This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-1iA2s2eJ5IQ0SJsJfMnmXEZdck.roa File: 1-1iA2s2eJ5IQ0SJsJfMnmXEZdck.roa (raw, json) Hash identifier: VFkNWHZUz+LIt/DukTw6Zv2NtvzOQc6PfXF7Vb7oGls= Subject key identifier: FB:58:80:DA:CD:9E:27:92:10:D1:22:6C:25:F3:27:99:71:19:75:C9 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01918032404E07D589A0CBBD6C9D2FE31A9F Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-1iA2s2eJ5IQ0SJsJfMnmXEZdck.roa Signing time: Fri 23 Aug 2024 17:04:22 +0000 ROA not before: Fri 23 Aug 2024 17:04:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 2001:67c:64:ffff:0:191:8032:2d21/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:80:32:40:4e:07:d5:89:a0:cb:bd:6c:9d:2f:e3:1a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Aug 23 17:04:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=fb5880dacd9e279210d1226c25f32799711975c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:e5:db:34:87:61:df:6b:f0:16:6f:66:0a: ae:3d:9c:40:d4:e3:f4:31:18:31:62:7e:56:82:6f: c2:c7:db:f5:27:7b:3c:64:ce:6f:6b:fb:87:bd:f6: 70:84:b3:92:94:18:a5:a7:fc:77:64:c6:a3:81:b7: 42:86:78:65:1d:8e:03:8c:e1:a5:87:94:66:c7:34: 6c:5f:c8:6b:29:73:2b:cc:6c:50:60:e7:eb:5b:07: 67:24:d9:3c:72:02:1b:c6:17:f6:4d:9d:46:2b:48: f9:1e:02:b5:fc:9f:4b:4e:df:af:1f:8b:84:f7:b2: b6:91:e2:6b:69:c1:a6:84:8a:7f:c9:e7:88:de:0b: 8f:e4:b9:cf:dc:c2:dd:69:66:86:b7:f5:9d:56:ea: 18:d5:81:36:c0:6d:34:45:8d:4d:7a:82:9d:b7:64: a5:aa:43:48:d1:0a:8e:54:cc:8d:41:8e:8d:a7:7e: af:f5:a5:1e:91:0e:fc:48:14:c9:8b:11:f7:02:d5: 68:dc:e2:c4:91:84:04:2c:54:fc:63:43:c2:b7:29: ce:21:c5:e8:35:3a:e4:28:54:c1:b5:a2:72:a1:06: 78:77:79:95:69:6f:33:31:c7:bc:c3:d7:93:5f:dc: bd:e4:1c:69:21:d1:e6:d1:3c:9b:e3:b0:c4:54:51: ce:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:58:80:DA:CD:9E:27:92:10:D1:22:6C:25:F3:27:99:71:19:75:C9 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-1iA2s2eJ5IQ0SJsJfMnmXEZdck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 2001:67c:64:ffff:0:191:8032:2d21/128 Signature Algorithm: sha256WithRSAEncryption 01:79:12:3d:3f:6e:20:d8:b3:ca:51:99:60:cf:a4:a7:c8:52: 17:16:53:c3:b8:ea:b9:9e:6d:0f:b6:87:b3:99:72:64:ee:e2: a2:84:6e:4b:d9:3c:d7:3e:98:29:1c:c9:2d:05:5a:02:da:7f: 25:ca:76:fc:d1:3b:36:09:ee:b4:c7:20:ca:91:1b:b1:9f:60: 70:43:5c:eb:0a:48:e9:ef:27:c2:ae:a1:4a:96:eb:4f:49:6f: 52:4f:42:5a:0b:cb:a8:a9:a0:74:99:f8:15:eb:1f:ed:57:ef: 83:cf:3b:54:63:6b:b4:05:09:7c:32:22:ac:a6:11:50:1b:54: 81:ee:b5:5c:16:35:84:c2:6f:1f:e4:91:d3:27:68:27:10:04: c7:a5:e8:10:b8:78:b1:e2:5b:89:52:42:ec:d5:ee:5c:60:3a: 42:b0:67:6d:48:c8:3d:32:81:c1:f0:8b:5a:53:44:91:71:8e: f7:af:44:06:92:a6:8d:10:f9:e8:00:b1:75:dc:41:8d:59:ff: 14:a1:a0:a3:b4:1c:8a:28:16:7f:7c:b3:83:4f:47:9f:cb:eb: 0f:6d:f0:b9:c6:66:ae:e1:c5:a0:1f:d5:47:14:0b:80:4a:4a: e5:7e:79:a1:9b:9f:f1:26:49:ce:62:e7:8e:ec:b7:0d:f5:ae: 27:31:a6:87 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZGAMkBOB9WJoMu9bJ0v4xqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwODIzMTcwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjU4ODBkYWNkOWUyNzkyMTBkMTIyNmMyNWYzMjc5OTcxMTk3NWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPvl2zSHYd9r8BZvZgquPZxA1OP0 MRgxYn5Wgm/Cx9v1J3s8ZM5va/uHvfZwhLOSlBilp/x3ZMajgbdChnhlHY4DjOGl h5RmxzRsX8hrKXMrzGxQYOfrWwdnJNk8cgIbxhf2TZ1GK0j5HgK1/J9LTt+vH4uE 97K2keJracGmhIp/yeeI3guP5LnP3MLdaWaGt/WdVuoY1YE2wG00RY1NeoKdt2Sl qkNI0QqOVMyNQY6Np36v9aUekQ78SBTJixH3AtVo3OLEkYQELFT8Y0PCtynOIcXo NTrkKFTBtaJyoQZ4d3mVaW8zMce8w9eTX9y95BxpIdHm0Tyb47DEVFHODwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPtYgNrNnieSENEibCXzJ5lxGXXJMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvMS0xaUEyczJlSjVJUTBTSnNKZk1ubVhFWmRjay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvMDk4MzdjLTk4ZjMtNGM5Zi1hZWJmLTg4MTQ4OGZmZGJi MC8xL1VtSUVGZEpKQ2w3RDlwSmJuM2tFRG80aTNiOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMRACABBnwA ZP//AAABkP3y8wIDEQAgAQZ8AGT//wAAAZGAMi0hMA0GCSqGSIb3DQEBCwUAA4IB AQABeRI9P24g2LPKUZlgz6SnyFIXFlPDuOq5nm0PtoezmXJk7uKihG5L2TzXPpgp HMktBVoC2n8lynb80Ts2Ce60xyDKkRuxn2BwQ1zrCkjp7yfCrqFKlutPSW9ST0Ja C8uoqaB0mfgV6x/tV++DzztUY2u0BQl8MiKsphFQG1SB7rVcFjWEwm8f5JHTJ2gn EATHpegQuHix4luJUkLs1e5cYDpCsGdtSMg9MoHB8ItaU0SRcY73r0QGkqaNEPno ALF13EGNWf8UoaCjtByKKBZ/fLODT0efy+sPbfC5xmau4cWgH9VHFAuASkrlfnmh m5/xJknOYueO7LcN9a4nMaaH -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:18 2025 by rpki-client