This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zatYvMtuq9uPL_-C3Fh9eECHyjo.roa File: zatYvMtuq9uPL_-C3Fh9eECHyjo.roa (raw, json) Hash identifier: ob7WmH5Ed5kX+YEcYWUuY7Vyz/61toYqbpUCqQppgP8= Subject key identifier: CD:AB:58:BC:CB:6E:AB:DB:8F:2F:FF:82:DC:58:7D:78:40:87:CA:3A Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9 Certificate serial: 018B344C464A4DBD64CC1E233F44E4ABBA06 Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zatYvMtuq9uPL_-C3Fh9eECHyjo.roa Signing time: Sun 15 Oct 2023 17:04:55 +0000 ROA not before: Sun 15 Oct 2023 17:04:55 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/96 maxlen: 128 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18b:344b:971c/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:34:4c:46:4a:4d:bd:64:cc:1e:23:3f:44:e4:ab:ba:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9 Validity Not Before: Oct 15 17:04:55 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=cdab58bccb6eabdb8f2fff82dc587d784087ca3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:88:30:e7:c8:8c:01:50:ca:ad:7e:04:b7:44: 89:9f:8f:04:f4:d4:b1:dc:f4:02:69:67:18:91:44: a5:6b:04:46:2e:12:f1:28:26:41:9e:8e:b4:29:8b: dc:e4:89:97:46:71:69:7c:d8:e6:d3:55:68:37:ec: 81:37:51:55:cc:f0:8c:3a:f3:0e:a6:8e:23:a8:59: 75:89:a5:9b:5d:48:ab:f3:44:eb:80:e6:a3:b2:11: e8:3c:d4:f5:be:0b:1e:2f:55:80:af:7a:7c:34:ee: 7e:fd:08:82:a9:52:61:6d:7e:67:0c:6a:1d:52:07: 53:9e:ca:36:f1:5c:5c:60:ce:6d:d4:06:da:ae:0c: 14:30:47:f4:ef:c5:6f:8a:1c:03:04:66:36:ff:2c: 85:61:ce:9e:17:4d:1a:f7:6b:d1:b8:be:9c:69:36: 82:1c:05:dd:0a:a7:5b:67:10:49:b4:41:f1:40:d3: 0b:c8:f6:66:ef:9d:38:40:d5:9c:fc:92:de:d4:34: 0e:be:f0:9d:e1:e2:d3:9f:fd:dd:91:ca:71:f5:55: 5c:82:ce:07:8b:a5:f5:ca:91:27:d3:86:e5:4f:27: ef:65:f4:fc:5e:39:0f:ac:fa:67:8c:eb:8a:66:c4: 22:72:b3:16:66:3e:56:fb:95:7c:1a:2f:02:ec:e8: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:58:BC:CB:6E:AB:DB:8F:2F:FF:82:DC:58:7D:78:40:87:CA:3A X509v3 Authority Key Identifier: keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zatYvMtuq9uPL_-C3Fh9eECHyjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 88:8c:e9:5f:ff:44:0c:8e:99:e3:52:42:64:6b:c4:1b:84:a0: e9:58:e9:8f:f5:f5:47:de:f7:39:39:f8:23:24:1e:a1:f3:d0: 79:9a:ff:a3:03:fd:22:7b:11:64:09:80:ce:07:f1:11:8a:f3: 54:f8:67:2f:5d:0a:2a:85:fb:c1:b6:c8:ef:a7:4b:e9:8b:38: 15:9c:c7:26:c0:90:9c:d1:97:93:e8:0e:19:76:94:ab:c3:97: 26:b1:55:16:27:1a:e1:9b:0e:fb:68:72:f7:a9:91:d1:cd:ad: 79:79:29:8c:f1:46:1e:7b:ad:f5:35:bb:61:b7:02:ce:46:d0: 76:98:f9:72:8c:42:90:95:dc:9b:b8:18:d8:92:4f:c9:24:f8: 94:08:d3:d3:23:7e:73:aa:ba:2e:b0:df:c2:e7:d2:50:bf:77: 64:65:58:08:18:7b:a5:e7:f5:81:d8:2c:6e:7f:b3:ea:ef:c5: 02:44:05:d9:1e:ec:a8:b0:93:76:7b:10:08:3f:0c:21:c4:27: 9b:f7:a9:64:df:43:03:47:89:da:0f:42:5c:55:15:61:64:a6: 5c:60:26:23:a8:fd:d1:1b:85:1f:1e:ab:f7:ce:53:e7:65:55: 54:8d:5a:fc:d3:2f:f7:d9:4a:88:2a:8c:84:5e:42:6a:c1:8c: 27:f4:4b:33 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYs0TEZKTb1kzB4jP0Tkq7oGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl OGY5ZDkwHhcNMjMxMDE1MTcwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGFiNThiY2NiNmVhYmRiOGYyZmZmODJkYzU4N2Q3ODQwODdjYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIgw58iMAVDKrX4Et0SJn48E9NSx 3PQCaWcYkUSlawRGLhLxKCZBno60KYvc5ImXRnFpfNjm01VoN+yBN1FVzPCMOvMO po4jqFl1iaWbXUir80TrgOajshHoPNT1vgseL1WAr3p8NO5+/QiCqVJhbX5nDGod UgdTnso28VxcYM5t1AbargwUMEf078VvihwDBGY2/yyFYc6eF00a92vRuL6caTaC HAXdCqdbZxBJtEHxQNMLyPZm7504QNWc/JLe1DQOvvCd4eLTn/3dkcpx9VVcgs4H i6X1ypEn04blTyfvZfT8XjkPrPpnjOuKZsQicrMWZj5W+5V8Gi8C7Oiw2QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM2rWLzLbqvbjy//gtxYfXhAh8o6MB8GA1UdIwQY MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt ZGQ1YzMwMGJlNTRlLzEvemF0WXZNdHVxOXVQTF8tQzNGaDllRUNIeWpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIiM6V//RAyOmeNSQmRr xBuEoOlY6Y/19Ufe9zk5+CMkHqHz0Hma/6MD/SJ7EWQJgM4H8RGK81T4Zy9dCiqF +8G2yO+nS+mLOBWcxybAkJzRl5PoDhl2lKvDlyaxVRYnGuGbDvtocvepkdHNrXl5 KYzxRh57rfU1u2G3As5G0HaY+XKMQpCV3Ju4GNiST8kk+JQI09MjfnOqui6w38Ln 0lC/d2RlWAgYe6Xn9YHYLG5/s+rvxQJEBdke7Kiwk3Z7EAg/DCHEJ5v3qWTfQwNH idoPQlxVFWFkplxgJiOo/dEbhR8eq/fOU+dlVVSNWvzTL/fZSogqjIReQmrBjCf0 SzM= -----END CERTIFICATE-----Generated at Sun Dec 21 08:50:13 2025 by rpki-client