This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rW5w5TtfXw7MKzR7cZwpY3Hs-j4.roa File: rW5w5TtfXw7MKzR7cZwpY3Hs-j4.roa (raw, json) Hash identifier: wGQhKXZX7rvnbFM1INCfZZLkjZqha0PHhhHRWiDXw7M= Subject key identifier: AD:6E:70:E5:3B:5F:5F:0E:CC:2B:34:7B:71:9C:29:63:71:EC:FA:3E Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018C0D04B51744DD00CC4D4B8681D7E416F2 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rW5w5TtfXw7MKzR7cZwpY3Hs-j4.roa Signing time: Sun 26 Nov 2023 19:04:21 +0000 ROA not before: Sun 26 Nov 2023 19:04:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18c:d04:aa9c/128 maxlen: 128 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:0d:04:b5:17:44:dd:00:cc:4d:4b:86:81:d7:e4:16:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 26 19:04:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ad6e70e53b5f5f0ecc2b347b719c296371ecfa3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:0d:31:84:1d:a4:a3:47:0d:28:f4:78:8a: 7a:85:9c:3e:35:4e:b7:96:dd:8c:f9:d0:59:ab:48: 19:59:c8:a4:e7:61:47:6d:e5:e6:69:6c:a6:ce:bc: 53:cc:61:ea:ca:a5:f0:0e:2a:e9:bf:08:c6:e4:4f: 31:1b:09:22:d0:b2:ed:00:d8:56:66:b4:ae:a9:6e: 14:4b:71:92:50:10:b7:d3:1a:f2:78:ed:fa:fa:4d: f3:05:40:04:c8:38:93:30:5a:72:21:1b:a7:75:9d: 98:a9:39:d0:d9:d2:ee:d6:97:45:3c:ed:a1:55:3a: 0b:ac:97:b7:aa:fa:37:2d:a7:f0:bb:37:e3:92:31: 84:66:f1:3c:f2:af:da:b1:08:4e:16:2a:ea:81:30: d9:48:4a:f5:7b:f7:99:8a:bf:bd:e3:37:1a:aa:5f: ba:94:0c:79:7c:94:5e:a1:59:89:7b:80:06:a9:df: c3:a7:db:14:69:46:fd:25:c1:89:95:01:a2:26:1d: 93:0a:67:42:30:e3:8d:67:11:20:ef:a1:fa:5a:13: 4a:94:5f:b2:10:bb:14:61:0b:96:81:a1:4f:cb:60: 30:e8:0e:c8:1d:c5:18:ad:36:90:15:db:8f:60:ed: 62:49:53:39:e0:eb:9d:c0:e0:bb:c2:af:90:87:59: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:70:E5:3B:5F:5F:0E:CC:2B:34:7B:71:9C:29:63:71:EC:FA:3E X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rW5w5TtfXw7MKzR7cZwpY3Hs-j4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 3c:f3:31:38:3e:6d:ca:70:cf:1e:05:62:9f:37:2a:70:33:30: 8d:57:54:93:c9:95:3c:da:61:fd:83:ff:c3:1e:c1:b7:1b:08: 82:32:dd:a2:dc:eb:95:28:df:f1:95:e4:ae:5f:f0:47:93:e9: 57:80:43:64:f0:33:3f:4d:21:41:13:9f:30:85:d2:16:ab:b4: 3f:62:74:a4:73:d0:b5:68:e9:c3:b7:a1:e7:97:2d:3a:b7:c1: 93:c2:8a:cf:ea:24:5e:87:25:d6:db:f3:a3:09:e6:a0:dd:02: ed:47:b1:b3:37:2d:10:c6:d8:2b:7f:cd:d8:42:50:e7:bf:30: 6f:81:20:f5:24:f8:2c:28:ea:59:cd:f4:6a:fa:40:a1:f4:f2: 7b:56:04:ca:ab:52:bf:98:a3:f5:59:92:1d:24:0c:21:28:84: 68:a6:f3:2a:51:f5:ec:00:30:eb:6b:aa:35:6a:1f:98:94:60: f0:c3:59:06:0c:95:1c:e6:7c:41:6f:75:f6:2a:d6:c4:93:2d: 4c:ca:21:6f:8b:5a:a2:96:a4:8d:3f:0d:f1:5f:27:6e:28:e6: 7c:72:41:6b:da:93:bb:02:08:53:1a:d6:e6:ed:b4:13:40:a6: 22:42:8f:68:0a:aa:d1:d9:6f:9b:34:15:e3:dd:9e:f9:fb:4b: 57:6c:cb:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYwNBLUXRN0AzE1LhoHX5BbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTI2MTkwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDZlNzBlNTNiNWY1ZjBlY2MyYjM0N2I3MTljMjk2MzcxZWNmYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYwNMYQdpKNHDSj0eIp6hZw+NU63 lt2M+dBZq0gZWcik52FHbeXmaWymzrxTzGHqyqXwDirpvwjG5E8xGwki0LLtANhW ZrSuqW4US3GSUBC30xryeO36+k3zBUAEyDiTMFpyIRundZ2YqTnQ2dLu1pdFPO2h VToLrJe3qvo3LafwuzfjkjGEZvE88q/asQhOFirqgTDZSEr1e/eZir+94zcaql+6 lAx5fJReoVmJe4AGqd/Dp9sUaUb9JcGJlQGiJh2TCmdCMOONZxEg76H6WhNKlF+y ELsUYQuWgaFPy2Aw6A7IHcUYrTaQFduPYO1iSVM54OudwOC7wq+Qh1kPTwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFK1ucOU7X18OzCs0e3GcKWNx7Po+MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvclc1dzVUdGZYdzdNS3pSN2Nad3BZM0hzLWo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADzzMTg+bcpwzx4FYp83 KnAzMI1XVJPJlTzaYf2D/8MewbcbCIIy3aLc65Uo3/GV5K5f8EeT6VeAQ2TwMz9N IUETnzCF0hartD9idKRz0LVo6cO3oeeXLTq3wZPCis/qJF6HJdbb86MJ5qDdAu1H sbM3LRDG2Ct/zdhCUOe/MG+BIPUk+Cwo6lnN9Gr6QKH08ntWBMqrUr+Yo/VZkh0k DCEohGim8ypR9ewAMOtrqjVqH5iUYPDDWQYMlRzmfEFvdfYq1sSTLUzKIW+LWqKW pI0/DfFfJ24o5nxyQWvak7sCCFMa1ubttBNApiJCj2gKqtHZb5s0FePdnvn7S1ds y8g= -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:36 2025 by rpki-client