This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/BPq0Nmrt_PQ3GzCt_SSxfdgoFBo.roa File: BPq0Nmrt_PQ3GzCt_SSxfdgoFBo.roa (raw, json) Hash identifier: enzZjsBlG02BWjqypxH+4zXV4takT41Y+mlzZsnAjZo= Subject key identifier: 04:FA:B4:36:6A:ED:FC:F4:37:1B:30:AD:FD:24:B1:7D:D8:28:14:1A Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081 Certificate serial: 019B0325461056CEA3C0036FF40D325F73D9 Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/BPq0Nmrt_PQ3GzCt_SSxfdgoFBo.roa Signing time: Tue 09 Dec 2025 12:45:33 +0000 ROA not before: Tue 09 Dec 2025 12:45:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16190 IP address blocks: 91.195.254.0/23 maxlen: 24 91.195.255.0/24 maxlen: 24 91.198.108.0/23 maxlen: 23 91.198.108.0/24 maxlen: 24 91.198.109.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:25:46:10:56:ce:a3:c0:03:6f:f4:0d:32:5f:73:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081 Validity Not Before: Dec 9 12:45:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=04fab4366aedfcf4371b30adfd24b17dd828141a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:c8:f8:4a:d3:3c:d8:a1:88:b8:9e:df:27: 35:27:da:2c:07:20:f9:01:4c:1a:c6:dd:04:2d:1e: 2b:66:3a:89:66:cc:ed:03:00:fa:ad:9a:36:93:45: 92:63:43:cf:5a:a4:c6:43:71:e6:e6:fa:af:8b:a6: 6d:4c:7c:f7:34:39:1e:f6:32:af:11:38:e2:6c:f4: 2d:8c:4b:76:22:0b:3f:e2:29:8a:04:1c:5a:5e:f0: c3:10:25:09:79:5b:81:97:41:41:6d:2f:60:98:e5: 4a:ae:93:d2:ff:f3:c9:46:71:cb:0a:be:de:48:76: 3b:b3:19:8d:15:13:1a:3d:ea:99:e5:eb:82:37:aa: 04:e1:41:33:4e:aa:2f:bd:f4:3a:c0:c7:c8:2e:84: dc:cd:17:94:02:04:a8:03:79:30:a9:42:c4:ba:4b: c9:ea:3c:81:42:99:3d:93:29:f3:57:a6:e8:bd:85: b1:dc:a1:f3:86:b8:e8:45:61:fe:8d:83:c3:f2:83: fc:ad:c0:56:25:d0:f3:ad:20:ac:66:35:70:92:60: d6:f6:93:46:bd:24:41:fe:07:06:af:29:b1:dd:e8: 8e:c2:ed:01:7c:1d:f5:8e:25:2e:73:a1:00:96:a8: c9:ef:47:19:24:d9:52:cc:32:79:5a:2f:48:3e:a9: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FA:B4:36:6A:ED:FC:F4:37:1B:30:AD:FD:24:B1:7D:D8:28:14:1A X509v3 Authority Key Identifier: keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/BPq0Nmrt_PQ3GzCt_SSxfdgoFBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.254.0/23 91.198.108.0/23 Signature Algorithm: sha256WithRSAEncryption 04:24:fa:18:6f:cc:8d:82:4a:68:8c:5e:df:10:26:77:f7:55: d7:c7:2e:60:9c:27:09:57:7f:b7:f1:fb:de:af:07:40:11:bd: e3:c5:c4:60:15:2b:64:3a:26:b5:02:86:e5:de:23:1f:19:4e: a1:c4:81:eb:aa:f7:0e:f9:cb:f0:44:ee:68:1b:14:de:31:41: 0d:84:75:6c:9e:8e:08:80:b3:1f:c0:67:16:4c:6f:99:d4:e5: a2:6a:8e:8b:6c:81:1d:1f:db:d5:16:ff:76:9c:ca:8c:88:72: 9f:02:4f:99:d7:d0:00:a5:7e:9d:c0:09:6b:aa:d7:14:56:43: dc:e5:e2:e8:bb:26:6a:4c:5c:61:44:c9:a0:68:79:4b:f5:f8: 99:90:1b:82:3e:0e:fe:a9:6d:98:62:8f:d5:d2:38:6b:78:4c: 0b:50:0e:b5:66:1b:3e:6b:cf:8f:44:b6:d6:7b:ca:db:d2:87: 8f:e8:0d:f0:32:f5:b1:ff:05:0b:08:d3:92:9a:5c:49:ad:fa: 6b:67:88:78:d9:03:46:db:9a:6d:78:57:17:82:54:3c:b7:de: 89:fa:be:34:28:15:68:57:1d:9e:11:2c:ef:f4:1c:ba:68:7e: e2:d8:f7:73:bd:ef:e2:73:cd:ec:16:cd:f8:c3:fb:05:3d:c5: db:ef:1d:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsDJUYQVs6jwANv9A0yX3PZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTBjYTRhYWIyYTNmOGFiYzZjOTczYWE3YzBmYTEzZjI1 NzEwODEwHhcNMjUxMjA5MTI0NTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGZhYjQzNjZhZWRmY2Y0MzcxYjMwYWRmZDI0YjE3ZGQ4MjgxNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25bI+ErTPNihiLie3yc1J9osByD5 AUwaxt0ELR4rZjqJZsztAwD6rZo2k0WSY0PPWqTGQ3Hm5vqvi6ZtTHz3NDke9jKv ETjibPQtjEt2Igs/4imKBBxaXvDDECUJeVuBl0FBbS9gmOVKrpPS//PJRnHLCr7e SHY7sxmNFRMaPeqZ5euCN6oE4UEzTqovvfQ6wMfILoTczReUAgSoA3kwqULEukvJ 6jyBQpk9kynzV6bovYWx3KHzhrjoRWH+jYPD8oP8rcBWJdDzrSCsZjVwkmDW9pNG vSRB/gcGrymx3eiOwu0BfB31jiUuc6EAlqjJ70cZJNlSzDJ5Wi9IPqkHBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAT6tDZq7fz0Nxswrf0ksX3YKBQaMB8GA1UdIwQY MBaAFCRQykqrKj+KvGyXOqfA+hPyVxCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZES1Nxc3FQNHE4YkpjNnA4RDZFX0pYRUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMTljNmYtZTMwZi00YTllLWFjYzAt ZTBkNTc2ZDU1NzdhLzEvQlBxME5tcnRfUFEzR3pDdF9TU3hmZGdvRkJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yMTljNmYtZTMwZi00YTllLWFjYzAtZTBkNTc2ZDU1Nzdh LzEvSkZES1Nxc3FQNHE4YkpjNnA4RDZFX0pYRUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8P+AwQB W8ZsMA0GCSqGSIb3DQEBCwUAA4IBAQAEJPoYb8yNgkpojF7fECZ391XXxy5gnCcJ V3+38fverwdAEb3jxcRgFStkOia1Aobl3iMfGU6hxIHrqvcO+cvwRO5oGxTeMUEN hHVsno4IgLMfwGcWTG+Z1OWiao6LbIEdH9vVFv92nMqMiHKfAk+Z19AApX6dwAlr qtcUVkPc5eLouyZqTFxhRMmgaHlL9fiZkBuCPg7+qW2YYo/V0jhreEwLUA61Zhs+ a8+PRLbWe8rb0oeP6A3wMvWx/wULCNOSmlxJrfprZ4h42QNG25pteFcXglQ8t96J +r40KBVoVx2eESzv9By6aH7i2Pdzve/ic83sFs34w/sFPcXb7x1Q -----END CERTIFICATE-----Generated at Tue Dec 23 17:39:58 2025 by rpki-client