This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vlOnvc7_K0uG1KjgsLQb6UjcQpE.roa File: vlOnvc7_K0uG1KjgsLQb6UjcQpE.roa (raw, json) Hash identifier: 57MQj0/9+0eOqjzzTxySinJHPympWD+H/j39GSA+ziA= Subject key identifier: BE:53:A7:BD:CE:FF:2B:4B:86:D4:A8:E0:B0:B4:1B:E9:48:DC:42:91 Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Certificate serial: 018A7C9EBC9BDED3B387D9DA2F811C6EB79B Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vlOnvc7_K0uG1KjgsLQb6UjcQpE.roa Signing time: Sun 10 Sep 2023 01:04:52 +0000 ROA not before: Sun 10 Sep 2023 01:04:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18a:7c9e:4d74/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:7c:9e:bc:9b:de:d3:b3:87:d9:da:2f:81:1c:6e:b7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275 Validity Not Before: Sep 10 01:04:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=be53a7bdceff2b4b86d4a8e0b0b41be948dc4291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:a1:62:bf:4d:47:49:c6:a4:4e:e8:f5:38: 60:6d:47:75:b5:13:fa:df:f9:a5:f6:a0:69:6e:d5: a1:0c:fd:a0:83:ef:45:e5:b2:16:85:65:51:e9:17: cd:39:99:d1:dd:28:27:10:6a:75:8a:c7:6e:b2:ea: 0a:d6:99:f8:93:e2:b9:e4:e1:74:1a:bd:e4:17:cd: bc:3a:21:3f:3a:61:30:04:88:0d:7c:05:53:ea:18: 89:2a:7c:7d:36:3f:dc:f7:52:7a:97:4b:50:f0:98: 58:8b:b9:65:70:13:ee:40:3c:e0:df:c9:4b:d8:77: 19:57:9b:45:d9:bc:c9:2b:98:0a:da:0a:be:a9:e5: 63:c0:b0:56:74:22:b5:e0:ab:2f:b9:9d:fb:2d:6a: df:88:4d:35:4a:6c:ce:49:aa:e1:05:de:34:7d:5d: 8e:1a:99:14:0d:d1:47:26:df:4d:d7:91:95:31:f2: 0e:f3:79:67:38:99:21:66:50:4a:dd:f4:86:1f:c7: 10:9f:cd:9f:75:75:70:15:f2:9f:a3:f8:48:a0:f7: ef:f6:a7:9e:81:77:de:22:a3:c0:9a:0d:43:4f:6e: 66:8d:b9:21:10:c6:c0:86:a6:b6:50:a7:72:d6:11: e3:a4:92:ba:c3:73:f4:27:6a:29:5a:58:50:5a:ec: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:53:A7:BD:CE:FF:2B:4B:86:D4:A8:E0:B0:B4:1B:E9:48:DC:42:91 X509v3 Authority Key Identifier: keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vlOnvc7_K0uG1KjgsLQb6UjcQpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 91:3a:95:87:57:70:87:b8:30:7a:12:5e:74:fd:77:f4:72:43: c4:dc:69:f0:a2:39:92:2b:01:8a:98:cc:62:d9:98:a6:82:7a: 84:d7:bf:2d:94:69:dd:43:b0:b7:69:94:7d:37:be:5a:bc:9a: ec:13:e2:03:30:60:2e:60:42:8c:49:8a:7f:dd:f6:b1:5f:60: f9:4a:d9:4e:f9:87:2a:a6:75:5b:b2:0a:35:ab:44:5b:b3:58: 00:ed:02:14:4c:41:22:af:fd:2b:4a:2d:8e:92:dc:61:ef:de: 8c:60:b8:29:19:60:ab:e4:4f:98:f1:90:34:02:b0:1c:ce:12: 54:27:55:24:2f:64:1b:64:42:20:7b:03:eb:b8:a1:8a:d8:45: 51:07:58:bd:79:94:6e:d4:48:a4:c6:75:77:ed:f4:1c:41:1d: 60:20:ee:2f:ce:28:e0:fb:72:94:6c:50:2f:e6:3c:34:86:8b: f6:d1:7d:8e:96:4c:68:5a:95:f2:b2:c8:a1:57:16:4f:14:4a: c1:16:a5:d1:18:97:d2:5a:93:d2:1c:72:83:a2:4c:ce:d8:c5: 32:55:fd:7d:eb:a3:f2:05:70:61:01:bc:dc:2c:fc:31:b1:22: e0:5b:dd:68:08:c5:d1:a4:a3:7a:ab:d7:1c:cf:2f:98:f1:66: 5b:1d:a9:d0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYp8nryb3tOzh9naL4EcbrebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5 NjcyNzUwHhcNMjMwOTEwMDEwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTUzYTdiZGNlZmYyYjRiODZkNGE4ZTBiMGI0MWJlOTQ4ZGM0MjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG2hYr9NR0nGpE7o9ThgbUd1tRP6 3/ml9qBpbtWhDP2gg+9F5bIWhWVR6RfNOZnR3SgnEGp1isdusuoK1pn4k+K55OF0 Gr3kF828OiE/OmEwBIgNfAVT6hiJKnx9Nj/c91J6l0tQ8JhYi7llcBPuQDzg38lL 2HcZV5tF2bzJK5gK2gq+qeVjwLBWdCK14KsvuZ37LWrfiE01SmzOSarhBd40fV2O GpkUDdFHJt9N15GVMfIO83lnOJkhZlBK3fSGH8cQn82fdXVwFfKfo/hIoPfv9qee gXfeIqPAmg1DT25mjbkhEMbAhqa2UKdy1hHjpJK6w3P0J2opWlhQWuwJCwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL5Tp73O/ytLhtSo4LC0G+lI3EKRMB8GA1UdIwQY MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt ODNmY2QyMjU0ODJhLzEvdmxPbnZjN19LMHVHMUtqZ3NMUWI2VWpjUXBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJE6lYdXcIe4MHoSXnT9 d/RyQ8TcafCiOZIrAYqYzGLZmKaCeoTXvy2Uad1DsLdplH03vlq8muwT4gMwYC5g QoxJin/d9rFfYPlK2U75hyqmdVuyCjWrRFuzWADtAhRMQSKv/StKLY6S3GHv3oxg uCkZYKvkT5jxkDQCsBzOElQnVSQvZBtkQiB7A+u4oYrYRVEHWL15lG7USKTGdXft 9BxBHWAg7i/OKOD7cpRsUC/mPDSGi/bRfY6WTGhalfKyyKFXFk8USsEWpdEYl9Ja k9IccoOiTM7YxTJV/X3ro/IFcGEBvNws/DGxIuBb3WgIxdGko3qr1xzPL5jxZlsd qdA= -----END CERTIFICATE-----Generated at Sun Dec 21 08:38:39 2025 by rpki-client