This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Z1mZf1l9tcKChtZ0t4dmzp2F-80.roa File: Z1mZf1l9tcKChtZ0t4dmzp2F-80.roa (raw, json) Hash identifier: FqSZLp9ze7WT2GoGC70XZK1TB3ExZSAnqyt35K03ql0= Subject key identifier: 67:59:99:7F:59:7D:B5:C2:82:86:D6:74:B7:87:66:CE:9D:85:FB:CD Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3 Certificate serial: 019A54490610A0BE6FC6E77DC02CE3488687 Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Z1mZf1l9tcKChtZ0t4dmzp2F-80.roa Signing time: Wed 05 Nov 2025 13:51:03 +0000 ROA not before: Wed 05 Nov 2025 13:51:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204214 IP address blocks: 2a0e:8f02:f078::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:49:06:10:a0:be:6f:c6:e7:7d:c0:2c:e3:48:86:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3 Validity Not Before: Nov 5 13:51:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6759997f597db5c28286d674b78766ce9d85fbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:c3:41:21:e2:8e:7e:bf:ae:d1:92:65:4b: 10:02:81:a4:c0:66:9e:9b:50:34:f2:72:65:66:b1: 6d:d1:44:22:f0:74:68:af:7a:f9:45:48:73:da:a4: 72:b7:b4:9d:6f:7e:94:91:11:34:0e:b1:d3:47:dd: b9:66:33:53:4d:e4:f1:dc:5f:d8:72:44:eb:68:90: 42:a1:85:c0:8f:54:86:69:0a:b7:a7:b6:6c:46:2a: 9a:37:3c:71:82:ea:f3:d2:9a:e2:41:66:0b:ed:8e: e2:26:35:c6:d9:58:d0:e1:6c:55:8e:1f:a3:fa:2c: 4b:34:ba:ac:32:00:b3:0e:c0:17:5d:2e:54:24:34: 5f:ee:06:5d:8b:9e:d9:3b:c5:5e:79:c3:4d:cf:73: c5:0a:c9:83:63:25:06:6a:74:da:55:58:95:7e:6c: 58:04:6a:57:3e:c9:2e:67:b5:49:03:d6:57:54:47: f0:3f:af:e1:5b:d0:2c:2c:bc:8e:c2:19:b7:a7:34: 5c:1c:04:65:c9:45:79:c4:c6:aa:1c:5b:3c:2b:02: 86:c2:75:5c:83:52:d2:b5:f5:71:2d:de:ce:dc:cf: 2d:97:e5:47:bf:59:9f:29:9b:6e:5e:5d:b1:68:28: 3b:b8:3b:a2:38:66:be:fe:c5:0c:8b:56:3e:f7:08: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:59:99:7F:59:7D:B5:C2:82:86:D6:74:B7:87:66:CE:9D:85:FB:CD X509v3 Authority Key Identifier: keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Z1mZf1l9tcKChtZ0t4dmzp2F-80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f078::/48 Signature Algorithm: sha256WithRSAEncryption a2:80:c6:a1:60:67:6a:d1:41:cc:02:fd:d5:e3:20:2b:e6:43: e2:87:fd:eb:f3:2d:5a:43:15:6e:11:50:c2:9c:8d:d8:4c:d8: ad:56:c8:14:01:c2:96:14:9f:3c:88:b5:ea:19:95:c0:05:6f: f9:11:00:87:ca:a1:09:6d:1e:53:38:0f:f4:5b:e5:22:7c:4d: 3b:08:8f:4e:88:d4:34:4a:66:5d:c6:27:e9:1a:de:ae:11:6f: a3:ba:34:7a:fa:d6:7a:cc:11:a6:06:39:e9:b1:a2:63:4a:cb: 8a:f8:f8:4b:a0:a7:cf:0b:9a:46:87:91:ed:59:d7:5d:c0:a6: b6:dc:c0:78:36:37:65:f6:0e:b4:41:fd:2e:f8:9c:2a:f5:a3: a6:47:53:71:7e:d0:39:84:c5:9c:b7:98:5c:81:ea:69:7c:d5: 48:95:b7:15:05:50:f7:e5:76:41:20:f4:15:92:b6:3f:4a:92: 7a:f7:dd:56:3c:42:4b:b6:bc:01:14:6f:4b:b6:f1:ff:90:64: 24:ee:84:8d:fa:2f:90:22:82:2b:0b:52:14:8c:09:7a:31:3a: 4a:eb:dc:19:a1:1c:e2:e5:bb:f5:0f:61:18:07:e6:64:11:29: fb:14:28:5c:9a:28:ba:2f:b7:79:f7:24:a2:99:76:cf:3b:7e: 02:72:60:bf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZpUSQYQoL5vxud9wCzjSIaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx MDBiZjMwHhcNMjUxMTA1MTM1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzU5OTk3ZjU5N2RiNWMyODI4NmQ2NzRiNzg3NjZjZTlkODVmYmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxjDQSHijn6/rtGSZUsQAoGkwGae m1A08nJlZrFt0UQi8HRor3r5RUhz2qRyt7Sdb36UkRE0DrHTR925ZjNTTeTx3F/Y ckTraJBCoYXAj1SGaQq3p7ZsRiqaNzxxgurz0priQWYL7Y7iJjXG2VjQ4WxVjh+j +ixLNLqsMgCzDsAXXS5UJDRf7gZdi57ZO8VeecNNz3PFCsmDYyUGanTaVViVfmxY BGpXPskuZ7VJA9ZXVEfwP6/hW9AsLLyOwhm3pzRcHARlyUV5xMaqHFs8KwKGwnVc g1LStfVxLd7O3M8tl+VHv1mfKZtuXl2xaCg7uDuiOGa+/sUMi1Y+9wg2RQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGdZmX9ZfbXCgobWdLeHZs6dhfvNMB8GA1UdIwQY MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt ZDJkN2YyYmI2NGRmLzEvWjFtWmYxbDl0Y0tDaHRaMHQ0ZG16cDJGLTgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvB4 MA0GCSqGSIb3DQEBCwUAA4IBAQCigMahYGdq0UHMAv3V4yAr5kPih/3r8y1aQxVu EVDCnI3YTNitVsgUAcKWFJ88iLXqGZXABW/5EQCHyqEJbR5TOA/0W+UifE07CI9O iNQ0SmZdxifpGt6uEW+jujR6+tZ6zBGmBjnpsaJjSsuK+PhLoKfPC5pGh5HtWddd wKa23MB4Njdl9g60Qf0u+Jwq9aOmR1NxftA5hMWct5hcgeppfNVIlbcVBVD35XZB IPQVkrY/SpJ6991WPEJLtrwBFG9LtvH/kGQk7oSN+i+QIoIrC1IUjAl6MTpK69wZ oRzi5bv1D2EYB+ZkESn7FChcmii6L7d59ySimXbPO34CcmC/ -----END CERTIFICATE-----Generated at Sun Dec 14 19:11:15 2025 by rpki-client