This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/S9UHxeevZVr51OXOpXBGH8nocN0.roa File: S9UHxeevZVr51OXOpXBGH8nocN0.roa (raw, json) Hash identifier: Rxb4anp81Z1emUZ1MAQG5sTDTV320VNgxcIpPDCWwyQ= Subject key identifier: 4B:D5:07:C5:E7:AF:65:5A:F9:D4:E5:CE:A5:70:46:1F:C9:E8:70:DD Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195CCF9FB4D3906564CF79330722BF451C8 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/S9UHxeevZVr51OXOpXBGH8nocN0.roa Signing time: Tue 25 Mar 2025 11:04:49 +0000 ROA not before: Tue 25 Mar 2025 11:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:ccf9:5e0f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:cc:f9:fb:4d:39:06:56:4c:f7:93:30:72:2b:f4:51:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Mar 25 11:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4bd507c5e7af655af9d4e5cea570461fc9e870dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:c0:af:42:c4:92:fb:93:10:14:e6:73:96: 7c:fa:13:3b:1d:3d:68:b1:2c:a3:31:66:81:35:b5: 37:ff:97:e0:e1:25:6e:2a:90:19:80:a6:e0:13:d7: 61:b8:9c:a9:da:1a:04:72:b8:25:2b:b4:1b:92:95: e8:e1:04:78:eb:fa:d4:1b:2a:f5:5b:ba:21:ab:3f: e0:90:1e:96:ad:fb:01:80:38:26:13:e0:dc:32:03: 71:f9:a1:da:ee:57:a9:4a:42:2f:5f:8a:a1:e2:93: 88:0e:9f:65:c2:7b:10:8b:23:61:b8:1b:93:d0:ad: 1f:35:c4:af:72:29:7b:fa:af:46:a6:ae:71:67:dd: 9c:83:3f:8d:f6:09:45:e3:3e:15:8e:d1:1a:d9:7a: 71:80:07:d3:61:a9:0d:33:df:81:3f:86:7e:3d:70: 6e:8f:95:e7:d9:1e:b0:87:15:56:0c:0c:54:9a:8e: e2:d4:c7:32:a2:d6:6e:b6:52:ff:d1:65:7a:32:7d: 90:55:50:7f:6f:38:5e:bd:1e:62:85:77:ae:0a:cb: 34:65:3b:ab:47:a8:b0:36:e5:21:58:90:58:00:1c: 50:72:c1:d4:cf:a2:5d:f7:6a:14:8c:e4:51:13:63: aa:0d:42:e9:4c:78:f1:dc:09:78:d1:0a:15:aa:89: 67:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D5:07:C5:E7:AF:65:5A:F9:D4:E5:CE:A5:70:46:1F:C9:E8:70:DD X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/S9UHxeevZVr51OXOpXBGH8nocN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:ccf9:5e0f/128 Signature Algorithm: sha256WithRSAEncryption 3b:b5:f3:f9:fd:d3:32:f6:aa:83:b4:58:2d:9a:71:3d:83:0c: a4:91:d2:b7:50:06:07:94:bc:b4:b3:de:e4:3a:87:f1:e2:84: 0c:c9:26:20:24:27:82:ad:3b:aa:55:37:3c:8b:88:6f:aa:e4: 12:a5:3a:56:04:6a:ac:8b:a9:82:15:8f:58:ab:d5:8b:12:ab: 95:eb:60:f8:74:cb:5b:a5:be:de:1a:1d:61:31:76:bc:5f:70: 71:f4:88:a2:72:44:3f:d9:ac:b8:3e:34:6d:e2:12:f7:37:0b: 0e:d2:0a:17:14:df:d4:ba:6a:43:08:3d:ff:7b:9f:92:8b:60: 14:b7:7f:89:ef:14:26:15:bf:53:27:5b:3f:34:cd:99:0c:8a: a4:32:66:df:df:eb:79:91:fd:5e:c5:fa:6f:c3:db:ec:a9:15: fd:7e:be:f6:47:ec:4c:ae:08:d0:66:1b:ab:6d:13:d7:78:76: 92:26:10:2c:0f:22:6c:8e:ce:a9:3c:f0:43:87:bf:bf:d5:ab: 19:4b:15:75:39:1c:14:e6:62:d1:36:fe:ef:ae:0e:6e:9a:49: c4:4d:0a:d4:e0:92:da:42:49:46:cb:bc:66:bb:96:85:c3:e4: 47:bc:91:6f:94:1a:08:dc:37:be:9d:28:27:8d:93:6b:56:99: 1f:f4:05:bc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXM+ftNOQZWTPeTMHIr9FHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwMzI1MTEwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmQ1MDdjNWU3YWY2NTVhZjlkNGU1Y2VhNTcwNDYxZmM5ZTg3MGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EDAr0LEkvuTEBTmc5Z8+hM7HT1o sSyjMWaBNbU3/5fg4SVuKpAZgKbgE9dhuJyp2hoEcrglK7QbkpXo4QR46/rUGyr1 W7ohqz/gkB6WrfsBgDgmE+DcMgNx+aHa7lepSkIvX4qh4pOIDp9lwnsQiyNhuBuT 0K0fNcSvcil7+q9Gpq5xZ92cgz+N9glF4z4VjtEa2XpxgAfTYakNM9+BP4Z+PXBu j5Xn2R6whxVWDAxUmo7i1McyotZutlL/0WV6Mn2QVVB/bzhevR5ihXeuCss0ZTur R6iwNuUhWJBYABxQcsHUz6Jd92oUjORRE2OqDULpTHjx3Al40QoVqolneQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFEvVB8Xnr2Va+dTlzqVwRh/J6HDdMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvUzlVSHhlZXZaVnI1MU9YT3BYQkdIOG5vY04wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVzPleDzANBgkqhkiG9w0BAQsFAAOCAQEAO7Xz+f3TMvaqg7RYLZpxPYMM pJHSt1AGB5S8tLPe5DqH8eKEDMkmICQngq07qlU3PIuIb6rkEqU6VgRqrIupghWP WKvVixKrletg+HTLW6W+3hodYTF2vF9wcfSIonJEP9msuD40beIS9zcLDtIKFxTf 1LpqQwg9/3ufkotgFLd/ie8UJhW/UydbPzTNmQyKpDJm39/reZH9XsX6b8Pb7KkV /X6+9kfsTK4I0GYbq20T13h2kiYQLA8ibI7OqTzwQ4e/v9WrGUsVdTkcFOZi0Tb+ 764ObppJxE0K1OCS2kJJRsu8ZruWhcPkR7yRb5QaCNw3vp0oJ42Ta1aZH/QFvA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:08:13 2025 by rpki-client