This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xhMvo9XFot2GoTWteskKHc7kvsU.roa File: xhMvo9XFot2GoTWteskKHc7kvsU.roa (raw, json) Hash identifier: CXIVcqtXnPK6Px608D+IBtoOD+YPDuW90msIH4HCjXg= Subject key identifier: C6:13:2F:A3:D5:C5:A2:DD:86:A1:35:AD:7A:C9:0A:1D:CE:E4:BE:C5 Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3 Certificate serial: 019A901E5327E17E557FCE7527DC505856D6 Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xhMvo9XFot2GoTWteskKHc7kvsU.roa Signing time: Mon 17 Nov 2025 04:41:37 +0000 ROA not before: Mon 17 Nov 2025 04:41:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203807 IP address blocks: 2a0e:8f02:2210::/44 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:1e:53:27:e1:7e:55:7f:ce:75:27:dc:50:58:56:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3 Validity Not Before: Nov 17 04:41:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6132fa3d5c5a2dd86a135ad7ac90a1dcee4bec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:17:e3:33:23:fd:ee:13:4b:10:06:0f:ef: e0:0d:b1:b6:d7:52:f4:75:da:f3:38:bd:2f:be:0e: 54:e4:7a:a7:76:13:eb:a8:fa:fe:87:cc:95:86:cc: 67:94:ae:10:36:73:60:d0:4c:b5:d2:01:9d:89:9f: 44:34:f9:26:9e:62:1d:81:2b:36:59:7f:64:ff:f1: 08:22:0c:64:05:a9:9e:d5:b3:44:5b:0f:64:9c:88: 1e:31:37:15:30:87:0e:9d:a5:6b:cc:bb:a4:b3:4a: 0c:35:cb:69:19:f3:bf:cb:d7:67:92:80:cb:64:f5: 2c:33:83:32:bd:0e:b9:89:a4:63:9b:18:0d:99:3e: a5:0a:93:dc:7c:b9:6c:57:b0:b5:f7:e0:db:31:8a: c2:30:77:ae:ae:f3:c0:84:87:e6:ad:aa:0f:19:53: 46:30:21:c7:4c:a9:a8:61:fb:c9:78:62:b0:49:5a: 84:a4:ca:1c:ba:e6:8d:55:05:02:c3:ae:18:7e:c7: d6:c8:07:b2:3d:b6:ce:75:08:1e:61:56:5c:c9:eb: 25:7a:78:ee:57:b7:22:6a:af:98:82:5a:16:7b:03: cc:ec:08:89:a1:f7:80:1d:11:73:65:ed:1b:cf:b2: e5:1d:8e:4a:63:61:47:46:f8:cc:ab:28:19:ff:3c: a5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:2F:A3:D5:C5:A2:DD:86:A1:35:AD:7A:C9:0A:1D:CE:E4:BE:C5 X509v3 Authority Key Identifier: keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xhMvo9XFot2GoTWteskKHc7kvsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:2210::/44 Signature Algorithm: sha256WithRSAEncryption 78:55:71:1a:12:f7:2c:e4:5a:5c:df:51:11:0b:d7:19:de:2b: 78:bd:f7:ed:f7:4e:89:3f:6e:80:71:79:bc:20:77:f9:e3:a9: c3:09:9c:3b:8a:8d:8d:78:a9:2b:c3:e1:75:2e:65:3e:92:ec: 8c:19:56:96:79:5e:7a:db:18:12:f0:e0:c8:51:c1:06:26:80: 57:7b:ef:f3:01:d6:b3:35:de:b0:d8:c9:09:64:75:06:5e:fd: 9d:87:a6:1f:63:63:d4:92:2e:14:18:39:c4:36:a0:f9:7d:98: 0b:1d:f9:06:ed:b3:d0:aa:4d:30:aa:e7:f0:8c:4d:aa:80:59: cc:ee:5f:6a:64:24:3d:f1:cd:45:ab:d5:4f:9c:17:ec:8b:7e: a6:59:79:a3:69:97:03:31:f3:37:bd:54:9e:07:b6:bf:5b:dc: c2:94:7e:e9:4a:02:31:c2:86:0d:c0:5f:e2:09:29:ea:ca:20: f5:7e:24:5d:c8:26:22:98:f7:82:d9:d7:12:4c:97:9b:ed:c7: 6b:bb:91:54:70:66:8a:e0:ba:f4:05:2b:48:af:bf:1a:05:1a: c4:28:1e:e6:a4:8e:a8:cd:f2:e3:e0:8c:98:ac:2d:f0:20:25: c7:8d:55:8a:8b:af:48:48:c2:62:39:c3:7c:23:1f:42:19:26: 54:fd:39:1b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqQHlMn4X5Vf851J9xQWFbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx MDBiZjMwHhcNMjUxMTE3MDQ0MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjEzMmZhM2Q1YzVhMmRkODZhMTM1YWQ3YWM5MGExZGNlZTRiZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIYX4zMj/e4TSxAGD+/gDbG211L0 ddrzOL0vvg5U5HqndhPrqPr+h8yVhsxnlK4QNnNg0Ey10gGdiZ9ENPkmnmIdgSs2 WX9k//EIIgxkBame1bNEWw9knIgeMTcVMIcOnaVrzLuks0oMNctpGfO/y9dnkoDL ZPUsM4MyvQ65iaRjmxgNmT6lCpPcfLlsV7C19+DbMYrCMHeurvPAhIfmraoPGVNG MCHHTKmoYfvJeGKwSVqEpMocuuaNVQUCw64YfsfWyAeyPbbOdQgeYVZcyeslenju V7ciaq+YgloWewPM7AiJofeAHRFzZe0bz7LlHY5KY2FHRvjMqygZ/zyl6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMYTL6PVxaLdhqE1rXrJCh3O5L7FMB8GA1UdIwQY MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt ZDJkN2YyYmI2NGRmLzEveGhNdm85WEZvdDJHb1RXdGVza0tIYzdrdnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiIQ MA0GCSqGSIb3DQEBCwUAA4IBAQB4VXEaEvcs5Fpc31ERC9cZ3it4vfft906JP26A cXm8IHf546nDCZw7io2NeKkrw+F1LmU+kuyMGVaWeV562xgS8ODIUcEGJoBXe+/z AdazNd6w2MkJZHUGXv2dh6YfY2PUki4UGDnENqD5fZgLHfkG7bPQqk0wqufwjE2q gFnM7l9qZCQ98c1Fq9VPnBfsi36mWXmjaZcDMfM3vVSeB7a/W9zClH7pSgIxwoYN wF/iCSnqyiD1fiRdyCYimPeC2dcSTJeb7cdru5FUcGaK4Lr0BStIr78aBRrEKB7m pI6ozfLj4IyYrC3wICXHjVWKi69ISMJiOcN8Ix9CGSZU/Tkb -----END CERTIFICATE-----Generated at Sun Dec 14 19:11:16 2025 by rpki-client