This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CL0GaXY7yCF5tOCyer_cfY0bb2w.roa
File: CL0GaXY7yCF5tOCyer_cfY0bb2w.roa (raw, json)
Hash identifier: 4wxodrilwD6GGNBy2bD0L4OdR/Uc4+KEJti7NWoScmA=
Subject key identifier: 08:BD:06:69:76:3B:C8:21:79:B4:E0:B2:7A:BF:DC:7D:8D:1B:6F:6C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019375AA387E3986B43352D8B4007FF64A85
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CL0GaXY7yCF5tOCyer_cfY0bb2w.roa
Signing time: Fri 29 Nov 2024 02:05:09 +0000
ROA not before: Fri 29 Nov 2024 02:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:75a9:83f0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:75:aa:38:7e:39:86:b4:33:52:d8:b4:00:7f:f6:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 29 02:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08bd0669763bc82179b4e0b27abfdc7d8d1b6f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:06:00:66:1b:02:7c:df:45:e9:c9:69:4a:
53:9e:cc:be:b4:41:c8:b6:09:3e:af:8a:a6:66:fe:
29:37:57:b2:09:cf:a8:bf:59:8a:cc:8f:a5:21:d8:
3e:0c:04:52:c9:b9:b6:5a:aa:45:ad:ab:d4:f5:19:
2a:f6:f9:00:0e:19:6b:0f:4a:0a:50:5d:23:c4:68:
3a:98:e6:7a:b5:0f:cb:96:58:57:58:bf:3c:a8:e5:
b5:5e:55:d5:2c:3f:94:06:ec:12:3a:ca:c8:92:45:
11:51:71:9c:6a:d6:b2:17:c4:7c:64:97:05:be:f5:
a7:02:4b:e6:27:79:72:bc:90:de:d0:10:19:97:55:
74:34:d7:af:98:a6:0a:4e:35:19:28:83:ea:76:bc:
42:5b:18:89:21:f7:72:60:9e:3d:6f:13:fd:31:d9:
6e:d0:69:4e:10:c9:b6:7a:dd:c4:13:3c:b1:6f:f4:
1e:34:fd:f8:01:56:f1:8f:5b:20:ee:6a:1b:c2:68:
b1:ef:cf:3d:3f:0f:51:8a:f7:02:89:e2:4b:6f:c5:
40:ea:eb:24:74:86:41:7b:60:7f:60:96:dd:f5:3f:
e5:3e:09:4f:38:fa:fa:b5:ce:75:10:35:f3:28:2d:
77:3d:47:b5:91:e0:4d:04:7f:59:2e:cd:f6:c5:76:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:06:69:76:3B:C8:21:79:B4:E0:B2:7A:BF:DC:7D:8D:1B:6F:6C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CL0GaXY7yCF5tOCyer_cfY0bb2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:75a9:83f0/128
Signature Algorithm: sha256WithRSAEncryption
38:86:26:cb:01:b8:05:5b:e2:1d:cf:54:81:8c:4e:98:55:f8:
29:6b:f2:f7:6b:ca:04:90:37:4a:9c:7d:9a:bc:d0:19:ed:18:
10:c2:cb:f7:f2:8f:1b:34:35:c3:91:90:28:11:92:32:85:e5:
a6:47:62:93:5e:b2:1f:76:53:24:51:1f:01:8f:45:4f:6e:e7:
26:03:4c:10:89:42:32:78:1f:63:ca:56:55:0f:79:f2:5f:be:
21:80:80:19:3d:ff:98:85:61:36:1d:91:9a:74:7b:3b:80:4f:
c4:f9:f4:6e:9a:7d:4c:56:b8:92:14:8a:d3:72:ae:80:90:a6:
fa:95:1b:e2:0a:6d:de:16:ac:a4:54:87:c3:5b:23:d0:af:27:
37:a4:c9:1c:15:10:67:a1:5f:55:bc:2a:04:f6:4c:52:13:e6:
ed:87:1a:11:ea:1a:ff:cd:99:33:db:5d:69:e2:f7:12:8e:c2:
76:c8:a0:d9:a4:e3:e5:40:b3:04:35:b3:80:aa:f0:41:48:41:
ee:ef:52:65:49:53:1a:43:a0:c8:78:30:83:0d:a8:ba:ef:63:
42:7a:a6:e7:18:24:3a:bd:fe:c6:46:07:57:6c:e4:28:20:6e:
51:99:93:b9:0d:c6:96:23:3f:6f:e5:dc:61:0f:8b:03:88:ae:
13:67:e9:56
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZN1qjh+OYa0M1LYtAB/9kqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMTI5MDIwNTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGJkMDY2OTc2M2JjODIxNzliNGUwYjI3YWJmZGM3ZDhkMWI2ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfoGAGYbAnzfRenJaUpTnsy+tEHI
tgk+r4qmZv4pN1eyCc+ov1mKzI+lIdg+DARSybm2WqpFravU9Rkq9vkADhlrD0oK
UF0jxGg6mOZ6tQ/LllhXWL88qOW1XlXVLD+UBuwSOsrIkkURUXGcatayF8R8ZJcF
vvWnAkvmJ3lyvJDe0BAZl1V0NNevmKYKTjUZKIPqdrxCWxiJIfdyYJ49bxP9Mdlu
0GlOEMm2et3EEzyxb/QeNP34AVbxj1sg7mobwmix7889Pw9RivcCieJLb8VA6usk
dIZBe2B/YJbd9T/lPglPOPr6tc51EDXzKC13PUe1keBNBH9ZLs32xXb5WwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAi9Bml2O8ghebTgsnq/3H2NG29sMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvQ0wwR2FYWTd5Q0Y1dE9DeWVyX2NmWTBiYjJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGTdamD8DANBgkqhkiG9w0BAQsFAAOCAQEAOIYmywG4BVviHc9UgYxOmFX4
KWvy92vKBJA3Spx9mrzQGe0YEMLL9/KPGzQ1w5GQKBGSMoXlpkdik16yH3ZTJFEf
AY9FT27nJgNMEIlCMngfY8pWVQ958l++IYCAGT3/mIVhNh2RmnR7O4BPxPn0bpp9
TFa4khSK03KugJCm+pUb4gpt3haspFSHw1sj0K8nN6TJHBUQZ6FfVbwqBPZMUhPm
7YcaEeoa/82ZM9tdaeL3Eo7Cdsig2aTj5UCzBDWzgKrwQUhB7u9SZUlTGkOgyHgw
gw2ouu9jQnqm5xgkOr3+xkYHV2zkKCBuUZmTuQ3GliM/b+XcYQ+LA4iuE2fpVg==
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:33:43 2025 by rpki-client