This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/cZzntQS0XRIYpP1anhXBNRTpJTw.roa File: cZzntQS0XRIYpP1anhXBNRTpJTw.roa (raw, json) Hash identifier: zgmqXNMsSDi0QTFPc7COeNtHQQ8ALs1DiESmVtqP00U= Subject key identifier: 71:9C:E7:B5:04:B4:5D:12:18:A4:FD:5A:9E:15:C1:35:14:E9:25:3C Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195F145E8918075026E502713079343C948 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/cZzntQS0XRIYpP1anhXBNRTpJTw.roa Signing time: Tue 01 Apr 2025 12:14:05 +0000 ROA not before: Tue 01 Apr 2025 12:14:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:f1:45:e8:91:80:75:02:6e:50:27:13:07:93:43:c9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Apr 1 12:14:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=719ce7b504b45d1218a4fd5a9e15c13514e9253c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:00:6f:78:83:ba:86:7d:06:1d:bf:fe:50: 27:a9:e2:0e:af:98:c7:e4:05:71:a1:82:35:7a:89: 82:a3:6f:82:98:13:87:28:ef:ab:99:b2:f1:02:dd: c4:16:c7:e1:69:38:61:d4:39:2f:b5:71:ab:57:d5: f8:b9:a1:5e:0e:03:5f:b9:da:e0:9f:f7:4d:f7:d9: 82:a7:df:34:bd:db:87:7a:65:c1:ca:e5:77:67:62: 5d:8b:9c:9d:d6:ad:1a:22:ad:0b:c1:57:24:0b:f6: 23:3d:ce:30:fa:4e:f3:54:08:6f:48:b8:89:ff:cd: e2:de:31:90:db:d4:9d:59:c9:3e:f0:b9:88:e9:91: f8:26:4f:57:31:82:a3:0a:60:ae:00:e4:35:57:f5: 93:5e:5d:14:8f:d6:96:82:32:5b:fe:58:95:4b:b9: c5:de:ad:11:96:a0:10:2c:ad:34:7c:59:4a:45:5d: b1:ea:63:e2:54:c8:ac:6f:9e:25:d3:34:39:7f:bb: 9d:b2:c3:c9:3a:a0:92:1f:ce:72:66:47:ab:f0:a7: 79:6d:ff:eb:77:18:2a:66:23:0d:5d:7c:72:d4:53: 97:87:96:20:c4:ab:2c:6a:07:ca:c8:22:8d:94:28: 88:0a:07:53:a6:c8:29:56:06:a9:51:c2:c6:e7:78: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9C:E7:B5:04:B4:5D:12:18:A4:FD:5A:9E:15:C1:35:14:E9:25:3C X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/cZzntQS0XRIYpP1anhXBNRTpJTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 Signature Algorithm: sha256WithRSAEncryption 21:4d:1c:58:46:cc:ae:bd:00:82:2e:f2:43:08:40:0e:91:67: 08:32:51:73:31:b1:66:8d:52:5c:df:53:d8:7d:c6:0e:84:8c: 95:27:16:c1:d5:9e:e3:18:11:25:0a:d7:c2:ec:b4:9e:6b:7f: 88:ee:3b:dd:33:65:12:d8:77:0f:6f:77:10:b5:da:0a:3a:43: 18:70:24:f2:51:71:dc:30:8a:0f:fe:58:41:dd:4f:46:61:fa: 69:f3:cc:f5:83:e7:7c:41:98:8b:70:c3:5f:8f:85:61:94:97: fc:28:c4:69:96:5f:eb:30:b9:13:8b:b9:06:67:93:b4:39:b6: 0d:f8:de:92:b4:8e:ad:ac:f6:ac:b9:e6:f8:86:dc:9a:b4:0b: e8:48:0e:64:2e:91:a2:02:6c:f9:cb:74:f4:8c:98:ea:af:84: 1f:72:bc:62:12:ae:2e:8b:82:33:1a:63:4d:48:09:40:03:be: 1f:2e:32:c6:e6:09:cc:88:71:7e:89:89:45:e9:5a:83:7e:e9: 7c:6c:59:ff:a9:b5:fd:50:4c:36:ea:a4:62:91:06:99:e6:22: e6:e8:11:e5:ed:f9:a4:48:da:67:e5:63:46:05:4d:e1:2a:9b: 22:8b:6d:33:55:6b:5f:ac:26:05:d7:58:a2:83:96:f1:f8:76: 8b:6f:fc:70 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXxReiRgHUCblAnEweTQ8lIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwNDAxMTIxNDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTljZTdiNTA0YjQ1ZDEyMThhNGZkNWE5ZTE1YzEzNTE0ZTkyNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocQAb3iDuoZ9Bh2//lAnqeIOr5jH 5AVxoYI1eomCo2+CmBOHKO+rmbLxAt3EFsfhaThh1DkvtXGrV9X4uaFeDgNfudrg n/dN99mCp980vduHemXByuV3Z2Jdi5yd1q0aIq0LwVckC/YjPc4w+k7zVAhvSLiJ /83i3jGQ29SdWck+8LmI6ZH4Jk9XMYKjCmCuAOQ1V/WTXl0Uj9aWgjJb/liVS7nF 3q0RlqAQLK00fFlKRV2x6mPiVMisb54l0zQ5f7udssPJOqCSH85yZker8Kd5bf/r dxgqZiMNXXxy1FOXh5YgxKssagfKyCKNlCiICgdTpsgpVgapUcLG53ixfwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFHGc57UEtF0SGKT9Wp4VwTUU6SU8MB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvY1p6bnRRUzBYUklZcFAxYW5oWEJOUlRwSlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAIU0cWEbMrr0Agi7yQwhADpFn CDJRczGxZo1SXN9T2H3GDoSMlScWwdWe4xgRJQrXwuy0nmt/iO473TNlEth3D293 ELXaCjpDGHAk8lFx3DCKD/5YQd1PRmH6afPM9YPnfEGYi3DDX4+FYZSX/CjEaZZf 6zC5E4u5BmeTtDm2DfjekrSOraz2rLnm+IbcmrQL6EgOZC6RogJs+ct09IyY6q+E H3K8YhKuLouCMxpjTUgJQAO+Hy4yxuYJzIhxfomJRelag37pfGxZ/6m1/VBMNuqk YpEGmeYi5ugR5e35pEjaZ+VjRgVN4SqbIottM1VrX6wmBddYooOW8fh2i2/8cA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:39 2025 by rpki-client