This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3P2nGWa3sZ1t_l_S80YfvWg2TS8.roa File: 3P2nGWa3sZ1t_l_S80YfvWg2TS8.roa (raw, json) Hash identifier: E+Xx5UhAdPg+tkz4wBngrFZS8XPsS6eHfwifJnSCpz4= Subject key identifier: DC:FD:A7:19:66:B7:B1:9D:6D:FE:5F:D2:F3:46:1F:BD:68:36:4D:2F Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019517DFE10AA58E2DBF257C5BCDBB9D1561 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3P2nGWa3sZ1t_l_S80YfvWg2TS8.roa Signing time: Tue 18 Feb 2025 07:05:02 +0000 ROA not before: Tue 18 Feb 2025 07:05:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:17df:2de2/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:17:df:e1:0a:a5:8e:2d:bf:25:7c:5b:cd:bb:9d:15:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Feb 18 07:05:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dcfda71966b7b19d6dfe5fd2f3461fbd68364d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a9:f4:75:49:4f:59:a0:4f:75:b7:24:c6:d2: 0f:87:c1:f9:1c:ef:76:93:29:db:09:1f:41:41:4a: 57:35:c4:43:20:90:be:c9:22:ac:c2:9b:55:71:ee: 6a:7a:a7:b8:7c:63:de:a1:6e:90:fa:90:02:9b:92: ce:81:c1:b5:67:0f:11:07:2e:89:79:c5:e1:aa:8c: f9:75:13:f7:d4:7c:0e:e5:fc:26:b4:1e:d7:a8:c3: 1a:fd:52:70:c9:e0:2b:3c:fd:b2:76:5f:55:bc:0d: df:59:9b:41:2f:70:7e:93:94:96:82:89:7b:ed:5c: f1:29:9f:6d:84:be:65:55:ed:0e:89:49:51:f3:26: bd:91:dd:e0:c9:87:92:8b:af:72:6d:b8:df:46:55: da:2b:b1:bb:70:70:4a:49:69:5f:1c:c0:73:d1:a6: 63:a8:d0:2c:8e:77:94:27:de:63:e8:d5:14:f8:65: 6a:11:ae:78:27:f1:0d:91:57:31:68:e1:dc:94:b0: d7:ca:06:4f:72:5f:f1:6d:7e:ab:fd:08:4d:20:fa: dd:28:6f:c3:a8:1c:3f:64:40:75:8d:12:b7:81:3a: 0a:20:16:e1:5c:d5:38:62:32:62:fc:ac:83:c2:5a: 6b:e1:3d:79:68:6b:13:50:6a:b2:03:9c:1b:4a:07: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:A7:19:66:B7:B1:9D:6D:FE:5F:D2:F3:46:1F:BD:68:36:4D:2F X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3P2nGWa3sZ1t_l_S80YfvWg2TS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:17df:2de2/128 Signature Algorithm: sha256WithRSAEncryption 9a:1e:fa:a6:96:e3:61:31:70:21:d2:d0:93:ff:6d:c8:b7:74: 4a:d3:04:a2:0c:fd:59:1d:47:ff:fe:4e:3a:8f:64:8b:7d:c6: bc:ca:d6:9f:1a:fa:a8:47:ba:42:20:81:69:3f:1e:c0:ca:ed: 3c:4f:f4:51:51:61:90:ee:c6:9b:83:47:b7:ce:be:b1:dc:e1: cd:43:bd:c9:ec:3a:82:7c:50:d3:8b:c5:71:36:46:b2:ef:bf: 63:67:9e:f5:7b:f0:0c:a9:c4:ea:c2:7d:1a:6d:ef:ea:35:45: fe:41:24:05:3b:db:54:5c:4d:04:b5:94:66:29:40:26:86:e3: 57:f7:9e:6a:39:95:20:e9:b2:ef:e5:29:e0:67:70:4a:15:f2: 17:47:5b:08:20:e7:1e:21:fd:a5:28:6f:ac:d1:bd:76:dc:c8: 5c:ae:20:64:cc:3b:47:c9:c3:ef:ff:2f:17:9e:54:7b:75:f7: 82:ca:55:f9:3c:dc:bd:a1:22:30:ec:8d:3b:26:e5:66:1a:ae: 51:a2:02:14:55:55:39:3c:1a:42:ba:cb:c8:c2:a7:08:40:85: 0b:93:8c:c4:9a:56:8e:a9:51:bc:ef:1f:7c:6d:1b:c4:cb:f9: ff:35:00:cb:dc:71:e2:65:65:ed:fa:40:5d:51:54:f0:13:08: a7:7e:0a:4c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZUX3+EKpY4tvyV8W827nRVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMjE4MDcwNTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2ZkYTcxOTY2YjdiMTlkNmRmZTVmZDJmMzQ2MWZiZDY4MzY0ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36n0dUlPWaBPdbckxtIPh8H5HO92 kynbCR9BQUpXNcRDIJC+ySKswptVce5qeqe4fGPeoW6Q+pACm5LOgcG1Zw8RBy6J ecXhqoz5dRP31HwO5fwmtB7XqMMa/VJwyeArPP2ydl9VvA3fWZtBL3B+k5SWgol7 7VzxKZ9thL5lVe0OiUlR8ya9kd3gyYeSi69ybbjfRlXaK7G7cHBKSWlfHMBz0aZj qNAsjneUJ95j6NUU+GVqEa54J/ENkVcxaOHclLDXygZPcl/xbX6r/QhNIPrdKG/D qBw/ZEB1jRK3gToKIBbhXNU4YjJi/KyDwlpr4T15aGsTUGqyA5wbSgdLiQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFNz9pxlmt7Gdbf5f0vNGH71oNk0vMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvM1AybkdXYTNzWjF0X2xfUzgwWWZ2V2cyVFM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVF98t4jANBgkqhkiG9w0BAQsFAAOCAQEAmh76ppbjYTFwIdLQk/9tyLd0 StMEogz9WR1H//5OOo9ki33GvMrWnxr6qEe6QiCBaT8ewMrtPE/0UVFhkO7Gm4NH t86+sdzhzUO9yew6gnxQ04vFcTZGsu+/Y2ee9XvwDKnE6sJ9Gm3v6jVF/kEkBTvb VFxNBLWUZilAJobjV/eeajmVIOmy7+Up4GdwShXyF0dbCCDnHiH9pShvrNG9dtzI XK4gZMw7R8nD7/8vF55Ue3X3gspV+TzcvaEiMOyNOyblZhquUaICFFVVOTwaQrrL yMKnCECFC5OMxJpWjqlRvO8ffG0bxMv5/zUAy9xx4mVl7fpAXVFU8BMIp34KTA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:24 2025 by rpki-client