This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/reiIBGBD2rKII6JHlPieh8qyX2k.roa File: reiIBGBD2rKII6JHlPieh8qyX2k.roa (raw, json) Hash identifier: hoB5eFlgwU6FmrV3W0za0ufsU5F9+UJ21vGc2tU4qy8= Subject key identifier: AD:E8:88:04:60:43:DA:B2:88:23:A2:47:94:F8:9E:87:CA:B2:5F:69 Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018BFEA533A684959A23586AE3DFC831E75B Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/reiIBGBD2rKII6JHlPieh8qyX2k.roa Signing time: Fri 24 Nov 2023 00:05:21 +0000 ROA not before: Fri 24 Nov 2023 00:05:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128 2001:67c:64:ffff:0:18b:fea4:531d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:fe:a5:33:a6:84:95:9a:23:58:6a:e3:df:c8:31:e7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Nov 24 00:05:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=ade888046043dab28823a24794f89e87cab25f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:a6:e8:95:cb:7a:c7:eb:69:a9:02:d3:fe: 12:c2:0b:9e:6f:e9:44:bb:13:70:f7:85:88:a8:c4: 19:3f:13:32:43:41:50:f2:54:10:17:f4:22:42:d8: ce:7d:cd:74:88:af:86:33:5b:b4:e6:09:0a:77:0d: cf:ae:1a:cd:54:32:08:11:d9:6f:3d:ee:4c:30:70: 6d:d5:c8:a4:f7:a5:30:ae:6b:b3:53:80:3b:58:16: 2f:5e:78:01:21:46:97:83:0f:0b:93:b2:33:93:f1: 7a:bd:d4:f4:20:46:5f:22:ad:dc:d6:ff:42:4e:89: 57:16:3f:a8:38:b8:a6:3b:7d:42:8e:ea:4c:af:3a: 2c:10:df:50:0b:2d:76:5a:b4:0f:2b:dc:d8:8c:d4: fc:b4:bc:69:92:42:fb:fd:42:23:ae:bd:e0:77:03: 7f:2b:91:ff:c8:4f:a5:a1:1f:3e:da:b0:16:fd:db: f5:76:41:59:fe:7d:ca:fa:76:4e:a8:ae:61:8e:b4: 39:1a:1f:e2:14:3e:37:b5:b8:a2:30:25:1a:4a:96: f7:84:24:05:68:38:8c:31:b8:24:bc:8e:72:c3:3e: cf:43:8a:22:08:42:aa:b8:0a:6f:40:d2:62:60:23: 95:a7:d9:a6:b5:4b:86:d3:4c:58:33:85:c6:93:04: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E8:88:04:60:43:DA:B2:88:23:A2:47:94:F8:9E:87:CA:B2:5F:69 X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/reiIBGBD2rKII6JHlPieh8qyX2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 18:73:c5:2c:26:c5:d6:4f:e7:e7:d6:9a:f2:c6:26:62:3a:fa: 01:36:f6:0e:cd:8f:de:23:e2:79:9a:0d:0f:65:9f:2f:59:94: a5:53:4f:40:5e:cc:8f:be:ff:7c:97:be:50:25:7c:6b:56:b7: 72:44:74:85:ac:cf:3a:94:79:04:d4:3d:f7:36:9c:86:59:8c: 21:94:de:5a:b1:fa:4e:81:00:76:f5:f7:f9:b7:ed:de:35:a5: ee:fe:3a:6a:67:28:8f:42:8f:d4:d0:44:9e:01:eb:99:ef:7a: 8e:e1:56:84:b9:89:1f:be:36:97:4b:22:6c:44:8f:90:55:8e: 08:cc:ad:77:53:9d:b7:ef:a4:4a:ce:22:fc:3a:a2:66:a2:62: 89:c5:3f:cf:80:d7:07:9e:ea:d9:9a:93:af:71:8a:6c:c9:6d: 99:c7:97:63:41:3d:cc:26:5b:fb:f7:4f:59:9e:38:7e:27:0f: 1b:b7:f1:f6:d5:d1:f8:56:e9:a4:98:21:7c:57:b9:71:4f:74: 26:39:1f:eb:c3:b5:00:a6:92:35:a4:38:2f:7c:98:69:37:fa: 3a:12:a5:ef:6c:46:4a:20:a0:ce:53:ca:af:24:e0:6f:a4:88: 86:d3:b4:97:71:d5:03:e5:b7:d4:48:50:c5:7a:cd:65:9c:65: 4d:54:75:f6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYv+pTOmhJWaI1hq49/IMedbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMTI0MDAwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGU4ODgwNDYwNDNkYWIyODgyM2EyNDc5NGY4OWU4N2NhYjI1ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkim6JXLesfraakC0/4Swgueb+lE uxNw94WIqMQZPxMyQ0FQ8lQQF/QiQtjOfc10iK+GM1u05gkKdw3PrhrNVDIIEdlv Pe5MMHBt1cik96UwrmuzU4A7WBYvXngBIUaXgw8Lk7Izk/F6vdT0IEZfIq3c1v9C TolXFj+oOLimO31CjupMrzosEN9QCy12WrQPK9zYjNT8tLxpkkL7/UIjrr3gdwN/ K5H/yE+loR8+2rAW/dv1dkFZ/n3K+nZOqK5hjrQ5Gh/iFD43tbiiMCUaSpb3hCQF aDiMMbgkvI5ywz7PQ4oiCEKquApvQNJiYCOVp9mmtUuG00xYM4XGkwS85wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFK3oiARgQ9qyiCOiR5T4nofKsl9pMB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvcmVpSUJHQkQycktJSTZKSGxQaWVoOHF5WDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABhzxSwmxdZP5+fWmvLG JmI6+gE29g7Nj94j4nmaDQ9lny9ZlKVTT0BezI++/3yXvlAlfGtWt3JEdIWszzqU eQTUPfc2nIZZjCGU3lqx+k6BAHb19/m37d41pe7+OmpnKI9Cj9TQRJ4B65nveo7h VoS5iR++NpdLImxEj5BVjgjMrXdTnbfvpErOIvw6omaiYonFP8+A1wee6tmak69x imzJbZnHl2NBPcwmW/v3T1meOH4nDxu38fbV0fhW6aSYIXxXuXFPdCY5H+vDtQCm kjWkOC98mGk3+joSpe9sRkogoM5Tyq8k4G+kiIbTtJdx1QPlt9RIUMV6zWWcZU1U dfY= -----END CERTIFICATE-----Generated at Sun Dec 21 00:14:37 2025 by rpki-client