This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_Q8LqkAteMbIZLOfT655pbvPjFM.roa File: _Q8LqkAteMbIZLOfT655pbvPjFM.roa (raw, json) Hash identifier: q567bVDaOkakIPcw6rFB9gIzieYZgEsNUqWFdoLNJKo= Subject key identifier: FD:0F:0B:AA:40:2D:78:C6:C8:64:B3:9F:4F:AE:79:A5:BB:CF:8C:53 Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195E9C3103E62EC3B0E51E7551CC9475906 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_Q8LqkAteMbIZLOfT655pbvPjFM.roa Signing time: Mon 31 Mar 2025 01:13:49 +0000 ROA not before: Mon 31 Mar 2025 01:13:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:e9:c3:10:3e:62:ec:3b:0e:51:e7:55:1c:c9:47:59:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Mar 31 01:13:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd0f0baa402d78c6c864b39f4fae79a5bbcf8c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:2e:9c:c7:12:dc:32:23:cc:3b:46:1f:41: bb:89:56:c8:76:f5:a3:91:0c:59:d9:a0:b2:2b:33: 3a:84:d0:c1:3b:e4:12:d7:3f:1f:4a:b9:d2:fc:f2: 5a:92:38:a2:88:1a:de:0d:6d:1a:3e:c8:7a:c0:dc: ed:c2:7a:0f:a8:15:fc:04:ea:47:31:94:35:c6:99: 64:a2:75:fb:a5:a4:d7:af:80:79:2b:4d:f6:1b:0b: 77:16:9a:80:dc:66:26:7a:29:2a:72:2d:ad:7b:5a: ff:07:d8:2e:02:49:59:14:4f:2b:9a:62:77:33:47: 52:73:61:27:00:5c:40:ee:62:9d:b9:02:8e:1a:db: 1c:8f:2a:1f:83:04:8d:23:4f:76:17:cb:fd:47:78: 20:46:d3:fa:81:5c:50:61:95:5c:36:eb:0f:92:93: 5b:3f:a7:5e:77:00:a7:5d:ff:5d:a5:06:b8:ea:24: b1:d0:02:4d:d0:2b:b3:a8:1e:89:26:f8:03:ed:4e: 68:96:2f:f9:ed:96:fb:86:99:b8:37:65:3d:33:38: 69:20:d9:bd:68:a9:1f:bb:b2:57:d2:12:bc:cb:c8: 6d:9d:5a:5e:e0:12:cb:f6:3f:00:1e:39:bd:a8:42: 35:86:1c:b5:2a:b3:48:07:a6:38:97:e4:50:cc:06: a6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0F:0B:AA:40:2D:78:C6:C8:64:B3:9F:4F:AE:79:A5:BB:CF:8C:53 X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_Q8LqkAteMbIZLOfT655pbvPjFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 Signature Algorithm: sha256WithRSAEncryption 1d:a9:cf:5d:d7:51:72:a3:88:af:23:e0:da:d8:7d:80:d9:06: a7:d9:b6:46:e4:c7:8a:2e:7b:03:ad:4b:f1:6f:9c:cb:eb:e0: 74:38:75:cd:bc:6f:13:30:82:90:a5:ea:60:3b:22:be:77:2d: f9:e5:5a:d1:bf:b3:e6:44:ce:72:a0:dc:94:f4:8b:e1:d5:04: c6:5c:85:2a:eb:c2:2d:a4:a0:8f:f0:d4:59:3d:62:11:4b:71: fe:99:3e:0e:33:29:cb:a8:91:d8:71:97:11:c8:99:99:ae:82: 81:57:0e:f9:1c:82:60:64:4b:98:4e:b0:e0:22:09:b5:e0:76: b7:79:76:65:7e:6a:2e:3d:fc:55:53:fa:cd:37:be:3d:2e:75: 53:fd:2b:87:9b:2b:4c:b9:bd:d3:ab:8d:e4:11:16:59:50:3c: 36:fc:1f:c9:5e:79:dd:95:88:39:1e:8b:f3:20:1f:5e:1d:58: 58:28:6b:5e:41:fe:b7:78:ae:10:e7:89:30:1b:9f:36:1a:93: 11:92:bd:9f:cb:6b:ae:f1:9e:d0:38:b0:af:38:53:02:a4:e0: 62:aa:b9:b2:69:9d:99:eb:ed:78:e5:16:43:7a:2c:67:81:da: ec:90:8d:80:26:89:74:38:25:f3:73:a4:2d:04:f5:f1:8e:7e: 5d:9f:48:4a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXpwxA+Yuw7DlHnVRzJR1kGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwMzMxMDExMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDBmMGJhYTQwMmQ3OGM2Yzg2NGIzOWY0ZmFlNzlhNWJiY2Y4YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHgunMcS3DIjzDtGH0G7iVbIdvWj kQxZ2aCyKzM6hNDBO+QS1z8fSrnS/PJakjiiiBreDW0aPsh6wNztwnoPqBX8BOpH MZQ1xplkonX7paTXr4B5K032Gwt3FpqA3GYmeikqci2te1r/B9guAklZFE8rmmJ3 M0dSc2EnAFxA7mKduQKOGtscjyofgwSNI092F8v9R3ggRtP6gVxQYZVcNusPkpNb P6dedwCnXf9dpQa46iSx0AJN0CuzqB6JJvgD7U5oli/57Zb7hpm4N2U9MzhpINm9 aKkfu7JX0hK8y8htnVpe4BLL9j8AHjm9qEI1hhy1KrNIB6Y4l+RQzAamvQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFP0PC6pALXjGyGSzn0+ueaW7z4xTMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvX1E4THFrQXRlTWJJWkxPZlQ2NTVwYnZQakZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAHanPXddRcqOIryPg2th9gNkG p9m2RuTHii57A61L8W+cy+vgdDh1zbxvEzCCkKXqYDsivnct+eVa0b+z5kTOcqDc lPSL4dUExlyFKuvCLaSgj/DUWT1iEUtx/pk+DjMpy6iR2HGXEciZma6CgVcO+RyC YGRLmE6w4CIJteB2t3l2ZX5qLj38VVP6zTe+PS51U/0rh5srTLm906uN5BEWWVA8 NvwfyV553ZWIOR6L8yAfXh1YWChrXkH+t3iuEOeJMBufNhqTEZK9n8trrvGe0Diw rzhTAqTgYqq5smmdmevteOUWQ3osZ4Ha7JCNgCaJdDgl83OkLQT18Y5+XZ9ISg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:02 2025 by rpki-client