This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5q95Kt3EOUo_Ob6fhIBXDw8-DnQ.roa
File: 5q95Kt3EOUo_Ob6fhIBXDw8-DnQ.roa (raw, json)
Hash identifier: IEWdtz5r0cj3aNFszUzYmpzOfkKuoFGOIuzpPG49fEQ=
Subject key identifier: E6:AF:79:2A:DD:C4:39:4A:3F:39:BE:9F:84:80:57:0F:0F:3E:0E:74
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194AE4D922D72F6CEBA72941561F33CCB7A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5q95Kt3EOUo_Ob6fhIBXDw8-DnQ.roa
Signing time: Tue 28 Jan 2025 19:05:06 +0000
ROA not before: Tue 28 Jan 2025 19:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:ae4d:1310/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ae:4d:92:2d:72:f6:ce:ba:72:94:15:61:f3:3c:cb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 28 19:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6af792addc4394a3f39be9f8480570f0f3e0e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:7f:9d:f1:5d:26:e5:e6:47:ed:83:8c:82:
05:b2:42:a2:18:1c:3f:64:e6:85:70:04:38:97:b8:
7e:23:98:23:f3:86:97:c8:9c:83:b4:d4:71:22:d2:
b8:1f:66:a6:37:55:55:8e:1e:03:09:73:c5:3b:6c:
1d:e1:df:83:c4:35:ca:e4:a1:30:e2:67:84:b9:af:
20:ef:8d:45:6d:30:18:af:09:be:44:f3:46:88:fe:
e9:6c:6d:13:72:29:f3:fd:a5:72:73:d1:73:68:37:
08:79:50:20:70:35:db:79:68:fd:f3:01:5a:85:02:
ba:d5:19:1b:9b:01:ac:46:b5:92:9c:b5:78:dd:e5:
53:c7:54:79:d3:48:72:c4:23:a1:2c:69:af:c6:d4:
c0:98:a2:74:dd:9a:38:3f:11:03:53:01:9d:00:1f:
24:7c:8f:13:28:9e:46:52:35:ad:13:69:ba:75:b4:
73:01:c2:b2:5a:84:30:61:29:97:ea:4b:de:98:a0:
55:cc:ee:bb:15:9c:f5:50:0f:8e:03:e4:6b:4e:9a:
1f:5f:db:87:a3:fc:a1:b7:a6:30:0d:de:6b:54:bb:
61:6d:2b:fa:ca:d3:3a:bc:36:e4:3d:ff:64:a7:14:
e9:04:f1:39:eb:c8:08:81:81:e8:e2:40:00:fe:0f:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:79:2A:DD:C4:39:4A:3F:39:BE:9F:84:80:57:0F:0F:3E:0E:74
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5q95Kt3EOUo_Ob6fhIBXDw8-DnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:ae4d:1310/128
Signature Algorithm: sha256WithRSAEncryption
18:ec:98:df:7d:d9:a5:c5:d1:1b:8d:e8:15:6c:41:d2:93:28:
98:e7:ac:24:96:8a:cd:a4:dd:11:80:69:8d:cb:2f:86:36:e4:
6e:19:19:94:f7:7a:03:03:68:9c:f2:15:6c:69:e1:93:23:5f:
5f:19:5e:25:d9:1b:43:a9:1e:e2:2a:6d:37:97:41:d1:05:93:
21:f0:75:ce:11:d4:7c:f7:6d:94:e1:48:a7:fc:eb:bc:78:13:
66:2a:6c:e7:a1:84:b3:0c:00:63:1a:84:bc:a2:dd:ff:ce:1b:
24:12:73:59:ea:97:36:b5:3c:6a:f6:2a:20:e0:d7:0f:01:51:
fa:b3:11:7d:f8:ba:96:60:42:6f:17:56:de:88:01:13:b7:00:
c3:f0:bd:9e:ec:53:03:6e:aa:3e:1e:75:5a:4c:48:aa:d0:e6:
7e:3c:fc:d6:42:33:d4:2e:c0:d1:1b:8a:70:98:d8:e0:be:13:
17:49:87:57:e8:e3:84:67:4e:2b:87:f2:01:d9:d8:1a:e9:7c:
16:60:92:3a:e5:b4:66:ac:2c:cc:79:38:56:44:51:ab:83:2a:
e2:b5:5a:94:90:65:a3:24:80:7d:f6:80:71:a0:79:21:6f:ea:
dd:dd:b3:78:a2:91:cb:80:4f:e2:f3:35:4a:24:2d:15:25:ae:
61:1d:b5:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 17 19:05:23 2025 by rpki-client