This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-H7geT-1toFYmHtOVCUFnV1AGq8.roa File: 1-H7geT-1toFYmHtOVCUFnV1AGq8.roa (raw, json) Hash identifier: 51dy8TwBIh6vN4ssIZ5o+PPCu81vI7zShYQ0vEKOmOs= Subject key identifier: F8:7E:E0:79:3F:B5:B6:81:58:98:7B:4E:54:25:05:9D:5D:40:1A:AF Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019466032CD9656D31EEBA0F9DAB22C0668A Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-H7geT-1toFYmHtOVCUFnV1AGq8.roa Signing time: Tue 14 Jan 2025 18:11:11 +0000 ROA not before: Tue 14 Jan 2025 18:11:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:66:03:2c:d9:65:6d:31:ee:ba:0f:9d:ab:22:c0:66:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 14 18:11:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f87ee0793fb5b68158987b4e5425059d5d401aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:48:97:df:65:dd:e5:65:52:b1:3d:d8:42: e9:f2:40:32:b8:36:06:3b:92:99:9b:9f:39:a7:21: 84:13:4c:92:db:68:5f:53:f7:ae:d0:5b:3c:e1:17: f4:40:a9:13:12:83:d3:f8:cc:36:e2:8f:67:c0:54: 98:8d:5c:43:5c:04:9c:75:e0:e1:ae:3b:ff:c8:21: 08:ed:13:07:a8:4b:66:c3:31:76:55:a2:ed:86:1d: 10:b4:01:62:72:1b:47:6d:76:47:a0:85:fe:ab:fe: 39:bb:19:1f:59:15:27:18:4b:5d:4e:ad:5e:29:56: b2:71:85:01:cd:3d:7c:1c:c9:71:4d:4c:5f:1c:64: 6f:64:b7:3d:8c:70:96:96:52:ce:a6:d0:ef:6a:b8: ec:4f:ac:3c:6a:6e:8e:91:3d:53:d9:94:f5:58:cf: f7:35:06:71:15:36:35:03:bd:09:53:35:8c:c9:72: fb:98:7a:0f:de:ff:96:6f:f1:b8:9d:e0:13:f5:1b: ef:be:0c:1e:c8:89:89:66:66:80:c4:e5:0b:90:74: 8e:e4:e4:a2:38:76:0d:73:c0:64:90:ef:38:28:b8: bd:66:3e:9d:73:af:8c:b6:32:b6:87:0d:95:49:86: a0:32:41:b1:42:1e:ac:45:6d:59:76:e5:8a:3f:0c: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7E:E0:79:3F:B5:B6:81:58:98:7B:4E:54:25:05:9D:5D:40:1A:AF X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-H7geT-1toFYmHtOVCUFnV1AGq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 28:39:6d:c6:13:8d:bf:d2:dc:d8:d0:66:18:29:85:69:79:d1: a4:4b:28:3b:da:7f:51:16:4b:0c:23:7b:d7:ce:6d:76:4c:13: de:ae:31:b4:8b:47:a9:b0:03:56:0b:b4:7e:88:f4:58:6b:dd: b0:6d:d3:bc:cb:8a:d3:18:05:63:b6:3e:6a:fe:cb:ac:ee:19: c0:95:39:be:e4:a1:e4:fd:2f:14:27:97:d6:75:dc:eb:9f:40: 3f:69:74:ab:b8:4e:9d:9f:e4:4e:77:32:e6:e5:f8:3a:53:16: dc:10:de:7a:20:5c:1f:c9:39:0c:67:36:c4:25:07:c0:dc:e7: f4:d7:19:d2:37:e1:e8:21:64:95:d9:03:31:42:21:66:c2:cf: fb:1a:02:ba:b1:d7:e6:02:e7:a6:65:5f:6f:8c:ed:03:5e:0f: 61:f0:01:db:17:e5:de:3a:2c:8d:ff:8c:f9:27:aa:5a:5f:d1: 8e:1e:c9:dd:fc:f3:e2:82:1f:11:af:f7:2d:a6:39:6b:d5:90: 00:4e:24:ed:e0:6c:eb:2f:83:a2:49:16:d7:21:fd:60:c0:30: 58:dc:19:29:b8:cd:e2:03:7c:67:5d:3f:23:1e:75:1d:19:ad: e5:4a:db:30:b8:33:7d:49:f6:05:6e:7f:0d:b7:2b:79:86:c1: 46:b1:f7:92 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZRmAyzZZW0x7roPnasiwGaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTE0MTgxMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODdlZTA3OTNmYjViNjgxNTg5ODdiNGU1NDI1MDU5ZDVkNDAxYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApntIl99l3eVlUrE92ELp8kAyuDYG O5KZm585pyGEE0yS22hfU/eu0Fs84Rf0QKkTEoPT+Mw24o9nwFSYjVxDXAScdeDh rjv/yCEI7RMHqEtmwzF2VaLthh0QtAFichtHbXZHoIX+q/45uxkfWRUnGEtdTq1e KVaycYUBzT18HMlxTUxfHGRvZLc9jHCWllLOptDvarjsT6w8am6OkT1T2ZT1WM/3 NQZxFTY1A70JUzWMyXL7mHoP3v+Wb/G4neAT9RvvvgweyImJZmaAxOULkHSO5OSi OHYNc8BkkO84KLi9Zj6dc6+MtjK2hw2VSYagMkGxQh6sRW1ZduWKPwxiDQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPh+4Hk/tbaBWJh7TlQlBZ1dQBqvMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvMS1IN2dlVC0xdG9GWW1IdE9WQ1VGblYxQUdxOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvMDk4MzdjLTk4ZjMtNGM5Zi1hZWJmLTg4MTQ4OGZmZGJi MC8xL1VtSUVGZEpKQ2w3RDlwSmJuM2tFRG80aTNiOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQdMBswGQQCAAIwEwMRACABBnwA ZP//AAABlCwNZoAwDQYJKoZIhvcNAQELBQADggEBACg5bcYTjb/S3NjQZhgphWl5 0aRLKDvaf1EWSwwje9fObXZME96uMbSLR6mwA1YLtH6I9Fhr3bBt07zLitMYBWO2 Pmr+y6zuGcCVOb7koeT9LxQnl9Z13OufQD9pdKu4Tp2f5E53Mubl+DpTFtwQ3nog XB/JOQxnNsQlB8Dc5/TXGdI34eghZJXZAzFCIWbCz/saArqx1+YC56ZlX2+M7QNe D2HwAdsX5d46LI3/jPknqlpf0Y4eyd388+KCHxGv9y2mOWvVkABOJO3gbOsvg6JJ Ftch/WDAMFjcGSm4zeIDfGddPyMedR0ZreVK2zC4M31J9gVufw23K3mGwUax95I= -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:50 2025 by rpki-client