This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Q4iTKvatyBtNV-ESTSODv5WVBVc.roa File: Q4iTKvatyBtNV-ESTSODv5WVBVc.roa (raw, json) Hash identifier: vH44Yl+dAmBVaTX24gVYER5NTat7S47fZUMXBA7Ums0= Subject key identifier: 43:88:93:2A:F6:AD:C8:1B:4D:57:E1:12:4D:23:83:BF:95:95:05:57 Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195FF2FFCFF38A4F79C526BDA286C79DD29 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Q4iTKvatyBtNV-ESTSODv5WVBVc.roa Signing time: Fri 04 Apr 2025 05:04:49 +0000 ROA not before: Fri 04 Apr 2025 05:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 2001:67c:64:ffff:0:195:ff2f:760d/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ff:2f:fc:ff:38:a4:f7:9c:52:6b:da:28:6c:79:dd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Apr 4 05:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4388932af6adc81b4d57e1124d2383bf95950557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:7e:dc:8c:de:b0:a1:fe:16:48:33:04:ff: 0b:be:3c:da:04:5a:ed:8f:72:e7:fc:72:e7:8d:67: 58:a6:55:d3:42:49:d1:09:d1:bd:33:44:45:aa:12: 08:18:91:1c:94:d4:d3:81:ec:51:81:d6:d4:fe:84: c2:48:c8:27:1a:11:92:03:fe:20:9c:db:c2:a7:c6: 2b:79:fe:99:56:89:e6:3c:7b:a2:84:4a:59:69:66: 24:fb:ee:3f:7c:a4:0e:2e:61:0f:c3:ee:64:69:83: 50:88:8b:0f:53:34:ef:6f:23:c4:e7:cb:be:c9:d5: 00:35:fe:30:d1:fe:b3:7e:5c:03:98:86:25:d8:9f: 94:fd:1f:1a:9f:64:20:f4:5b:06:06:a2:ad:f6:46: 3d:47:e6:91:e9:d2:0a:a4:f1:60:e5:ed:59:96:a4: 01:a0:ed:7a:36:0e:4b:da:eb:b0:66:99:5f:e1:8c: 52:fb:2a:94:72:f4:97:0f:7a:72:88:88:67:4a:61: 91:07:23:56:83:af:ae:f8:a2:08:0f:1b:0c:ed:01: 22:a7:88:54:a9:05:05:0a:da:1f:14:d9:5f:f2:1b: 95:55:54:20:42:7b:43:fa:bf:20:65:81:58:e3:fd: e9:f2:87:b2:7f:86:99:ac:f4:11:6b:e2:a3:a9:05: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:88:93:2A:F6:AD:C8:1B:4D:57:E1:12:4D:23:83:BF:95:95:05:57 X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Q4iTKvatyBtNV-ESTSODv5WVBVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 2001:67c:64:ffff:0:195:ff2f:760d/128 Signature Algorithm: sha256WithRSAEncryption 39:4f:f6:e8:9a:96:74:90:64:07:08:d3:9d:ce:64:31:b6:74: 99:a9:e6:65:32:62:72:f6:c6:e5:ba:f3:d6:d6:46:7b:3f:f4: bf:cc:69:f2:e2:dc:5c:fa:e6:b3:42:a3:d2:44:3e:a9:33:fe: 29:ef:88:22:4b:78:73:a4:d3:d7:b8:a4:f3:d5:25:be:51:54: df:68:65:af:7d:9c:4b:cc:8b:11:6d:25:eb:1a:57:82:4d:64: c2:a8:26:14:27:bc:18:c3:cb:d0:de:ad:69:a7:68:e4:b8:24: fa:4d:a9:64:f5:fb:4a:93:10:dc:14:77:3d:7a:78:82:cc:5a: f7:c5:2c:03:a7:13:91:8c:66:2a:19:71:da:4d:1e:d9:4c:16: ac:4e:f2:1d:39:53:5e:b2:42:11:d0:18:3f:90:4b:04:46:89: 99:e6:d1:68:5a:46:0e:5f:e3:a4:fc:4d:e4:4f:cc:9b:18:43: be:52:d8:f1:c4:7b:71:71:99:ee:f3:9c:a4:62:3a:54:8a:94: be:fb:ad:17:8c:43:18:81:27:33:a7:3b:4c:84:2c:b9:fc:9c: e7:fd:fe:1b:29:26:9e:c3:e3:83:9a:e2:22:d0:93:64:96:ca: 10:5b:03:da:1c:0d:e3:24:ad:b7:6d:99:39:8f:f1:3f:8d:03: 32:f9:e6:cc -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZX/L/z/OKT3nFJr2ihsed0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwNDA0MDUwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mzg4OTMyYWY2YWRjODFiNGQ1N2UxMTI0ZDIzODNiZjk1OTUwNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8p+3IzesKH+FkgzBP8LvjzaBFrt j3Ln/HLnjWdYplXTQknRCdG9M0RFqhIIGJEclNTTgexRgdbU/oTCSMgnGhGSA/4g nNvCp8Yref6ZVonmPHuihEpZaWYk++4/fKQOLmEPw+5kaYNQiIsPUzTvbyPE58u+ ydUANf4w0f6zflwDmIYl2J+U/R8an2Qg9FsGBqKt9kY9R+aR6dIKpPFg5e1ZlqQB oO16Ng5L2uuwZplf4YxS+yqUcvSXD3pyiIhnSmGRByNWg6+u+KIIDxsM7QEip4hU qQUFCtofFNlf8huVVVQgQntD+r8gZYFY4/3p8oeyf4aZrPQRa+KjqQWqoQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFEOIkyr2rcgbTVfhEk0jg7+VlQVXMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvUTRpVEt2YXR5QnROVi1FU1RTT0R2NVdWQlZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGV3GzZ3wMRACABBnwAZP//AAABlf8vdg0wDQYJKoZIhvcNAQELBQADggEB ADlP9uialnSQZAcI053OZDG2dJmp5mUyYnL2xuW689bWRns/9L/MafLi3Fz65rNC o9JEPqkz/inviCJLeHOk09e4pPPVJb5RVN9oZa99nEvMixFtJesaV4JNZMKoJhQn vBjDy9DerWmnaOS4JPpNqWT1+0qTENwUdz16eILMWvfFLAOnE5GMZioZcdpNHtlM FqxO8h05U16yQhHQGD+QSwRGiZnm0WhaRg5f46T8TeRPzJsYQ75S2PHEe3Fxme7z nKRiOlSKlL77rReMQxiBJzOnO0yELLn8nOf9/hspJp7D44Oa4iLQk2SWyhBbA9oc DeMkrbdtmTmP8T+NAzL55sw= -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:01 2025 by rpki-client