This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/VfwB6uKE0o9SUYD3dby2JhswLI0.roa
File: VfwB6uKE0o9SUYD3dby2JhswLI0.roa (raw, json)
Hash identifier: rLJFhR6bzj2V+ceWYR07v3MseCfMJJwkSmnX5VyWHPw=
Subject key identifier: 55:FC:01:EA:E2:84:D2:8F:52:51:80:F7:75:BC:B6:26:1B:30:2C:8D
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DFDBF7FC1D1FF59481891187EBC59BE7
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/VfwB6uKE0o9SUYD3dby2JhswLI0.roa
Signing time: Sat 29 Mar 2025 03:04:49 +0000
ROA not before: Sat 29 Mar 2025 03:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
2001:67c:64:ffff:0:195:dfdb:d818/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:db:f7:fc:1d:1f:f5:94:81:89:11:87:eb:c5:9b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 03:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55fc01eae284d28f525180f775bcb6261b302c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:aa:8c:d2:6d:ea:f2:15:e9:2a:bf:0a:49:
c0:fa:22:82:7f:7e:75:70:95:fd:40:2d:4a:3f:30:
5d:2e:1b:91:4b:db:9a:76:e5:87:09:a7:b5:c0:f7:
b8:a8:13:a4:92:44:ef:22:a3:c0:e5:49:12:c2:aa:
70:8f:7b:0d:73:7d:99:93:dd:19:f1:c2:8d:2d:df:
b5:4a:92:c4:b9:5a:28:9a:2c:57:f3:a4:84:5b:23:
31:d8:76:5a:04:cd:67:13:79:59:59:8a:ad:fc:74:
2c:d9:c4:b5:25:56:ba:91:d8:b6:7a:e9:aa:e2:61:
0d:d1:69:be:29:f1:22:81:5d:5f:03:89:1c:d0:73:
72:09:d8:ad:14:51:b1:ef:bc:8c:c4:23:99:84:28:
5a:ae:77:eb:8d:a1:f1:d5:5f:d0:ce:8b:b1:9a:0a:
38:ef:7c:55:81:d9:ae:d2:7a:71:14:83:ef:b4:7b:
08:16:ef:58:40:61:00:e7:ea:66:e8:27:b2:52:3b:
b8:35:34:20:8b:78:22:f0:74:8e:dc:21:f8:f5:e4:
15:67:aa:0d:1b:17:ab:a1:1a:99:9f:a0:46:ef:de:
42:c9:7b:f8:52:3d:a3:ec:84:41:cf:f1:3d:3d:d4:
42:9b:4f:26:4a:9a:eb:fa:cb:0c:77:7e:dc:f0:e1:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:01:EA:E2:84:D2:8F:52:51:80:F7:75:BC:B6:26:1B:30:2C:8D
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/VfwB6uKE0o9SUYD3dby2JhswLI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
2001:67c:64:ffff:0:195:dfdb:d818/128
Signature Algorithm: sha256WithRSAEncryption
7e:28:ca:5b:d3:cb:0a:9e:a9:d7:b5:ee:0c:ec:3a:17:9e:34:
cf:ad:c6:7d:1f:f3:62:41:41:dd:df:61:ab:3e:c7:ab:82:6c:
83:9f:a6:72:cc:32:28:d6:87:08:8f:03:f5:19:ab:2a:39:2d:
f1:7c:06:4b:a8:bc:0c:ae:05:38:b1:22:2a:e5:bc:d5:20:9a:
69:38:06:f9:ef:eb:44:3e:47:bf:e8:74:fc:bd:81:d1:85:d4:
9c:92:dc:c5:14:c7:8e:47:68:c0:0b:ee:30:c6:91:83:da:ff:
f2:1d:85:22:cd:ae:c2:ab:3c:10:fd:eb:bc:0c:ac:34:26:58:
c0:b0:94:1d:c9:0a:9c:97:40:ea:88:b8:1d:0c:19:ef:23:2b:
be:ab:b3:7b:b7:c4:a0:dc:26:eb:29:df:a8:7e:19:17:73:dc:
79:32:9c:5c:53:c3:53:aa:bb:93:43:fb:e6:7c:86:6e:64:58:
b1:11:ec:2d:f5:d4:07:83:08:57:a7:ea:1a:af:4c:fa:42:95:
29:df:fe:ac:9a:9e:4f:ec:03:20:60:26:1b:32:ee:a1:d8:59:
8e:3a:f5:89:cc:22:da:8f:fc:12:c4:15:cd:10:9c:f4:eb:9c:
90:de:7f:4b:c4:64:fd:27:5a:05:ea:71:c5:43:be:c7:22:74:
40:4e:69:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:52:40 2025 by rpki-client