This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pEx5-OhMSdipzwm10jG9rdfv8dc.roa File: pEx5-OhMSdipzwm10jG9rdfv8dc.roa (raw, json) Hash identifier: 08ohqp77cNePPhwmCKMpi0P/HHxSc7TnL32/4jWcP7o= Subject key identifier: A4:4C:79:F8:E8:4C:49:D8:A9:CF:09:B5:D2:31:BD:AD:D7:EF:F1:D7 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B7B88FA48881AD74E8C484B5F66D52999 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pEx5-OhMSdipzwm10jG9rdfv8dc.roa Signing time: Sun 29 Oct 2023 13:04:16 +0000 ROA not before: Sun 29 Oct 2023 13:04:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64:ffff:0:18b:7b88:f5b2/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:7b:88:fa:48:88:1a:d7:4e:8c:48:4b:5f:66:d5:29:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 29 13:04:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=a44c79f8e84c49d8a9cf09b5d231bdadd7eff1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:7c:05:ff:d4:8d:c5:ce:87:80:cd:3e:91: b7:68:c2:ab:63:65:ba:f0:e5:a9:e6:d4:8f:da:65: 2e:d0:cb:f4:8a:de:82:2d:42:ad:54:d4:50:e9:c3: bf:22:0f:73:72:ef:7d:89:ad:42:b7:7b:a5:57:71: 57:1b:90:7d:1a:2b:aa:43:ac:3f:79:9c:5e:97:48: 84:da:b7:54:99:b6:a4:88:fc:4e:66:f0:44:a1:bf: 3b:b4:97:fa:d0:27:9b:34:cd:56:94:a9:cd:ea:bb: 0d:1d:31:7b:61:05:a2:cc:8e:28:e4:88:02:43:5d: a2:fd:37:e7:ac:56:ca:75:95:8e:bf:f2:83:6d:19: c0:44:3d:67:e7:be:f4:37:23:3c:84:08:27:f5:9a: 68:e4:18:e4:f6:10:50:f5:02:78:82:27:e1:eb:bc: 96:2e:16:8f:4d:5e:bf:24:05:bb:16:c0:31:29:72: 50:e9:1c:07:7b:e5:77:5a:23:c4:20:10:f0:64:0c: 15:2d:50:54:af:c1:7e:4d:5a:f7:74:4a:93:00:5a: b6:bc:db:2d:df:7e:1c:ab:76:dc:f6:92:47:ab:db: aa:59:4f:13:d4:c1:51:05:5d:7f:8e:ee:ba:6c:43: 91:fb:d8:84:98:2b:d9:bf:8d:7f:cd:93:5b:bf:23: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4C:79:F8:E8:4C:49:D8:A9:CF:09:B5:D2:31:BD:AD:D7:EF:F1:D7 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pEx5-OhMSdipzwm10jG9rdfv8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 6e:fb:d1:54:a9:4e:da:5e:f4:ca:c0:80:7d:5e:cd:3f:b6:3d: 41:44:0d:b8:9d:9a:41:44:55:a2:f4:e6:4d:0a:64:9a:c8:cd: 4f:a2:25:76:15:14:2b:85:bc:cc:99:4c:87:c7:dc:bb:06:95: 1e:45:f7:3b:6f:8b:7f:57:d3:1e:3d:eb:21:f8:31:f0:25:ad: 7f:59:1e:6c:35:26:14:0b:3e:38:03:36:d2:60:a5:fa:6c:d9: 45:1c:a1:81:7a:54:1f:49:71:42:52:a4:57:60:2f:0e:55:82: cf:ef:80:e8:66:04:b3:65:86:1d:91:47:f6:a8:0b:7e:63:d5: b0:4f:c7:6a:07:b8:01:98:ce:39:bf:e9:1f:c8:3e:e0:e1:5d: 70:32:6b:e0:66:20:6a:0a:57:cd:16:29:8b:28:39:2c:8c:74: 70:68:d5:25:85:22:49:65:83:ad:70:79:ee:15:05:46:97:51: 9f:74:a1:a2:7c:5e:d1:b3:94:09:84:b3:bc:8c:a1:2e:2e:f8: f4:97:69:39:e1:08:0e:7c:b2:bc:f2:e4:24:90:41:26:7c:e0: 8f:3e:e6:f9:f1:7f:67:05:35:82:49:b3:86:6d:22:d3:83:31: 3a:76:d3:52:c9:73:66:01:d6:09:c0:fc:43:b3:cf:d0:7a:a4: 8e:9d:7f:2c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYt7iPpIiBrXToxIS19m1SmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDI5MTMwNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDRjNzlmOGU4NGM0OWQ4YTljZjA5YjVkMjMxYmRhZGQ3ZWZmMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC58Bf/UjcXOh4DNPpG3aMKrY2W6 8OWp5tSP2mUu0Mv0it6CLUKtVNRQ6cO/Ig9zcu99ia1Ct3ulV3FXG5B9GiuqQ6w/ eZxel0iE2rdUmbakiPxOZvBEob87tJf60CebNM1WlKnN6rsNHTF7YQWizI4o5IgC Q12i/TfnrFbKdZWOv/KDbRnARD1n5770NyM8hAgn9Zpo5Bjk9hBQ9QJ4gifh67yW LhaPTV6/JAW7FsAxKXJQ6RwHe+V3WiPEIBDwZAwVLVBUr8F+TVr3dEqTAFq2vNst 334cq3bc9pJHq9uqWU8T1MFRBV1/ju66bEOR+9iEmCvZv41/zZNbvyNxqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKRMefjoTEnYqc8JtdIxva3X7/HXMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvcEV4NS1PaE1TZGlwendtMTBqRzlyZGZ2OGRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG770VSpTtpe9MrAgH1e zT+2PUFEDbidmkFEVaL05k0KZJrIzU+iJXYVFCuFvMyZTIfH3LsGlR5F9ztvi39X 0x496yH4MfAlrX9ZHmw1JhQLPjgDNtJgpfps2UUcoYF6VB9JcUJSpFdgLw5Vgs/v gOhmBLNlhh2RR/aoC35j1bBPx2oHuAGYzjm/6R/IPuDhXXAya+BmIGoKV80WKYso OSyMdHBo1SWFIkllg61wee4VBUaXUZ90oaJ8XtGzlAmEs7yMoS4u+PSXaTnhCA58 srzy5CSQQSZ84I8+5vnxf2cFNYJJs4ZtItODMTp201LJc2YB1gnA/EOzz9B6pI6d fyw= -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:16 2025 by rpki-client