This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/rVmJ70Xvsa3Q8Tc6Wf4QR0CW4jY.roa File: rVmJ70Xvsa3Q8Tc6Wf4QR0CW4jY.roa (raw, json) Hash identifier: algdIKsYSJFPekwSt+MENM1R20RoxYCjEjdiTBmEXBI= Subject key identifier: AD:59:89:EF:45:EF:B1:AD:D0:F1:37:3A:59:FE:10:47:40:96:E2:36 Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1 Certificate serial: 019AA56CB3D5B1A9AEBF9C12F4DA7AD5F311 Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/rVmJ70Xvsa3Q8Tc6Wf4QR0CW4jY.roa Signing time: Fri 21 Nov 2025 07:59:15 +0000 ROA not before: Fri 21 Nov 2025 07:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8966 IP address blocks: 176.124.112.0/24 maxlen: 24 176.124.113.0/24 maxlen: 24 185.187.152.0/24 maxlen: 24 185.187.153.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:6c:b3:d5:b1:a9:ae:bf:9c:12:f4:da:7a:d5:f3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1 Validity Not Before: Nov 21 07:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ad5989ef45efb1add0f1373a59fe10474096e236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:50:8c:6a:e7:7a:63:5b:87:86:b8:e8:09: af:24:13:05:91:90:75:db:bd:cb:b4:dc:9b:42:42: da:84:b9:7a:9f:e2:c9:1d:96:b1:4a:a9:79:76:9b: 9c:c6:e7:68:f6:ab:b2:20:a1:af:22:65:6e:80:b8: 3e:a7:a4:c9:83:8f:78:d2:41:0b:3f:dc:c5:e6:22: fe:dd:5c:fd:fb:33:8b:e9:46:3c:b5:25:bc:e9:8e: fe:9c:73:b3:98:5e:99:21:50:50:1b:b8:fa:ac:57: 0f:0d:ff:78:4c:72:26:b4:bc:96:98:67:ab:3c:07: 2d:54:67:d6:0d:cd:9e:aa:aa:89:75:68:0b:1d:9a: a9:cb:4a:fe:9d:47:fd:fc:fc:87:a2:89:46:c1:ee: 73:25:48:7d:13:4d:a6:c4:2a:15:7b:b6:a8:c3:7f: ce:ae:ca:2d:56:6c:59:41:99:4b:41:07:68:f0:43: da:31:11:f7:fe:33:ea:78:09:42:be:ab:54:fd:42: 26:29:b1:a1:40:4c:8c:41:89:36:6d:b5:02:e4:f5: f7:a8:13:9a:7f:82:31:24:8d:ad:e9:99:de:07:d0: 6d:c9:d8:62:11:c8:db:28:d9:a0:97:48:0b:fa:b6: c2:c6:94:49:07:eb:cd:ba:a0:61:51:b8:47:d6:44: 87:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:59:89:EF:45:EF:B1:AD:D0:F1:37:3A:59:FE:10:47:40:96:E2:36 X509v3 Authority Key Identifier: keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/rVmJ70Xvsa3Q8Tc6Wf4QR0CW4jY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.112.0/23 185.187.152.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:c7:38:cf:48:0a:d8:43:e7:93:dd:2b:16:7a:ac:49:40:98: 54:ab:91:b1:86:36:da:ff:4b:18:32:a5:08:d9:c2:d8:c4:b7: 3f:34:de:49:57:fe:70:04:8a:e9:1b:58:05:f2:1e:fb:ad:0c: a2:c1:50:58:cd:c6:aa:03:26:ff:cd:0f:d5:01:07:33:3f:83: 27:50:6c:b3:f4:b7:14:e6:61:d1:26:d7:55:75:55:42:bb:44: d0:b1:89:d2:9e:91:62:71:73:13:b3:71:03:30:aa:26:34:43: 11:73:9b:19:9f:da:73:c6:1c:a2:f3:13:b9:48:43:cf:e2:8a: a1:b1:d0:e9:75:6b:c7:8b:99:d1:94:a8:83:49:63:af:9f:30: 0f:bd:8d:a6:15:95:6b:3d:0f:ec:1d:3b:5e:fe:54:1f:34:c1: b6:74:07:43:0e:0a:9e:8d:5a:a1:35:e1:23:e7:0c:13:79:d7: d0:e8:33:b9:47:d5:86:ad:8b:cd:1d:7b:92:3f:b5:a5:e4:b4: e0:a4:e9:fa:10:59:94:f7:56:c9:a3:f6:c4:d2:a1:b0:d7:25: 0e:f0:52:dc:4b:f2:5b:0a:1e:7e:2e:e1:75:36:11:4f:e3:8e: 18:11:4b:9a:ad:71:a4:7b:16:18:a0:cd:74:1c:ee:c6:35:3b: 74:dd:76:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqlbLPVsamuv5wS9Np61fMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3 Mzk5ZTEwHhcNMjUxMTIxMDc1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDU5ODllZjQ1ZWZiMWFkZDBmMTM3M2E1OWZlMTA0NzQwOTZlMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfpQjGrnemNbh4a46AmvJBMFkZB1 273LtNybQkLahLl6n+LJHZaxSql5dpucxudo9quyIKGvImVugLg+p6TJg4940kEL P9zF5iL+3Vz9+zOL6UY8tSW86Y7+nHOzmF6ZIVBQG7j6rFcPDf94THImtLyWmGer PActVGfWDc2eqqqJdWgLHZqpy0r+nUf9/PyHoolGwe5zJUh9E02mxCoVe7aow3/O rsotVmxZQZlLQQdo8EPaMRH3/jPqeAlCvqtU/UImKbGhQEyMQYk2bbUC5PX3qBOa f4IxJI2t6ZneB9BtydhiEcjbKNmgl0gL+rbCxpRJB+vNuqBhUbhH1kSHhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK1Zie9F77Gt0PE3Oln+EEdAluI2MB8GA1UdIwQY MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt ZTg4ZmZmODJkNTUzLzEvclZtSjcwWHZzYTNROFRjNldmNFFSMENXNGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsHxwAwQB ubuYMA0GCSqGSIb3DQEBCwUAA4IBAQBfxzjPSArYQ+eT3SsWeqxJQJhUq5Gxhjba /0sYMqUI2cLYxLc/NN5JV/5wBIrpG1gF8h77rQyiwVBYzcaqAyb/zQ/VAQczP4Mn UGyz9LcU5mHRJtdVdVVCu0TQsYnSnpFicXMTs3EDMKomNEMRc5sZn9pzxhyi8xO5 SEPP4oqhsdDpdWvHi5nRlKiDSWOvnzAPvY2mFZVrPQ/sHTte/lQfNMG2dAdDDgqe jVqhNeEj5wwTedfQ6DO5R9WGrYvNHXuSP7Wl5LTgpOn6EFmU91bJo/bE0qGw1yUO 8FLcS/JbCh5+LuF1NhFP444YEUuarXGkexYYoM10HO7GNTt03XZi -----END CERTIFICATE-----Generated at Tue Dec 16 08:54:48 2025 by rpki-client