This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/8Ccu6QIhQ9lmaKUs8He-DQOIaFU.roa File: 8Ccu6QIhQ9lmaKUs8He-DQOIaFU.roa (raw, json) Hash identifier: TD6Ky51oWYAIiJErGQefwuFMz8veDQJP2OX3vomZX9g= Subject key identifier: F0:27:2E:E9:02:21:43:D9:66:68:A5:2C:F0:77:BE:0D:03:88:68:55 Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1 Certificate serial: 019AA56CB343CCB07D03EBD9B3C36968D2FE Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/8Ccu6QIhQ9lmaKUs8He-DQOIaFU.roa Signing time: Fri 21 Nov 2025 07:59:15 +0000 ROA not before: Fri 21 Nov 2025 07:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8849 IP address blocks: 176.124.112.0/24 maxlen: 24 176.124.113.0/24 maxlen: 24 185.187.152.0/24 maxlen: 32 185.187.153.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:6c:b3:43:cc:b0:7d:03:eb:d9:b3:c3:69:68:d2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1 Validity Not Before: Nov 21 07:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f0272ee9022143d96668a52cf077be0d03886855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:5b:81:32:52:68:09:ec:57:7c:e3:b7:9f: 3c:f7:0a:92:bf:69:ff:c0:4a:08:77:60:d2:8f:53: e5:ef:c2:26:0f:8b:76:77:6d:dc:6a:64:80:b4:60: 7c:8a:0c:f4:78:23:34:52:2b:3c:9a:7a:b0:22:ba: 16:8a:8d:bb:c3:d6:ff:00:ee:39:66:cf:8b:73:62: 2d:a0:72:fd:9b:d7:1c:c6:fd:00:07:fe:f2:9b:c7: 12:7b:8a:ca:26:04:a1:ef:a3:f4:5d:29:ca:d0:a7: d1:c7:09:0e:0b:6f:7e:4a:49:ac:4a:a2:ce:da:14: 75:f9:c5:55:e3:a7:c8:da:e7:98:b1:3a:6a:16:6e: e9:79:32:30:c6:0d:4f:1f:9c:01:0f:ae:9e:22:8c: ed:52:13:18:90:81:78:9c:0a:26:d4:1b:82:9a:37: b9:88:de:e9:1d:98:f2:3f:8a:d4:d3:8f:0f:f4:69: 24:5c:8b:cb:2a:e9:54:9e:e6:9b:38:7d:ee:3d:37: 98:39:67:76:a5:e8:6b:5f:82:ae:e1:c1:cf:5f:d2: eb:f9:eb:11:9f:f0:0d:2b:d2:33:ba:52:48:5e:f5: 94:28:ea:cc:37:24:40:ed:1d:dc:ea:aa:fe:42:01: 0e:1d:26:6a:bc:b4:90:32:05:c6:8d:2e:4f:49:87: 16:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:27:2E:E9:02:21:43:D9:66:68:A5:2C:F0:77:BE:0D:03:88:68:55 X509v3 Authority Key Identifier: keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/8Ccu6QIhQ9lmaKUs8He-DQOIaFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.112.0/23 185.187.152.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:db:1b:a4:9b:83:7f:41:55:7c:a1:2a:25:ba:06:91:fd:65: c8:4d:49:79:8f:c4:07:32:6c:f5:d1:79:af:02:ca:e6:35:8e: b6:7b:6f:9d:fb:0a:7f:dc:b4:8c:99:91:5c:56:59:fe:22:bd: d0:2a:11:25:74:61:03:39:ad:b7:ca:55:27:d4:44:31:a3:83: ee:65:f2:01:e3:7a:3c:2b:20:91:12:cc:10:07:aa:c2:48:49: bf:60:41:44:9b:8d:8f:8e:5a:34:ad:ac:8b:a5:3d:d4:3d:bc: f6:f4:b4:87:23:ac:c6:f1:ed:79:fc:d9:d6:fb:f5:11:46:e1: b9:36:94:1e:e2:82:f9:15:8d:30:63:6c:73:ce:21:9c:f9:38: 31:7d:ca:fe:a8:ff:51:0e:bf:2c:d6:13:73:4f:ff:01:a6:1c: 49:d1:c4:6d:da:ab:63:e3:0c:87:d4:6d:cd:90:a1:ef:3a:89: 38:33:12:d1:40:9e:93:db:fe:6d:99:b6:1b:35:68:6f:9c:d4: 8d:0d:00:9d:7b:cc:2d:dd:da:31:3b:86:bf:b4:2a:7c:f9:29: 3a:aa:54:05:aa:0d:62:75:56:99:2a:3b:92:6f:d5:79:b0:5b: 75:98:09:7c:c8:02:da:2a:6b:ba:c1:54:c1:e8:99:6b:25:8c: 8c:65:92:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqlbLNDzLB9A+vZs8NpaNL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3 Mzk5ZTEwHhcNMjUxMTIxMDc1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDI3MmVlOTAyMjE0M2Q5NjY2OGE1MmNmMDc3YmUwZDAzODg2ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq5bgTJSaAnsV3zjt5889wqSv2n/ wEoId2DSj1Pl78ImD4t2d23camSAtGB8igz0eCM0Uis8mnqwIroWio27w9b/AO45 Zs+Lc2ItoHL9m9ccxv0AB/7ym8cSe4rKJgSh76P0XSnK0KfRxwkOC29+SkmsSqLO 2hR1+cVV46fI2ueYsTpqFm7peTIwxg1PH5wBD66eIoztUhMYkIF4nAom1BuCmje5 iN7pHZjyP4rU048P9GkkXIvLKulUnuabOH3uPTeYOWd2pehrX4Ku4cHPX9Lr+esR n/ANK9IzulJIXvWUKOrMNyRA7R3c6qr+QgEOHSZqvLSQMgXGjS5PSYcWvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPAnLukCIUPZZmilLPB3vg0DiGhVMB8GA1UdIwQY MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt ZTg4ZmZmODJkNTUzLzEvOENjdTZRSWhROWxtYUtVczhIZS1EUU9JYUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsHxwAwQB ubuYMA0GCSqGSIb3DQEBCwUAA4IBAQAq2xukm4N/QVV8oSolugaR/WXITUl5j8QH Mmz10XmvAsrmNY62e2+d+wp/3LSMmZFcVln+Ir3QKhEldGEDOa23ylUn1EQxo4Pu ZfIB43o8KyCREswQB6rCSEm/YEFEm42Pjlo0rayLpT3UPbz29LSHI6zG8e15/NnW +/URRuG5NpQe4oL5FY0wY2xzziGc+Tgxfcr+qP9RDr8s1hNzT/8BphxJ0cRt2qtj 4wyH1G3NkKHvOok4MxLRQJ6T2/5tmbYbNWhvnNSNDQCde8wt3doxO4a/tCp8+Sk6 qlQFqg1idVaZKjuSb9V5sFt1mAl8yALaKmu6wVTB6JlrJYyMZZJu -----END CERTIFICATE-----Generated at Tue Dec 16 08:54:48 2025 by rpki-client