This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/Xd_8P49TFZdJAZa6r0g8aHlB83M.roa File: Xd_8P49TFZdJAZa6r0g8aHlB83M.roa (raw, json) Hash identifier: EZwG/9+pFx+ntZrUzCFyWFtpH78z7DhQv6+GIcUg07k= Subject key identifier: 5D:DF:FC:3F:8F:53:15:97:49:01:96:BA:AF:48:3C:68:79:41:F3:73 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 019AC53414407F815311DC1C9382379614B6 Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/Xd_8P49TFZdJAZa6r0g8aHlB83M.roa Signing time: Thu 27 Nov 2025 12:05:15 +0000 ROA not before: Thu 27 Nov 2025 12:05:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59432 IP address blocks: 78.143.253.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:34:14:40:7f:81:53:11:dc:1c:93:82:37:96:14:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Nov 27 12:05:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5ddffc3f8f531597490196baaf483c687941f373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:30:d0:62:76:e7:da:ae:b0:0e:92:75:0b: e9:01:5a:2b:57:f7:53:1e:f9:8e:11:58:a5:61:8f: de:aa:1d:b0:a9:c4:a7:28:8f:b8:67:f8:5d:9a:db: bc:2e:58:15:d2:b6:fc:b6:bf:8d:c5:11:8c:8f:d9: d4:d5:3a:6b:34:e9:11:a2:fc:ac:de:91:af:b5:13: 08:87:55:49:0b:d6:67:5b:a9:14:af:56:be:3f:ea: ca:8b:85:cd:ff:d6:cd:69:92:c9:8d:b5:2e:61:7f: cc:ed:03:dc:fc:03:75:3d:26:f1:06:ef:6d:9c:29: d2:0e:68:83:f0:73:d5:49:dd:35:70:9d:89:bb:ff: 91:00:d1:eb:c1:d7:9c:21:f8:eb:05:b1:1b:96:f7: c6:70:4e:71:86:4e:5a:cc:fe:b8:c1:b2:36:9e:27: ba:2f:7d:37:6e:86:e5:bd:6c:b0:39:0f:58:ab:20: ea:3d:7e:9e:19:e0:57:5c:51:cb:41:8c:1a:cd:aa: 44:57:c6:6c:07:da:bf:60:d7:bf:79:f9:b4:d1:f4: 86:4d:13:c2:2c:d0:aa:38:96:30:0c:64:91:a0:52: fe:2c:42:e3:75:34:74:14:0e:b8:4f:0c:87:e4:a6: f3:ff:3e:ba:ab:cd:f3:fa:56:ee:3e:5b:57:7b:fc: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DF:FC:3F:8F:53:15:97:49:01:96:BA:AF:48:3C:68:79:41:F3:73 X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/Xd_8P49TFZdJAZa6r0g8aHlB83M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.143.253.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:fd:d3:53:03:63:93:e6:a1:b9:d2:6d:4e:46:68:11:a7:c9: 1a:0c:0a:d8:7f:9e:b4:da:8d:45:fa:b1:1b:4e:96:18:59:b6: 06:50:e7:74:c2:b6:1b:87:bb:cf:e8:d3:17:9a:e0:23:7b:63: ea:fb:39:82:bc:d2:05:cb:2c:a1:8a:f6:6e:d5:a5:eb:4b:21: a8:4e:2f:74:f8:dd:ad:8a:25:33:e0:bc:8a:46:71:3c:24:53: ea:3d:50:32:0b:ff:39:d3:eb:98:90:45:62:48:e1:53:e1:b8: 17:9d:c6:c2:7f:c4:8e:9d:50:31:57:89:bd:fe:a7:55:96:8c: 55:a9:12:d8:d9:f7:aa:40:9c:2c:07:1b:fc:59:5b:6f:a8:cc: 24:26:fe:45:02:52:cf:0a:7b:f5:30:8d:fd:cb:6a:d8:2e:84: db:86:3c:80:84:b8:b4:86:56:8c:af:af:26:e4:b3:11:13:37: d4:31:2d:ca:2e:40:04:09:29:6a:27:fd:a1:ba:6a:15:0b:96: 72:2f:f9:e7:c9:fb:5a:24:d0:84:90:39:2c:31:6c:48:64:85: 32:d4:39:ea:91:4c:f7:ba:88:cf:80:ef:a1:0f:29:24:3f:22: fe:28:52:20:c7:51:f5:49:97:3f:c7:ae:2a:ac:ec:46:d9:a0: ef:4f:dc:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrFNBRAf4FTEdwck4I3lhS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUxMTI3MTIwNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGRmZmMzZjhmNTMxNTk3NDkwMTk2YmFhZjQ4M2M2ODc5NDFmMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLQw0GJ259qusA6SdQvpAVorV/dT HvmOEVilYY/eqh2wqcSnKI+4Z/hdmtu8LlgV0rb8tr+NxRGMj9nU1TprNOkRovys 3pGvtRMIh1VJC9ZnW6kUr1a+P+rKi4XN/9bNaZLJjbUuYX/M7QPc/AN1PSbxBu9t nCnSDmiD8HPVSd01cJ2Ju/+RANHrwdecIfjrBbEblvfGcE5xhk5azP64wbI2nie6 L303boblvWywOQ9YqyDqPX6eGeBXXFHLQYwazapEV8ZsB9q/YNe/efm00fSGTRPC LNCqOJYwDGSRoFL+LELjdTR0FA64TwyH5Kbz/z66q83z+lbuPltXe/zBcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3f/D+PUxWXSQGWuq9IPGh5QfNzMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvWGRfOFA0OVRGWmRKQVphNnIwZzhhSGxCODNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo/9MA0G CSqGSIb3DQEBCwUAA4IBAQBP/dNTA2OT5qG50m1ORmgRp8kaDArYf5602o1F+rEb TpYYWbYGUOd0wrYbh7vP6NMXmuAje2Pq+zmCvNIFyyyhivZu1aXrSyGoTi90+N2t iiUz4LyKRnE8JFPqPVAyC/850+uYkEViSOFT4bgXncbCf8SOnVAxV4m9/qdVloxV qRLY2feqQJwsBxv8WVtvqMwkJv5FAlLPCnv1MI39y2rYLoTbhjyAhLi0hlaMr68m 5LMREzfUMS3KLkAECSlqJ/2humoVC5ZyL/nnyftaJNCEkDksMWxIZIUy1DnqkUz3 uojPgO+hDykkPyL+KFIgx1H1SZc/x64qrOxG2aDvT9wq -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:23 2025 by rpki-client