This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sNldtO9kk_bVCmnHINpfFPcJXXg.roa File: sNldtO9kk_bVCmnHINpfFPcJXXg.roa (raw, json) Hash identifier: HRwn8f5k/KmXFHgYZQz+dnNMdJTEOaqfDkKXG0aZ5RQ= Subject key identifier: B0:D9:5D:B4:EF:64:93:F6:D5:0A:69:C7:20:DA:5F:14:F7:09:5D:78 Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F49F57F3E9EB113BB3525084597E451E0 Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sNldtO9kk_bVCmnHINpfFPcJXXg.roa Signing time: Sun 05 May 2024 18:12:56 +0000 ROA not before: Sun 05 May 2024 18:12:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:49:f5:7f:3e:9e:b1:13:bb:35:25:08:45:97:e4:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 5 18:12:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=b0d95db4ef6493f6d50a69c720da5f14f7095d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:80:ee:7d:be:74:aa:13:fe:5f:9d:fc:d7: 54:41:5e:c8:33:0b:47:a1:f0:0d:a9:df:2d:39:a5: f7:a5:56:c5:2d:f9:5e:f4:c4:5d:4d:11:76:f0:44: fd:e4:85:ce:ad:45:bc:dd:a4:e5:7e:0e:2e:e6:d6: 80:c5:5d:83:cf:f6:16:ca:19:2a:0a:df:01:13:c4: 5c:3a:7c:9e:2d:de:4b:4e:ca:16:15:cd:7b:cf:21: 3f:72:ba:f9:79:42:af:ac:8c:af:4f:e7:0f:27:a4: fe:d7:ce:53:f4:3b:13:1a:48:07:f2:41:69:e0:e0: 6e:09:84:bb:41:aa:43:3d:2d:a3:08:20:25:2b:04: 0d:44:0a:53:68:82:9d:9b:a4:5b:cc:04:ff:7f:13: ad:68:a6:62:2b:bd:8b:9d:22:64:62:aa:c4:03:2a: 3d:0c:c4:f5:aa:02:96:a0:06:58:44:2c:d3:c5:a9: 3c:8d:8b:29:ea:fd:a5:0a:c4:ad:97:1e:5f:54:df: 32:19:de:d5:e4:e4:90:74:c2:f0:79:61:8d:a9:89: 10:cd:ed:dc:50:01:81:87:ba:4c:a0:6b:03:61:8c: 94:14:0e:ee:ae:44:78:f8:f8:9f:39:35:d1:e1:98: 90:a6:bf:50:94:4e:af:7a:e1:23:5f:03:61:4c:1a: 98:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D9:5D:B4:EF:64:93:F6:D5:0A:69:C7:20:DA:5F:14:F7:09:5D:78 X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sNldtO9kk_bVCmnHINpfFPcJXXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 55:67:3e:44:f9:d4:84:6a:f7:2d:5c:8b:ae:f8:e3:2c:29:0c: 80:20:09:dd:0f:15:3c:1e:c6:68:64:0a:d3:59:83:02:9d:56: 65:2c:3b:bd:6f:47:42:97:9f:4a:44:d1:ce:cf:b4:6f:60:73: ad:5b:4f:93:8b:bb:6b:ad:d1:71:56:d5:3a:4c:67:d2:9c:0b: 97:c8:10:51:fe:59:d2:55:54:a0:41:50:e9:ff:eb:3f:49:16: a0:b0:a4:8a:e3:1d:96:62:9c:48:9b:2b:e7:88:40:07:64:a7: ba:8b:b6:d7:ef:50:20:d9:52:3f:93:0e:e2:d9:a8:b1:8a:66: f4:9e:a0:0d:67:4e:83:66:bf:e1:f0:10:a3:5a:b3:50:5f:11: 14:ba:41:39:11:fa:ab:d3:5e:9b:b9:0f:94:3e:2d:78:6f:f6: 31:74:78:71:57:be:ef:5f:b1:5e:2c:9c:6c:15:b5:64:a8:27: 81:72:54:36:c2:df:61:81:34:f0:af:75:ea:0c:29:bb:ee:11: 30:18:88:68:61:28:14:3e:f5:8a:1c:16:ee:b6:10:ac:4d:27: fb:8c:ac:f7:59:01:5c:56:aa:20:1a:17:68:2f:cf:41:87:64: 6e:c3:cb:de:23:98:15:1c:a5:3a:1f:0b:aa:57:50:5a:e6:a3: 3f:03:7d:98 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY9J9X8+nrETuzUlCEWX5FHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTA1MTgxMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGQ5NWRiNGVmNjQ5M2Y2ZDUwYTY5YzcyMGRhNWYxNGY3MDk1ZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/6A7n2+dKoT/l+d/NdUQV7IMwtH ofANqd8tOaX3pVbFLfle9MRdTRF28ET95IXOrUW83aTlfg4u5taAxV2Dz/YWyhkq Ct8BE8RcOnyeLd5LTsoWFc17zyE/crr5eUKvrIyvT+cPJ6T+185T9DsTGkgH8kFp 4OBuCYS7QapDPS2jCCAlKwQNRApTaIKdm6RbzAT/fxOtaKZiK72LnSJkYqrEAyo9 DMT1qgKWoAZYRCzTxak8jYsp6v2lCsStlx5fVN8yGd7V5OSQdMLweWGNqYkQze3c UAGBh7pMoGsDYYyUFA7urkR4+PifOTXR4ZiQpr9QlE6veuEjXwNhTBqYvQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLDZXbTvZJP21QppxyDaXxT3CV14MB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvc05sZHRPOWtrX2JWQ21uSElOcGZGUGNKWFhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFVnPkT51IRq9y1ci674 4ywpDIAgCd0PFTwexmhkCtNZgwKdVmUsO71vR0KXn0pE0c7PtG9gc61bT5OLu2ut 0XFW1TpMZ9KcC5fIEFH+WdJVVKBBUOn/6z9JFqCwpIrjHZZinEibK+eIQAdkp7qL ttfvUCDZUj+TDuLZqLGKZvSeoA1nToNmv+HwEKNas1BfERS6QTkR+qvTXpu5D5Q+ LXhv9jF0eHFXvu9fsV4snGwVtWSoJ4FyVDbC32GBNPCvdeoMKbvuETAYiGhhKBQ+ 9YocFu62EKxNJ/uMrPdZAVxWqiAaF2gvz0GHZG7Dy94jmBUcpTofC6pXUFrmoz8D fZg= -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:40 2025 by rpki-client