This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_3ORxs09XR9Vp9snEAFBWJNzLBs.roa File: _3ORxs09XR9Vp9snEAFBWJNzLBs.roa (raw, json) Hash identifier: BU4TA1n7Z3eZkxO35MZ8uPvxAorHT/X7nwIq4BuNQNQ= Subject key identifier: FF:73:91:C6:CD:3D:5D:1F:55:A7:DB:27:10:01:41:58:93:73:2C:1B Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B50A49BD1280CCDACB162A4B2C93F7A7A Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_3ORxs09XR9Vp9snEAFBWJNzLBs.roa Signing time: Sat 21 Oct 2023 05:10:46 +0000 ROA not before: Sat 21 Oct 2023 05:10:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:509f:b127/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:50:a4:9b:d1:28:0c:cd:ac:b1:62:a4:b2:c9:3f:7a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 21 05:10:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ff7391c6cd3d5d1f55a7db271001415893732c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:d8:4c:a1:ba:6c:ef:da:f7:14:e1:ef:5b: bc:f9:56:1e:aa:ef:a7:cd:03:c4:f0:00:b5:93:b7: 40:b8:93:2e:23:da:05:5a:a2:84:9d:77:7f:71:e0: 65:89:01:93:99:12:87:04:5e:a9:79:8c:17:05:c7: 97:a5:d4:84:75:c0:a9:2e:dc:55:65:c2:68:d5:a7: 6f:ad:da:b0:a8:c5:8d:1a:3b:cd:68:fb:bb:2d:0a: ee:21:49:69:e5:74:3d:02:50:1f:ea:73:18:54:6f: 62:09:34:73:e8:55:d6:bd:33:77:eb:45:4e:51:dc: 38:5f:42:82:ab:42:64:d2:43:04:68:24:24:a9:11: 1d:ef:7f:68:1e:a4:62:8c:7f:e7:dc:87:8a:73:55: 44:55:8e:6b:60:c5:68:9e:6a:eb:a9:7e:26:1a:74: 77:69:af:4f:57:d4:4b:3e:78:be:a8:d2:41:65:2a: 4d:82:4e:ef:f3:28:bf:94:e5:cd:1d:8b:b4:b8:83: 4b:40:1e:6a:f0:ed:ca:15:9e:5d:b5:06:28:6a:db: 49:19:90:28:05:1a:11:f4:8e:98:76:85:08:57:ad: 7b:4f:60:5b:d7:0c:3d:64:f5:90:b4:1f:99:ee:16: 89:75:11:45:de:87:c2:dd:5f:c7:4b:21:ec:50:91: af:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:73:91:C6:CD:3D:5D:1F:55:A7:DB:27:10:01:41:58:93:73:2C:1B X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_3ORxs09XR9Vp9snEAFBWJNzLBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 27:69:89:15:fb:49:df:ce:af:6b:7d:7b:02:cc:b9:10:5d:b8: a6:4e:1d:6a:bc:14:32:bf:6c:88:53:f5:d7:e9:58:9c:49:90: 18:ea:84:b0:4a:59:61:ba:14:59:e4:9c:43:3f:93:8b:cb:7c: 20:3c:a1:bc:67:7c:d7:81:d0:f2:e0:21:8f:5a:4c:9e:f9:4e: 51:6e:53:c1:3f:80:66:90:9f:06:64:a0:23:a6:24:67:c7:e8: 65:4a:a8:d9:2c:e3:eb:ee:5e:03:bd:42:0d:5d:13:26:98:40: 96:6f:9d:6f:f0:77:1c:26:0b:b2:bd:ba:e4:57:2d:9d:d2:99: 0c:4b:83:26:d2:ee:8a:80:50:62:76:69:8c:8d:00:fa:fd:25: 54:41:4e:e9:e6:d9:d4:47:0c:50:ee:8b:da:d1:04:70:d3:20: a1:4c:f6:a6:aa:c4:dc:1f:0c:ea:7c:61:3a:a5:ee:86:c6:f3: 68:1a:b8:a5:a6:5c:3e:bc:f4:fb:17:ed:48:55:66:40:2c:fc: eb:4f:d8:5f:82:d4:62:b4:20:36:27:e0:e1:7e:fa:9f:12:d6: d5:7b:ed:85:35:22:8d:1d:44:ae:cc:7c:2e:41:b8:6f:2b:aa: ab:f0:a0:00:dd:81:58:9c:72:cb:54:55:68:e3:a0:c6:e2:f8: 7e:c4:23:f7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYtQpJvRKAzNrLFipLLJP3p6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDIxMDUxMDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjczOTFjNmNkM2Q1ZDFmNTVhN2RiMjcxMDAxNDE1ODkzNzMyYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9XYTKG6bO/a9xTh71u8+VYequ+n zQPE8AC1k7dAuJMuI9oFWqKEnXd/ceBliQGTmRKHBF6peYwXBceXpdSEdcCpLtxV ZcJo1advrdqwqMWNGjvNaPu7LQruIUlp5XQ9AlAf6nMYVG9iCTRz6FXWvTN360VO Udw4X0KCq0Jk0kMEaCQkqREd739oHqRijH/n3IeKc1VEVY5rYMVonmrrqX4mGnR3 aa9PV9RLPni+qNJBZSpNgk7v8yi/lOXNHYu0uINLQB5q8O3KFZ5dtQYoattJGZAo BRoR9I6YdoUIV617T2Bb1ww9ZPWQtB+Z7haJdRFF3ofC3V/HSyHsUJGvtwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFP9zkcbNPV0fVafbJxABQViTcywbMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvXzNPUnhzMDlYUjlWcDlzbkVBRkJXSk56TEJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACdpiRX7Sd/Or2t9ewLM uRBduKZOHWq8FDK/bIhT9dfpWJxJkBjqhLBKWWG6FFnknEM/k4vLfCA8obxnfNeB 0PLgIY9aTJ75TlFuU8E/gGaQnwZkoCOmJGfH6GVKqNks4+vuXgO9Qg1dEyaYQJZv nW/wdxwmC7K9uuRXLZ3SmQxLgybS7oqAUGJ2aYyNAPr9JVRBTunm2dRHDFDui9rR BHDTIKFM9qaqxNwfDOp8YTql7obG82gauKWmXD689PsX7UhVZkAs/OtP2F+C1GK0 IDYn4OF++p8S1tV77YU1Io0dRK7MfC5BuG8rqqvwoADdgViccstUVWjjoMbi+H7E I/c= -----END CERTIFICATE-----Generated at Sun Dec 21 00:32:25 2025 by rpki-client