This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-3dKOJbFZRyL90IpFF7_WQtdU2k.roa File: 1-3dKOJbFZRyL90IpFF7_WQtdU2k.roa (raw, json) Hash identifier: IBim0p8JnnxzBwUPdpD1gRsZhBjMDVdlfSQ1dEMIT5s= Subject key identifier: FB:77:4A:38:96:C5:65:1C:8B:F7:42:29:14:5E:FF:59:0B:5D:53:69 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0195A87F9ADA83B027148F2DC2701473717F Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-3dKOJbFZRyL90IpFF7_WQtdU2k.roa Signing time: Tue 18 Mar 2025 09:04:49 +0000 ROA not before: Tue 18 Mar 2025 09:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128 2001:67c:64:ffff:0:195:a87f:36cc/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:a8:7f:9a:da:83:b0:27:14:8f:2d:c2:70:14:73:71:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 18 09:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb774a3896c5651c8bf74229145eff590b5d5369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:69:3d:45:4a:73:68:ff:d7:c0:90:95:cb: 71:ab:c6:42:b6:72:0e:42:7a:59:ef:25:5d:b1:0e: ed:8c:84:c2:af:1e:78:be:ce:77:84:00:16:ed:9e: 5e:81:dc:df:a7:58:bf:a6:cb:9e:d8:8a:a3:79:2a: 20:6c:bc:ee:89:f7:99:00:7e:2b:8d:de:36:75:54: 38:34:ae:48:82:20:9c:eb:e5:51:ce:1d:4d:2a:3c: 00:3a:b3:f3:df:c4:72:38:75:9b:b0:28:de:85:14: 58:83:fe:9a:e2:95:3d:a5:e1:8b:c0:a0:9a:b6:7a: ba:31:a3:32:09:4b:6e:07:22:d5:a4:a2:6a:50:01: bc:ef:14:ae:fd:6e:7d:2d:47:c9:11:05:90:b8:9c: 16:e7:95:97:d1:88:ff:74:50:ae:f6:9b:78:1f:50: fe:c0:69:1f:97:26:b7:5b:9d:d7:5f:c3:6e:5a:8b: f4:95:60:99:40:81:0c:f0:d0:55:b2:aa:3b:e2:6b: 78:6f:fe:23:05:a6:2a:38:0e:19:5c:ce:f1:69:4c: a0:93:48:aa:12:f3:76:cb:22:e2:6c:91:30:de:e3: 1a:c7:46:cb:53:fc:e3:90:90:d4:a5:21:e1:8b:33: 62:7c:d4:26:b2:ca:10:89:0a:6e:a6:39:39:18:32: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:77:4A:38:96:C5:65:1C:8B:F7:42:29:14:5E:FF:59:0B:5D:53:69 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-3dKOJbFZRyL90IpFF7_WQtdU2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:86cf:630c/128 2001:67c:64:ffff:0:195:a87f:36cc/128 Signature Algorithm: sha256WithRSAEncryption 35:1c:46:2d:a5:1a:06:f0:a7:b9:37:65:dc:78:d0:70:98:40: f5:c3:83:5b:12:5e:f3:e9:6e:cc:13:e3:03:0a:95:86:48:27: 11:9d:4e:22:12:07:ae:8e:95:fb:1d:ba:3a:44:6f:d1:9b:c6: 5f:6d:54:75:0d:ad:c2:a0:65:44:04:03:1d:94:9e:e5:c4:18: ed:1d:cc:3b:38:46:cb:d5:94:bc:e0:04:94:e3:c3:6e:3c:88: 8d:0f:c3:1e:62:c3:57:2d:7d:60:6e:bd:e4:dd:0e:49:fe:56: 1c:07:30:90:ba:42:cc:81:a2:6a:4c:07:a4:db:90:c0:56:af: 67:25:88:ed:d0:49:20:93:2a:54:c5:99:82:40:1d:f3:87:e6: 56:7e:64:03:14:f5:a3:c7:0c:22:75:86:c0:bd:35:96:f5:7c: 93:9f:06:45:38:14:5c:cd:6b:b3:2e:52:87:8b:34:a8:b1:f5: a0:99:99:d8:f8:79:c8:37:35:86:fb:8c:67:e1:0c:0a:75:97: 30:37:37:78:1e:10:56:00:07:f8:70:9a:7d:ba:28:4e:8e:9d: f1:7f:62:35:14:3a:25:46:2c:cf:4c:66:8a:94:9b:f2:8b:1c: a4:93:76:41:81:6f:f1:74:80:e8:3c:ed:4f:83:fd:b7:41:c9: 44:6c:60:70 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZWof5rag7AnFI8twnAUc3F/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzE4MDkwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjc3NGEzODk2YzU2NTFjOGJmNzQyMjkxNDVlZmY1OTBiNWQ1MzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eVpPUVKc2j/18CQlctxq8ZCtnIO QnpZ7yVdsQ7tjITCrx54vs53hAAW7Z5egdzfp1i/psue2IqjeSogbLzuifeZAH4r jd42dVQ4NK5IgiCc6+VRzh1NKjwAOrPz38RyOHWbsCjehRRYg/6a4pU9peGLwKCa tnq6MaMyCUtuByLVpKJqUAG87xSu/W59LUfJEQWQuJwW55WX0Yj/dFCu9pt4H1D+ wGkflya3W53XX8NuWov0lWCZQIEM8NBVsqo74mt4b/4jBaYqOA4ZXM7xaUygk0iq EvN2yyLibJEw3uMax0bLU/zjkJDUpSHhizNifNQmssoQiQpupjk5GDJaBQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPt3SjiWxWUci/dCKRRe/1kLXVNpMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvMS0zZEtPSmJGWlJ5TDkwSXBGRjdfV1F0ZFUyay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvMDk4MzdjLTk4ZjMtNGM5Zi1hZWJmLTg4MTQ4OGZmZGJi MC8xL1VtSUVGZEpKQ2w3RDlwSmJuM2tFRG80aTNiOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMRACABBnwA ZP//AAABlYbPYwwDEQAgAQZ8AGT//wAAAZWofzbMMA0GCSqGSIb3DQEBCwUAA4IB AQA1HEYtpRoG8Ke5N2XceNBwmED1w4NbEl7z6W7ME+MDCpWGSCcRnU4iEgeujpX7 Hbo6RG/Rm8ZfbVR1Da3CoGVEBAMdlJ7lxBjtHcw7OEbL1ZS84ASU48NuPIiND8Me YsNXLX1gbr3k3Q5J/lYcBzCQukLMgaJqTAek25DAVq9nJYjt0EkgkypUxZmCQB3z h+ZWfmQDFPWjxwwidYbAvTWW9XyTnwZFOBRczWuzLlKHizSosfWgmZnY+HnINzWG +4xn4QwKdZcwNzd4HhBWAAf4cJp9uihOjp3xf2I1FDolRizPTGaKlJvyixykk3ZB gW/xdIDoPO1Pg/23QclEbGBw -----END CERTIFICATE-----Generated at Sun Dec 14 03:39:59 2025 by rpki-client