This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4KNz6oQNXqUBbTS9FSfB64O5kkk.roa File: 4KNz6oQNXqUBbTS9FSfB64O5kkk.roa (raw, json) Hash identifier: MHdNwB71WU/YhfVd/o+0rb3mr3QuRpclWe5+P1Ccamg= Subject key identifier: E0:A3:73:EA:84:0D:5E:A5:01:6D:34:BD:15:27:C1:EB:83:B9:92:49 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C7D3F8DC629B321560A2C4EACB614AD9A Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4KNz6oQNXqUBbTS9FSfB64O5kkk.roa Signing time: Mon 18 Dec 2023 14:06:06 +0000 ROA not before: Mon 18 Dec 2023 14:06:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18c:7d3e:b04c/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:7d:3f:8d:c6:29:b3:21:56:0a:2c:4e:ac:b6:14:ad:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 18 14:06:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=e0a373ea840d5ea5016d34bd1527c1eb83b99249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:16:70:d7:0d:6c:93:51:ce:b3:86:6f:4f: 9b:c8:22:21:f9:3d:ab:b8:7a:ea:36:f2:78:18:ab: 58:d9:b1:b9:40:ad:72:f4:02:7b:5a:aa:5e:9e:a6: f6:76:a8:b8:8d:d5:a3:51:e6:8d:e5:4f:d4:ed:e8: f7:e1:a4:a2:6f:cf:31:db:42:08:f3:3d:f1:ad:21: 99:77:ce:b0:b2:0e:43:83:04:96:e6:d8:1e:52:4d: 39:68:96:88:28:fe:a7:47:cc:fb:4b:12:ec:d7:4d: cf:56:b8:27:3f:59:e9:2c:ab:a4:6e:53:01:b4:c8: 3b:d8:35:84:e8:3a:44:3a:78:1a:9d:75:07:8a:93: 04:f4:73:36:7e:73:ff:a4:3c:c8:d1:4e:55:9c:11: ec:27:96:dd:5b:71:b9:a6:98:0e:97:e9:c2:3c:e0: ba:39:0b:b4:3a:a7:72:c7:9e:71:e1:88:b0:1c:d8: 9f:0c:57:03:f6:2d:67:09:ad:cd:65:9c:a3:7a:ac: b4:ad:3d:b5:6c:81:12:bc:d9:88:81:89:e2:b1:fc: 50:58:f2:5d:94:41:30:4d:b2:58:69:51:a0:ba:00: 2d:79:30:55:3d:d0:ac:7b:d9:cc:b6:de:95:d6:74: 3a:44:d3:4d:92:cb:72:00:0e:fd:47:50:6c:16:24: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A3:73:EA:84:0D:5E:A5:01:6D:34:BD:15:27:C1:EB:83:B9:92:49 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4KNz6oQNXqUBbTS9FSfB64O5kkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption a7:5e:32:e7:ca:aa:29:d2:68:f7:82:63:83:70:09:c6:ad:cb: 41:ee:64:87:1f:f1:dc:60:0a:04:68:e5:c0:dc:cc:3b:06:d8: ca:6c:3b:7d:cc:ef:94:4c:57:d3:72:3f:88:ca:59:da:55:11: 20:a5:06:24:a4:ee:35:72:a3:7c:f6:fd:79:82:10:3d:05:d5: d3:16:a6:07:53:31:a9:2d:b7:68:e2:87:6b:cd:1d:67:64:70: c1:b5:7c:37:0a:e6:04:58:a9:75:02:cc:a7:ea:31:b8:c5:ae: 5d:da:ce:72:01:fe:16:e6:57:54:e0:f1:8a:95:e9:aa:1a:b4: 9a:e9:e8:f9:b4:b0:ff:56:1e:68:7b:4f:04:b0:f4:74:2e:3e: e6:63:cd:1e:24:72:9d:9c:61:7e:68:ab:d3:88:9e:39:db:a6: 98:62:e6:b0:ce:23:8f:0f:e7:66:a6:df:68:27:16:db:26:52: 73:39:2e:97:00:5b:c7:94:e5:5d:f4:b8:f4:34:5f:64:0a:69: 65:d4:ef:a7:95:2a:21:2a:4d:3c:a7:53:a6:0f:38:16:2e:df: a6:e3:e8:7e:9b:d8:cc:e5:ce:b0:6d:43:6c:0e:ed:27:97:9d: 27:e8:9b:09:14:5c:4c:80:7f:4c:8a:79:c9:a4:82:37:7c:2d: bd:c4:ac:8e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYx9P43GKbMhVgosTqy2FK2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjE4MTQwNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGEzNzNlYTg0MGQ1ZWE1MDE2ZDM0YmQxNTI3YzFlYjgzYjk5MjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrcWcNcNbJNRzrOGb0+byCIh+T2r uHrqNvJ4GKtY2bG5QK1y9AJ7Wqpenqb2dqi4jdWjUeaN5U/U7ej34aSib88x20II 8z3xrSGZd86wsg5DgwSW5tgeUk05aJaIKP6nR8z7SxLs103PVrgnP1npLKukblMB tMg72DWE6DpEOnganXUHipME9HM2fnP/pDzI0U5VnBHsJ5bdW3G5ppgOl+nCPOC6 OQu0Oqdyx55x4YiwHNifDFcD9i1nCa3NZZyjeqy0rT21bIESvNmIgYnisfxQWPJd lEEwTbJYaVGgugAteTBVPdCse9nMtt6V1nQ6RNNNkstyAA79R1BsFiTrlwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOCjc+qEDV6lAW00vRUnweuDuZJJMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvNEtOejZvUU5YcVVCYlRTOUZTZkI2NE81a2trLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKdeMufKqinSaPeCY4Nw Ccaty0HuZIcf8dxgCgRo5cDczDsG2MpsO33M75RMV9NyP4jKWdpVESClBiSk7jVy o3z2/XmCED0F1dMWpgdTMaktt2jih2vNHWdkcMG1fDcK5gRYqXUCzKfqMbjFrl3a znIB/hbmV1Tg8YqV6aoatJrp6Pm0sP9WHmh7TwSw9HQuPuZjzR4kcp2cYX5oq9OI njnbpphi5rDOI48P52am32gnFtsmUnM5LpcAW8eU5V30uPQ0X2QKaWXU76eVKiEq TTynU6YPOBYu36bj6H6b2MzlzrBtQ2wO7SeXnSfomwkUXEyAf0yKecmkgjd8Lb3E rI4= -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:47 2025 by rpki-client