGVOJHQ/LtUMrs7KpBo8 WT3G/2I/tuQuydhbC2fiZus1TdaTpnT/RHguh4cG/rRDBr11a30DYvCjHgdVTCHW 3nRDQUVb1UBURWmi2MV9yfAvr8saKAl1TicH8kEHGcZobmgUfmJZJTvDn8Wi3T+e anov8h0y0r9AyY5pYiSWfJgGBXMtNiR1oy3U2xcs1CzLM9YVrwos/jHU3NwBzcJR FUY+U0ONRGZA0RIK8+3ERiO6Emt384AUDtCcdon+gKskwibsrOfLmpIKBTiwM2Qb jWzsDrV84lp5gbOOhvGW+D/kpAeD4d/SviQRZW8d8dg/TuH5MeGmBEMak9drzNOL r4s= -----END CERTIFICATE-----Generated at Thu Dec 18 05:43:58 2025 by rpki-client