This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bzZnGFbiXjAcp3dCjFN_zwGWT5c.roa File: bzZnGFbiXjAcp3dCjFN_zwGWT5c.roa (raw, json) Hash identifier: jQ0wytD8Un7uXgmPgG7LKg/5/Q1CcGrlcIRkZjI1fZ0= Subject key identifier: 6F:36:67:18:56:E2:5E:30:1C:A7:77:42:8C:53:7F:CF:01:96:4F:97 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B9AA6F937103D2AC7319F6C1917E5BCAD Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bzZnGFbiXjAcp3dCjFN_zwGWT5c.roa Signing time: Sat 04 Nov 2023 14:05:15 +0000 ROA not before: Sat 04 Nov 2023 14:05:15 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:9aa6:14a9/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:9a:a6:f9:37:10:3d:2a:c7:31:9f:6c:19:17:e5:bc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 4 14:05:15 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6f36671856e25e301ca777428c537fcf01964f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e4:0e:4e:30:bb:fa:49:85:ed:37:30:a4:60: 4f:51:c8:b3:f7:83:4f:a5:1c:03:b4:b6:c6:a8:5d: f3:88:db:54:a5:81:95:94:9a:dc:58:fe:21:56:12: 95:d9:36:28:55:31:a8:01:a9:be:48:e4:70:90:6e: 64:16:8b:d1:e3:83:91:41:ce:54:ee:4f:4c:dc:f6: 1e:3a:7f:d0:8f:67:f9:2c:95:17:a7:34:8c:89:ea: 82:9a:a9:43:f9:9f:82:17:77:4c:72:7d:89:16:32: 84:30:6f:4b:d7:01:1e:30:04:d3:6c:db:7a:9d:18: 1e:32:d1:b5:4a:91:ec:1e:5a:2a:d2:cc:c8:c4:97: 78:8a:d1:d5:2a:2d:1c:a2:b1:d8:70:bb:51:3b:2b: 3c:8f:b3:8f:fb:dd:ca:2c:d6:55:0a:2b:7e:bd:1a: 8a:b7:c2:db:19:95:c2:7d:16:1b:1e:af:08:7e:34: 42:c6:82:f5:8e:a9:df:eb:f0:ea:be:cf:e5:31:5e: a3:21:c0:52:59:3b:e2:4d:6d:26:44:dd:9e:43:4f: f6:c4:c1:9f:dc:c0:ba:0a:7d:33:0f:eb:ac:b9:5d: 41:3a:fd:f2:96:37:2c:23:fc:a7:12:3f:09:4f:2c: 1a:70:e9:37:e7:44:70:6e:d0:d1:d7:e4:42:b1:03: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:36:67:18:56:E2:5E:30:1C:A7:77:42:8C:53:7F:CF:01:96:4F:97 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bzZnGFbiXjAcp3dCjFN_zwGWT5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 46:74:8b:6d:c9:0a:0f:8a:52:79:7d:ab:44:d2:4e:01:0a:00: b1:26:58:17:b7:5a:82:ed:cf:f3:cc:7b:b5:72:51:bb:5c:bf: 69:e0:77:2f:e0:28:02:a9:00:fb:e1:d2:1b:b9:c1:9c:b9:19: b0:38:4e:c9:06:e9:4f:e4:3a:ff:9d:83:83:e6:ba:13:32:b1: 9a:01:29:40:ca:09:fa:a9:1b:79:64:82:dc:4a:06:1d:f3:da: ba:e7:fe:ae:dd:30:31:85:4d:80:9d:dd:ff:3d:8a:e2:ba:0e: a1:8c:16:ba:1c:90:c4:3f:bc:de:b7:76:9e:d5:8f:18:74:97: 0c:12:bd:d0:b9:62:43:a3:3b:ec:3b:53:55:6f:3e:f0:9c:5f: 8a:d7:99:be:65:df:09:85:a3:ee:78:73:53:2b:b4:09:26:c9: fb:47:52:85:36:a7:75:69:b7:96:07:5b:9c:f1:3e:e6:8e:d8: 72:69:90:dd:b2:80:24:a7:9c:23:d4:37:4b:37:0a:bf:23:9f: ce:57:e3:ed:cb:a7:fa:ca:e3:6c:4b:f6:c8:09:22:32:61:6b: 94:a8:b2:28:64:44:80:d2:a8:85:87:23:5e:aa:b8:1b:32:ad: c1:f8:6a:9c:12:b0:88:fa:90:05:05:eb:96:8a:da:43:82:0e: 11:55:4c:28 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYuapvk3ED0qxzGfbBkX5bytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTA0MTQwNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjM2NjcxODU2ZTI1ZTMwMWNhNzc3NDI4YzUzN2ZjZjAxOTY0Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eQOTjC7+kmF7TcwpGBPUciz94NP pRwDtLbGqF3ziNtUpYGVlJrcWP4hVhKV2TYoVTGoAam+SORwkG5kFovR44ORQc5U 7k9M3PYeOn/Qj2f5LJUXpzSMieqCmqlD+Z+CF3dMcn2JFjKEMG9L1wEeMATTbNt6 nRgeMtG1SpHsHloq0szIxJd4itHVKi0corHYcLtROys8j7OP+93KLNZVCit+vRqK t8LbGZXCfRYbHq8IfjRCxoL1jqnf6/Dqvs/lMV6jIcBSWTviTW0mRN2eQ0/2xMGf 3MC6Cn0zD+usuV1BOv3yljcsI/ynEj8JTywacOk350RwbtDR1+RCsQMsWwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG82ZxhW4l4wHKd3QoxTf88Blk+XMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvYnpabkdGYmlYakFjcDNkQ2pGTl96d0dXVDVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEZ0i23JCg+KUnl9q0TS TgEKALEmWBe3WoLtz/PMe7VyUbtcv2ngdy/gKAKpAPvh0hu5wZy5GbA4TskG6U/k Ov+dg4PmuhMysZoBKUDKCfqpG3lkgtxKBh3z2rrn/q7dMDGFTYCd3f89iuK6DqGM FrockMQ/vN63dp7Vjxh0lwwSvdC5YkOjO+w7U1VvPvCcX4rXmb5l3wmFo+54c1Mr tAkmyftHUoU2p3Vpt5YHW5zxPuaO2HJpkN2ygCSnnCPUN0s3Cr8jn85X4+3Lp/rK 42xL9sgJIjJha5SosihkRIDSqIWHI16quBsyrcH4apwSsIj6kAUF65aK2kOCDhFV TCg= -----END CERTIFICATE-----Generated at Fri Dec 19 07:45:43 2025 by rpki-client