This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7bKmwnNKQHmul4wh36Tz3iDyVM0.roa File: 7bKmwnNKQHmul4wh36Tz3iDyVM0.roa (raw, json) Hash identifier: x8iRAr8hd3gSs+Bmfwyz5rsbNFLGbXSQUi+UIoNTkcY= Subject key identifier: ED:B2:A6:C2:73:4A:40:79:AE:97:8C:21:DF:A4:F3:DE:20:F2:54:CD Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01917691A6C63BFEBB6E4348B3D0E8DBBAFD Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7bKmwnNKQHmul4wh36Tz3iDyVM0.roa Signing time: Wed 21 Aug 2024 20:12:22 +0000 ROA not before: Wed 21 Aug 2024 20:12:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:76:91:a6:c6:3b:fe:bb:6e:43:48:b3:d0:e8:db:ba:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Aug 21 20:12:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=edb2a6c2734a4079ae978c21dfa4f3de20f254cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:aa:e4:50:92:1f:c4:6b:df:1c:a1:74:5b: 40:58:e6:a6:9a:71:7e:df:d2:21:d5:3e:e7:47:04: 79:df:db:b3:bd:01:fd:8a:06:2d:e6:ae:35:49:79: 74:00:9e:f6:41:9d:20:39:2d:9d:24:56:5a:0a:e2: 43:6e:4c:45:ab:d3:ca:fd:4c:7c:18:a8:44:15:aa: 23:b4:2a:e8:3f:34:e3:35:08:15:39:a7:f0:14:57: 78:18:f1:ee:c6:f4:87:d9:3e:7a:ff:41:c7:5c:22: d9:4a:fa:08:cd:42:f6:f3:6d:db:e9:30:7a:81:6f: 89:a9:e1:38:2e:9a:0b:7a:ef:64:68:67:ae:05:aa: bc:13:06:29:9c:f7:38:51:26:d6:37:6e:c0:9f:a1: c0:03:d6:ba:d6:6a:c9:bc:af:08:9b:ff:32:7b:eb: 43:c9:58:e3:40:72:a2:93:8e:0f:0d:83:06:db:c6: 18:d3:02:da:6f:75:25:e9:48:ca:a3:48:ec:50:12: ad:41:b5:1e:98:33:28:ff:0a:ff:5d:90:3b:8f:c8: c3:42:60:fa:aa:78:a4:a0:09:1f:27:b6:0c:29:d2: 1b:ea:40:4e:0f:93:88:94:93:1e:50:07:bf:bb:3b: 99:d0:05:63:b7:ae:e6:de:6b:92:24:fa:b4:73:db: 0a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B2:A6:C2:73:4A:40:79:AE:97:8C:21:DF:A4:F3:DE:20:F2:54:CD X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7bKmwnNKQHmul4wh36Tz3iDyVM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 Signature Algorithm: sha256WithRSAEncryption 73:b3:dd:17:18:ea:f8:9b:b6:95:23:52:cc:26:47:63:43:8d: 53:55:9e:d3:31:0b:6d:87:3b:71:08:56:90:6f:6f:c6:99:4e: 03:a7:1f:1c:3b:8f:81:c4:0a:07:af:b8:12:bf:90:33:7d:8b: 2e:98:9e:f4:00:2d:8e:9e:b1:ec:a8:be:aa:a9:2e:b4:b9:62: df:0e:a5:39:16:fc:27:e3:11:ff:5e:62:02:7b:b9:03:2f:bc: 95:88:25:de:b5:b4:f6:e0:34:f2:36:b4:99:28:b8:d2:ad:32: af:37:9e:95:33:03:d7:54:7a:13:e1:75:49:af:d1:35:a3:6b: bf:83:ae:95:23:e8:1b:8e:ec:5a:33:f0:f5:cc:a9:5f:8a:71: 48:78:dd:ec:59:6f:61:86:5c:f4:66:1b:b6:4e:b8:91:68:1b: bc:52:bf:e3:09:b2:6f:70:94:0e:80:3e:2a:f2:73:18:46:da: 9b:50:6e:29:b1:2c:50:77:18:e8:77:a9:f5:db:d5:50:d2:ab: 8f:e4:be:ce:0d:0e:80:99:9e:ff:5a:38:15:02:96:36:c6:9a: 81:86:8f:77:c5:d6:66:91:e6:d6:39:e9:97:46:2d:38:3a:66: 90:a8:80:bb:25:a9:0f:e4:e9:3e:65:b6:04:6e:ee:9a:bc:44: 41:2b:d0:c3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZF2kabGO/67bkNIs9Do27r9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwODIxMjAxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGIyYTZjMjczNGE0MDc5YWU5NzhjMjFkZmE0ZjNkZTIwZjI1NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdOq5FCSH8Rr3xyhdFtAWOammnF+ 39Ih1T7nRwR539uzvQH9igYt5q41SXl0AJ72QZ0gOS2dJFZaCuJDbkxFq9PK/Ux8 GKhEFaojtCroPzTjNQgVOafwFFd4GPHuxvSH2T56/0HHXCLZSvoIzUL2823b6TB6 gW+JqeE4LpoLeu9kaGeuBaq8EwYpnPc4USbWN27An6HAA9a61mrJvK8Im/8ye+tD yVjjQHKik44PDYMG28YY0wLab3Ul6UjKo0jsUBKtQbUemDMo/wr/XZA7j8jDQmD6 qnikoAkfJ7YMKdIb6kBOD5OIlJMeUAe/uzuZ0AVjt67m3muSJPq0c9sKWwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFO2ypsJzSkB5rpeMId+k894g8lTNMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvN2JLbXduTktRSG11bDR3aDM2VHozaUR5Vk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAc7PdFxjq+Ju2lSNSzCZHY0ON U1We0zELbYc7cQhWkG9vxplOA6cfHDuPgcQKB6+4Er+QM32LLpie9AAtjp6x7Ki+ qqkutLli3w6lORb8J+MR/15iAnu5Ay+8lYgl3rW09uA08ja0mSi40q0yrzeelTMD 11R6E+F1Sa/RNaNrv4OulSPoG47sWjPw9cypX4pxSHjd7FlvYYZc9GYbtk64kWgb vFK/4wmyb3CUDoA+KvJzGEbam1BuKbEsUHcY6Hep9dvVUNKrj+S+zg0OgJme/1o4 FQKWNsaagYaPd8XWZpHm1jnpl0YtODpmkKiAuyWpD+TpPmW2BG7umrxEQSvQww== -----END CERTIFICATE-----Generated at Mon Dec 15 12:12:29 2025 by rpki-client