This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QzNbQGa7gOmduv1m4AjImexjKdY.roa File: QzNbQGa7gOmduv1m4AjImexjKdY.roa (raw, json) Hash identifier: 6jp5t4g9BKxK57tykSik9uF6IUD4+g1WzpE33jyHdss= Subject key identifier: 43:33:5B:40:66:BB:80:E9:9D:BA:FD:66:E0:08:C8:99:EC:63:29:D6 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C7AB846A2F8CF99429DBD41691CA62105 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QzNbQGa7gOmduv1m4AjImexjKdY.roa Signing time: Mon 18 Dec 2023 02:19:06 +0000 ROA not before: Mon 18 Dec 2023 02:19:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:7a:b8:46:a2:f8:cf:99:42:9d:bd:41:69:1c:a6:21:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Dec 18 02:19:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=43335b4066bb80e99dbafd66e008c899ec6329d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:1f:dd:c2:e9:1e:4c:98:d4:dc:7d:63:63: bf:36:53:f2:e2:79:65:98:44:27:00:f7:44:58:d2: 06:5e:12:18:af:c4:84:04:7c:93:e8:41:9d:40:9f: b2:ef:4a:dc:d5:74:6b:16:aa:24:37:3c:c4:b6:13: 87:4a:bd:59:45:8c:d4:42:90:ac:f4:70:36:53:3f: 9f:a9:07:65:2b:b0:2d:bc:63:ee:63:d5:f7:27:ab: f6:cb:67:0d:34:0d:3b:3e:a1:0c:b9:15:f7:51:3d: 61:7e:8c:e2:2b:b2:b9:b8:18:21:cc:ff:a9:fe:d8: 23:5d:32:8a:3e:73:be:cf:0e:38:50:5e:2b:57:d3: 84:84:a2:df:4b:d4:59:84:a2:37:0d:9f:d4:42:b6: f9:47:7c:c0:4d:6e:3c:6c:a9:23:58:97:ed:9d:a4: dd:c5:92:9c:07:63:c0:03:75:29:ac:64:73:fa:d9: b1:65:4f:e6:4c:8a:18:41:ac:9e:0f:54:3a:3c:4b: 9d:a1:46:3a:63:84:e4:4f:83:b2:54:15:bb:fb:91: 99:a9:ae:fe:ec:6d:e4:4f:f6:14:71:45:78:a7:c9: 07:e1:38:f1:13:06:18:4f:5f:2c:37:3b:a9:52:14: 8d:54:49:77:8a:95:f2:99:e1:68:8b:f8:3a:03:5d: 44:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:33:5B:40:66:BB:80:E9:9D:BA:FD:66:E0:08:C8:99:EC:63:29:D6 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QzNbQGa7gOmduv1m4AjImexjKdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 5a:fc:4c:3a:d4:cc:84:68:f4:e8:e7:c6:3d:e6:29:7d:4c:ec: 4f:13:99:8b:78:81:2a:17:1c:75:c0:8e:15:ce:ee:ad:07:22: 6f:39:8c:48:c4:28:c7:7b:7d:01:5d:81:76:ac:c5:3e:49:cc: 3c:5a:6c:2f:2e:28:8f:42:4f:1c:11:d9:c4:a1:df:d0:68:ee: 25:bf:31:73:7c:94:a5:21:12:60:00:2b:70:a2:24:e0:ed:7c: 7a:02:07:26:c6:92:02:53:5e:61:50:c8:db:7d:4d:9d:0b:8e: 4c:05:ab:57:c8:69:4c:88:46:3c:2a:f2:54:78:1b:bc:d0:d9: 5e:71:54:8d:ca:fb:8c:89:d4:04:f3:47:ce:aa:fe:36:44:c1: 68:f9:12:f0:c5:e3:d7:9c:71:6d:1a:e1:ce:1f:72:05:5c:44: ff:62:ab:14:0b:dc:21:f0:50:c3:7d:10:0c:32:fe:b8:fd:27: 5a:2c:51:dd:5d:29:43:a9:ed:44:a4:5b:29:56:db:64:c9:74: f2:18:b4:26:45:f9:6f:d0:67:07:97:f6:c5:41:18:ab:5c:d3: e2:9b:4a:be:af:85:d5:cf:6f:d4:29:6c:f3:ac:09:2e:60:b7: 23:d7:f0:88:3d:e3:cf:25:7a:8b:c3:af:de:cb:31:92:4f:d5: 8d:45:c2:c7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYx6uEai+M+ZQp29QWkcpiEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMjE4MDIxOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzMzNWI0MDY2YmI4MGU5OWRiYWZkNjZlMDA4Yzg5OWVjNjMyOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud0f3cLpHkyY1Nx9Y2O/NlPy4nll mEQnAPdEWNIGXhIYr8SEBHyT6EGdQJ+y70rc1XRrFqokNzzEthOHSr1ZRYzUQpCs 9HA2Uz+fqQdlK7AtvGPuY9X3J6v2y2cNNA07PqEMuRX3UT1hfoziK7K5uBghzP+p /tgjXTKKPnO+zw44UF4rV9OEhKLfS9RZhKI3DZ/UQrb5R3zATW48bKkjWJftnaTd xZKcB2PAA3UprGRz+tmxZU/mTIoYQayeD1Q6PEudoUY6Y4TkT4OyVBW7+5GZqa7+ 7G3kT/YUcUV4p8kH4TjxEwYYT18sNzupUhSNVEl3ipXymeFoi/g6A11EAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEMzW0Bmu4Dpnbr9ZuAIyJnsYynWMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvUXpOYlFHYTdnT21kdXYxbTRBakltZXhqS2RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFr8TDrUzIRo9Ojnxj3m KX1M7E8TmYt4gSoXHHXAjhXO7q0HIm85jEjEKMd7fQFdgXasxT5JzDxabC8uKI9C TxwR2cSh39Bo7iW/MXN8lKUhEmAAK3CiJODtfHoCBybGkgJTXmFQyNt9TZ0LjkwF q1fIaUyIRjwq8lR4G7zQ2V5xVI3K+4yJ1ATzR86q/jZEwWj5EvDF49eccW0a4c4f cgVcRP9iqxQL3CHwUMN9EAwy/rj9J1osUd1dKUOp7USkWylW22TJdPIYtCZF+W/Q ZweX9sVBGKtc0+KbSr6vhdXPb9QpbPOsCS5gtyPX8Ig9488leovDr97LMZJP1Y1F wsc= -----END CERTIFICATE-----Generated at Thu Dec 18 23:44:34 2025 by rpki-client