This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/nuzJyWgNTyeIsJAxoqlDeteOT-0.roa File: nuzJyWgNTyeIsJAxoqlDeteOT-0.roa (raw, json) Hash identifier: YV/35ZRCjtD11JrCmO8U8TS11W8FRnC1JZ1YVphe9mk= Subject key identifier: 9E:EC:C9:C9:68:0D:4F:27:88:B0:90:31:A2:A9:43:7A:D7:8E:4F:ED Certificate issuer: /CN=92296e30487ba9463e4b6adc81ab7da647c39fe7 Certificate serial: 0199CEA869D6F03B0C965211D03FEE0C9753 Authority key identifier: 92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/nuzJyWgNTyeIsJAxoqlDeteOT-0.roa Signing time: Fri 10 Oct 2025 15:06:07 +0000 ROA not before: Fri 10 Oct 2025 15:06:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41268 IP address blocks: 2a03:2c00::/32 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ce:a8:69:d6:f0:3b:0c:96:52:11:d0:3f:ee:0c:97:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7 Validity Not Before: Oct 10 15:06:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9eecc9c9680d4f2788b09031a2a9437ad78e4fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:8e:62:d3:f3:94:e6:fa:43:59:f0:b1:88: 3e:43:d4:28:7e:ba:c8:68:4d:c9:5f:2b:5a:99:3f: 7c:93:1e:1c:40:cd:38:19:77:93:bf:a8:a7:0f:80: a3:a5:f1:c5:74:c7:be:29:09:8d:05:47:4c:2f:f4: a2:a1:54:34:b5:b5:75:41:82:fd:16:7b:e8:d8:c9: e3:ee:60:df:6f:8b:9a:b6:ec:61:f4:5f:cb:a9:0a: 28:43:81:a0:e8:5f:2e:a8:88:2e:e9:e2:71:a5:60: 08:93:e2:da:41:9a:ef:8a:ab:0a:72:b8:b4:91:20: c5:93:b0:e9:d0:b0:73:85:1d:13:e8:60:d0:c0:3e: ea:a9:4e:d2:1c:ad:0a:4b:ee:5b:c3:b1:6b:07:4a: 72:76:92:66:f0:b6:69:91:35:32:d4:26:b0:a2:e9: f4:dc:63:9d:56:d6:20:3a:dc:b3:eb:cc:ee:61:13: 7e:b5:05:00:c3:cb:6f:2b:83:20:36:ae:22:ab:fd: 69:d1:74:d0:43:ff:56:bc:ab:88:8b:30:c3:47:a7: f1:84:42:5c:08:8b:81:ae:84:22:12:45:8a:cf:ca: 1e:7b:3b:b3:0d:98:d4:f0:be:a3:35:2c:9c:5f:6d: 4b:7c:78:11:e6:cb:4a:93:e8:fd:2b:ef:dd:72:3b: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EC:C9:C9:68:0D:4F:27:88:B0:90:31:A2:A9:43:7A:D7:8E:4F:ED X509v3 Authority Key Identifier: keyid:92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/nuzJyWgNTyeIsJAxoqlDeteOT-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 2d:32:c9:82:5a:44:a5:5c:1e:3a:49:25:c9:13:85:aa:fc:63: 0d:8e:3a:e7:cf:8b:74:06:5f:b7:fa:b7:90:9e:2a:3c:d6:c5: 57:b4:00:76:80:9d:cf:31:3c:3c:b0:52:59:4f:6e:3f:99:30: 0a:84:d2:1d:97:f3:f7:32:93:a4:6a:f6:66:e1:60:c8:73:5d: 8c:26:70:00:c7:cc:8a:18:c5:c9:07:db:96:77:00:d2:47:17: 70:18:74:ae:a0:7f:84:90:5b:32:f7:a4:d2:04:b2:74:0f:d3: a5:e8:f8:1e:ca:95:a3:0d:97:dc:03:66:d9:a8:2f:ef:1b:4f: da:6d:09:9a:4f:53:20:7c:57:cb:21:dd:bc:74:96:3c:45:3b: 42:14:2e:c9:df:9c:cd:3b:26:02:e5:22:75:f2:86:ab:a3:27: e0:34:53:8d:ca:12:a7:a9:bb:d4:d7:21:40:80:b0:72:32:48: 6e:45:50:c2:b5:fc:cb:ab:97:11:7c:21:ca:a1:57:7e:8b:01: 01:78:eb:f4:dd:8f:d0:2c:2a:d0:3f:8f:cf:dd:02:d3:91:20: 31:ad:87:74:4e:12:a6:dd:66:09:db:ac:6c:c0:23:42:7d:3c: e5:ff:59:78:4b:ca:d2:15:c1:13:95:66:8d:5c:cd:ce:9c:48: 29:3d:e2:37 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZnOqGnW8DsMllIR0D/uDJdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjk2ZTMwNDg3YmE5NDYzZTRiNmFkYzgxYWI3ZGE2NDdj MzlmZTcwHhcNMjUxMDEwMTUwNjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWVjYzljOTY4MGQ0ZjI3ODhiMDkwMzFhMmE5NDM3YWQ3OGU0ZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0mOYtPzlOb6Q1nwsYg+Q9QofrrI aE3JXytamT98kx4cQM04GXeTv6inD4CjpfHFdMe+KQmNBUdML/SioVQ0tbV1QYL9 Fnvo2Mnj7mDfb4uatuxh9F/LqQooQ4Gg6F8uqIgu6eJxpWAIk+LaQZrviqsKcri0 kSDFk7Dp0LBzhR0T6GDQwD7qqU7SHK0KS+5bw7FrB0pydpJm8LZpkTUy1Cawoun0 3GOdVtYgOtyz68zuYRN+tQUAw8tvK4MgNq4iq/1p0XTQQ/9WvKuIizDDR6fxhEJc CIuBroQiEkWKz8oeezuzDZjU8L6jNSycX21LfHgR5stKk+j9K+/dcjuIqQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJ7sycloDU8niLCQMaKpQ3rXjk/tMB8GA1UdIwQY MBaAFJIpbjBIe6lGPktq3IGrfaZHw5/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lsdU1FaDdxVVktUzJyY2dhdDlwa2ZEbi1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zYmIxNzgtYjMzNi00ODljLTllOGQt MGQxMTY0ZGFhMWU0LzEvbnV6SnlXZ05UeWVJc0pBeG9xbERldGVPVC0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zYmIxNzgtYjMzNi00ODljLTllOGQtMGQxMTY0ZGFhMWU0 LzEva2lsdU1FaDdxVVktUzJyY2dhdDlwa2ZEbi1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgMsADAN BgkqhkiG9w0BAQsFAAOCAQEALTLJglpEpVweOkklyROFqvxjDY4658+LdAZft/q3 kJ4qPNbFV7QAdoCdzzE8PLBSWU9uP5kwCoTSHZfz9zKTpGr2ZuFgyHNdjCZwAMfM ihjFyQfblncA0kcXcBh0rqB/hJBbMvek0gSydA/Tpej4HsqVow2X3ANm2agv7xtP 2m0Jmk9TIHxXyyHdvHSWPEU7QhQuyd+czTsmAuUidfKGq6Mn4DRTjcoSp6m71Nch QICwcjJIbkVQwrX8y6uXEXwhyqFXfosBAXjr9N2P0Cwq0D+Pz90C05EgMa2HdE4S pt1mCdusbMAjQn085f9ZeEvK0hXBE5VmjVzNzpxIKT3iNw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:42:50 2025 by rpki-client