This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/d39jKSI4iPYedOiv1upKFacsDpQ.roa File: d39jKSI4iPYedOiv1upKFacsDpQ.roa (raw, json) Hash identifier: ly9lbPqZN6s/H9vpRAfFSxCYIV8MvZoXWIQwmbSBRQ0= Subject key identifier: 77:7F:63:29:22:38:88:F6:1E:74:E8:AF:D6:EA:4A:15:A7:2C:0E:94 Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3 Certificate serial: 019B096850262CE89AF0347EFFA8EBD2473F Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/d39jKSI4iPYedOiv1upKFacsDpQ.roa Signing time: Wed 10 Dec 2025 17:56:29 +0000 ROA not before: Wed 10 Dec 2025 17:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9205 IP address blocks: 87.76.128.0/17 maxlen: 17 87.76.254.0/23 maxlen: 23 193.110.112.0/22 maxlen: 24 193.110.115.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:68:50:26:2c:e8:9a:f0:34:7e:ff:a8:eb:d2:47:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3 Validity Not Before: Dec 10 17:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=777f6329223888f61e74e8afd6ea4a15a72c0e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6d:e7:a0:a3:46:73:61:9c:d4:d5:53:04:f6: bf:db:a7:20:3a:61:62:b2:08:93:76:b4:c9:a6:bf: d2:bc:6f:aa:cc:f7:bb:d0:80:b6:14:b7:e6:a4:70: 3c:e7:72:9f:5d:cf:d3:d4:94:3c:96:ab:6b:9c:a2: 45:7b:20:29:d4:5e:04:a9:31:54:77:77:7a:28:7a: 17:fd:46:4e:cb:00:f5:27:0b:b2:26:6e:12:1a:70: e1:66:af:3e:c3:68:1b:45:c8:48:a0:dd:53:f5:82: 3d:05:85:1c:61:2f:64:a9:1e:2e:6a:89:78:79:37: fd:a9:cb:cb:0f:64:a2:9e:5c:6c:da:7f:9a:66:c4: 04:0f:57:fb:83:22:e0:2f:df:e3:0c:b3:7e:6a:4d: c7:7e:b7:3b:5c:28:1f:aa:51:b5:fe:ca:44:11:2e: fe:85:a9:03:6f:52:b0:3d:56:c8:3c:d1:11:52:cd: ea:79:d2:5d:eb:0d:7a:86:5a:ef:a5:0a:03:f3:59: 65:72:63:40:89:d9:f4:da:5c:69:58:6d:79:ba:d0: 37:38:f8:87:94:5c:91:66:93:a7:e4:65:e9:47:c2: 7b:51:29:47:fc:67:03:8d:3e:9c:00:94:4a:a0:e6: 5c:21:21:bb:eb:bd:6b:34:99:55:9f:37:0c:ec:5b: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7F:63:29:22:38:88:F6:1E:74:E8:AF:D6:EA:4A:15:A7:2C:0E:94 X509v3 Authority Key Identifier: keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/d39jKSI4iPYedOiv1upKFacsDpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.76.128.0/17 193.110.112.0/22 Signature Algorithm: sha256WithRSAEncryption 32:f6:0a:33:04:cb:84:25:60:b2:90:4a:16:12:6f:ab:1f:35: 00:2a:2b:09:90:0c:5b:39:11:d4:f3:22:03:7f:85:ad:f5:48: c1:b8:2d:b5:ee:d9:8e:7f:fc:5c:60:e9:70:28:9d:8d:57:7a: 35:10:d0:9a:f3:8b:d5:5c:69:08:8b:7a:fc:0c:68:84:51:f5: 0d:65:e5:47:cb:af:7e:e2:24:87:6c:93:fe:3f:35:61:5e:10: 7f:dc:7d:12:e5:ef:43:4f:31:97:3f:81:e7:84:0b:fd:49:24: a1:52:b5:c8:2d:61:be:be:2c:7f:54:99:a2:2a:44:f6:4f:10: 2c:8d:a0:a0:09:1f:42:de:d0:41:82:33:80:ba:87:ad:0e:3a: 98:8f:f4:3b:df:1b:37:02:f1:9e:7f:1e:c9:f3:ff:72:57:88: eb:a2:de:bc:dc:70:99:ac:e0:6f:a8:04:92:ba:73:c2:f4:03: 0f:ce:33:4b:b3:18:76:04:d6:d7:fa:41:75:bc:f8:fa:49:e7: 2b:a0:e6:c7:2c:e4:b5:57:52:da:61:26:38:0a:12:13:56:cf: 12:07:11:02:a3:54:19:63:5a:89:ca:28:a0:74:c5:03:4b:1e: 42:1f:21:7a:86:be:f3:92:8a:ac:5f:af:9b:63:cb:4f:2d:ef: 7a:f7:f7:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsJaFAmLOia8DR+/6jr0kc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMjE4ZTgwMWE1MzI1OTVlOWI3MWM2NDM2ODRlYTA1Zjk2 YmY1ZjMwHhcNMjUxMjEwMTc1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzdmNjMyOTIyMzg4OGY2MWU3NGU4YWZkNmVhNGExNWE3MmMwZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8G3noKNGc2Gc1NVTBPa/26cgOmFi sgiTdrTJpr/SvG+qzPe70IC2FLfmpHA853KfXc/T1JQ8lqtrnKJFeyAp1F4EqTFU d3d6KHoX/UZOywD1JwuyJm4SGnDhZq8+w2gbRchIoN1T9YI9BYUcYS9kqR4uaol4 eTf9qcvLD2Sinlxs2n+aZsQED1f7gyLgL9/jDLN+ak3Hfrc7XCgfqlG1/spEES7+ hakDb1KwPVbIPNERUs3qedJd6w16hlrvpQoD81llcmNAidn02lxpWG15utA3OPiH lFyRZpOn5GXpR8J7USlH/GcDjT6cAJRKoOZcISG7671rNJlVnzcM7FvlqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHd/YykiOIj2HnTor9bqShWnLA6UMB8GA1UdIwQY MBaAFJAhjoAaUyWV6bccZDaE6gX5a/XzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0NHT2dCcFRKWlhwdHh4a05vVHFCZmxyOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xYjY2MjQtODQ0MS00ZDAxLTk2ZTMt NjAxODEyZWY0MjhiLzEvZDM5aktTSTRpUFllZE9pdjF1cEtGYWNzRHBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xYjY2MjQtODQ0MS00ZDAxLTk2ZTMtNjAxODEyZWY0Mjhi LzEva0NHT2dCcFRKWlhwdHh4a05vVHFCZmxyOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHV0yAAwQC wW5wMA0GCSqGSIb3DQEBCwUAA4IBAQAy9gozBMuEJWCykEoWEm+rHzUAKisJkAxb ORHU8yIDf4Wt9UjBuC217tmOf/xcYOlwKJ2NV3o1ENCa84vVXGkIi3r8DGiEUfUN ZeVHy69+4iSHbJP+PzVhXhB/3H0S5e9DTzGXP4HnhAv9SSShUrXILWG+vix/VJmi KkT2TxAsjaCgCR9C3tBBgjOAuoetDjqYj/Q73xs3AvGefx7J8/9yV4jrot683HCZ rOBvqASSunPC9AMPzjNLsxh2BNbX+kF1vPj6SecroObHLOS1V1LaYSY4ChITVs8S BxECo1QZY1qJyiigdMUDSx5CHyF6hr7zkoqsX6+bY8tPLe969/dL -----END CERTIFICATE-----Generated at Mon Dec 22 10:15:11 2025 by rpki-client