This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/S24p7IKAbp0I3srIMGlekoZsG2c.roa File: S24p7IKAbp0I3srIMGlekoZsG2c.roa (raw, json) Hash identifier: K8tsm7Ugo7OZooZNFP7GZcnatja9KQIYFUhCR7sOKl8= Subject key identifier: 4B:6E:29:EC:82:80:6E:9D:08:DE:CA:C8:30:69:5E:92:86:6C:1B:67 Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195F033ED3CA4507197CE10974CEA57C7A4 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/S24p7IKAbp0I3srIMGlekoZsG2c.roa Signing time: Tue 01 Apr 2025 07:14:49 +0000 ROA not before: Tue 01 Apr 2025 07:14:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:f0:33:ed:3c:a4:50:71:97:ce:10:97:4c:ea:57:c7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Apr 1 07:14:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b6e29ec82806e9d08decac830695e92866c1b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:fa:63:75:cb:6a:11:88:c2:a3:b2:78:64: 18:8c:1d:da:e5:74:01:a2:cb:2b:ed:81:61:34:25: 17:3a:f4:2f:4f:79:a0:a4:5c:d6:ec:1f:b2:65:89: 49:fe:e3:48:15:0d:db:69:38:f5:82:82:9c:59:85: 34:f0:f4:49:97:dd:00:2b:2b:10:a3:94:4c:a5:7f: 59:47:0b:46:0f:96:e9:52:6e:48:54:12:4f:a8:d1: 94:44:6e:b2:b5:df:34:e4:e0:29:80:b0:44:a7:f0: 68:2e:69:1f:f9:7d:74:d0:12:e1:44:a9:98:d7:a2: f7:48:e5:c0:2e:12:e0:df:3d:d3:a0:74:5d:b1:aa: 10:89:c9:8b:99:e2:65:c1:eb:dc:63:6f:d3:44:9f: e2:fb:07:f8:b8:41:8f:79:96:f7:a6:5e:75:07:c6: bb:02:8f:2f:20:a0:c9:54:3c:e9:0e:24:c5:91:1c: eb:6a:ed:cd:a0:08:78:d2:bc:1b:e9:29:35:dc:b6: e6:bb:bb:77:0a:2e:bb:cc:e9:67:56:dc:e1:47:b5: b8:4b:1d:4f:29:c1:79:13:3b:fc:d8:8f:3c:30:f7: ad:0a:ca:a1:24:ff:c8:88:c7:0f:5d:cc:02:8a:ea: 80:27:55:71:62:f6:1f:a9:55:fe:d3:08:4a:4b:70: ef:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6E:29:EC:82:80:6E:9D:08:DE:CA:C8:30:69:5E:92:86:6C:1B:67 X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/S24p7IKAbp0I3srIMGlekoZsG2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 Signature Algorithm: sha256WithRSAEncryption 13:c4:e2:e4:e8:bc:50:17:4c:c8:0d:98:fa:8b:7e:b0:2a:01: ea:41:56:45:e3:2e:9a:17:7b:96:b8:a6:01:02:a8:e9:7c:c4: 5d:00:6d:0f:2f:39:88:aa:ba:44:b0:6a:b5:ef:29:d6:5e:00: a1:d8:07:55:bd:5f:b9:77:4b:cd:fb:97:ac:c3:bd:37:df:7d: 15:9d:11:f3:93:c3:2d:64:40:87:40:29:67:7a:88:a7:aa:7f: 65:ec:13:fa:94:3a:b5:f5:d0:1a:e4:c5:0d:c8:7a:0f:3f:3a: a9:a9:3b:30:f0:f1:b5:46:00:8b:49:54:fa:9d:69:23:d0:61: 94:a3:48:a7:e5:cb:00:ff:4b:81:c1:e8:07:8b:1c:7b:7f:2c: 69:48:31:ec:62:c6:03:d5:84:94:39:55:40:bc:1f:a5:35:32: d9:80:4e:58:2c:d1:03:ac:ae:8f:51:da:0e:4b:a2:38:1e:97: f9:4d:8e:32:8c:e7:ea:08:c6:98:09:44:2a:1e:90:65:f4:a9: c0:87:c8:18:2c:7f:a7:ee:c4:58:c8:f7:a4:26:36:8a:ed:80: 14:dc:2e:7d:02:cf:b1:36:3d:f5:33:85:5a:e7:e0:76:d1:42: 79:8f:fc:3a:30:04:ab:ab:ab:b3:9b:90:4b:50:c0:27:46:70: b6:e9:3c:83 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXwM+08pFBxl84Ql0zqV8ekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwNDAxMDcxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjZlMjllYzgyODA2ZTlkMDhkZWNhYzgzMDY5NWU5Mjg2NmMxYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzf6Y3XLahGIwqOyeGQYjB3a5XQB ossr7YFhNCUXOvQvT3mgpFzW7B+yZYlJ/uNIFQ3baTj1goKcWYU08PRJl90AKysQ o5RMpX9ZRwtGD5bpUm5IVBJPqNGURG6ytd805OApgLBEp/BoLmkf+X100BLhRKmY 16L3SOXALhLg3z3ToHRdsaoQicmLmeJlwevcY2/TRJ/i+wf4uEGPeZb3pl51B8a7 Ao8vIKDJVDzpDiTFkRzrau3NoAh40rwb6Sk13Lbmu7t3Ci67zOlnVtzhR7W4Sx1P KcF5Ezv82I88MPetCsqhJP/IiMcPXcwCiuqAJ1VxYvYfqVX+0whKS3Dv+QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFEtuKeyCgG6dCN7KyDBpXpKGbBtnMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvUzI0cDdJS0FicDBJM3NySU1HbGVrb1pzRzJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAE8Ti5Oi8UBdMyA2Y+ot+sCoB 6kFWReMumhd7lrimAQKo6XzEXQBtDy85iKq6RLBqte8p1l4AodgHVb1fuXdLzfuX rMO9N999FZ0R85PDLWRAh0ApZ3qIp6p/ZewT+pQ6tfXQGuTFDch6Dz86qak7MPDx tUYAi0lU+p1pI9BhlKNIp+XLAP9LgcHoB4sce38saUgx7GLGA9WElDlVQLwfpTUy 2YBOWCzRA6yuj1HaDkuiOB6X+U2OMozn6gjGmAlEKh6QZfSpwIfIGCx/p+7EWMj3 pCY2iu2AFNwufQLPsTY99TOFWufgdtFCeY/8OjAEq6urs5uQS1DAJ0Zwtuk8gw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:59 2025 by rpki-client