This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/46H4EdHCpcLIlsZnjNfQR8eWVPY.roa File: 46H4EdHCpcLIlsZnjNfQR8eWVPY.roa (raw, json) Hash identifier: rdb4soTgaUn1nSndhUyIXldLtC8F9n04U3A3awG1cSs= Subject key identifier: E3:A1:F8:11:D1:C2:A5:C2:C8:96:C6:67:8C:D7:D0:47:C7:96:54:F6 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0194595B1EE8DFC02FA06122D9C3812D67B1 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/46H4EdHCpcLIlsZnjNfQR8eWVPY.roa Signing time: Sun 12 Jan 2025 07:12:11 +0000 ROA not before: Sun 12 Jan 2025 07:12:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:59:5b:1e:e8:df:c0:2f:a0:61:22:d9:c3:81:2d:67:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 12 07:12:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e3a1f811d1c2a5c2c896c6678cd7d047c79654f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:8e:15:c3:54:91:75:20:3f:52:09:20:22: fa:8c:f8:7a:0f:66:ed:85:ea:ea:0b:5c:12:9b:7a: e7:9e:d9:96:aa:43:25:9e:ee:93:66:81:84:e0:14: 61:e4:3a:79:cc:03:54:b6:13:3e:6c:05:02:aa:f5: 0e:e3:02:f1:13:17:99:1e:54:8c:64:60:26:3b:0a: e1:1b:e5:41:d4:31:6c:7d:64:0c:7d:81:f6:3f:da: 2b:a7:93:da:5d:45:05:74:87:d4:bd:c7:67:a2:0f: 82:18:fe:8e:fc:2d:e5:e6:c7:b5:9c:2f:7f:58:8e: e2:ed:02:3a:58:cd:49:9e:7e:2c:b4:91:eb:4a:d6: 7a:a4:8f:a3:a7:91:a5:d2:ef:15:95:32:73:65:29: 82:ed:f2:55:74:6e:90:dc:f8:8d:f8:5d:9d:7b:22: db:1e:47:1b:57:6b:d5:c3:88:52:76:60:9a:02:06: 37:b1:85:5e:6d:6e:a7:28:fa:5a:64:5e:84:24:3c: 5b:9b:af:2c:38:f2:45:91:28:80:50:10:ec:12:32: f7:69:5f:de:d4:8d:3b:59:3a:89:d6:27:f6:b5:ee: 85:49:b2:8d:f3:d7:0c:e1:28:e2:17:7a:5f:da:c7: c1:8a:6e:1a:2e:55:42:11:d2:fb:18:62:72:5c:22: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:F8:11:D1:C2:A5:C2:C8:96:C6:67:8C:D7:D0:47:C7:96:54:F6 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/46H4EdHCpcLIlsZnjNfQR8eWVPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 66:ab:31:9e:0e:47:9c:28:a4:64:28:66:ed:58:f8:b9:93:ab: ed:63:75:2e:0a:51:c0:6d:8e:62:c9:8e:bf:1c:4e:1b:46:06: 47:a5:f6:9e:35:4c:83:5d:30:f5:18:7c:20:b0:2d:64:29:aa: be:59:4e:44:91:82:c0:2a:45:7a:8d:a3:5a:08:b7:37:86:cc: 0a:5d:8c:e8:d7:6e:45:cf:79:86:85:d1:22:9d:42:00:aa:cf: 2f:3e:13:bc:e6:3a:a0:4b:77:3a:11:86:81:c3:bb:0e:97:0d: 79:d5:4e:f6:15:0b:76:25:50:a8:00:5d:78:50:2b:11:23:44: 82:c5:0e:bc:65:18:35:6e:4c:00:46:71:85:0d:e1:aa:aa:cc: 07:31:e4:76:53:b5:e8:9a:33:18:a6:99:d2:21:31:55:d8:91: b8:c1:2f:36:97:63:f8:7f:b8:6c:3c:29:e3:6a:a3:7b:3b:38: c0:ad:d1:52:16:a2:a9:4b:f7:a9:74:7e:76:aa:88:b1:b2:25: 97:bf:e5:8c:6b:d4:56:ac:33:fc:8b:49:e7:a8:e5:86:09:a5: be:50:eb:bc:0a:fb:cc:78:9d:aa:59:4b:a6:42:20:b2:a2:5b: 96:e6:2a:05:10:42:43:7f:49:3b:c5:de:70:f4:96:f7:e0:f3: 4e:10:b6:72 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZRZWx7o38AvoGEi2cOBLWexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTEyMDcxMjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2ExZjgxMWQxYzJhNWMyYzg5NmM2Njc4Y2Q3ZDA0N2M3OTY1NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB2OFcNUkXUgP1IJICL6jPh6D2bt herqC1wSm3rnntmWqkMlnu6TZoGE4BRh5Dp5zANUthM+bAUCqvUO4wLxExeZHlSM ZGAmOwrhG+VB1DFsfWQMfYH2P9orp5PaXUUFdIfUvcdnog+CGP6O/C3l5se1nC9/ WI7i7QI6WM1Jnn4stJHrStZ6pI+jp5Gl0u8VlTJzZSmC7fJVdG6Q3PiN+F2deyLb HkcbV2vVw4hSdmCaAgY3sYVebW6nKPpaZF6EJDxbm68sOPJFkSiAUBDsEjL3aV/e 1I07WTqJ1if2te6FSbKN89cM4SjiF3pf2sfBim4aLlVCEdL7GGJyXCLyDwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFOOh+BHRwqXCyJbGZ4zX0EfHllT2MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvNDZINEVkSENwY0xJbHNabmpOZlFSOGVXVlBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAZqsxng5HnCikZChm7Vj4uZOr 7WN1LgpRwG2OYsmOvxxOG0YGR6X2njVMg10w9Rh8ILAtZCmqvllORJGCwCpFeo2j Wgi3N4bMCl2M6NduRc95hoXRIp1CAKrPLz4TvOY6oEt3OhGGgcO7DpcNedVO9hUL diVQqABdeFArESNEgsUOvGUYNW5MAEZxhQ3hqqrMBzHkdlO16JozGKaZ0iExVdiR uMEvNpdj+H+4bDwp42qjezs4wK3RUhaiqUv3qXR+dqqIsbIll7/ljGvUVqwz/ItJ 56jlhgmlvlDrvAr7zHidqllLpkIgsqJbluYqBRBCQ39JO8XecPSW9+DzThC2cg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:35 2025 by rpki-client