This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HCDGr0ssnrj5Vj4YGnoEWbVO3IE.roa File: HCDGr0ssnrj5Vj4YGnoEWbVO3IE.roa (raw, json) Hash identifier: LVc5ia/MCj3mmDoUYt0os5TgWtqGNAIhWRrYFEBO72A= Subject key identifier: 1C:20:C6:AF:4B:2C:9E:B8:F9:56:3E:18:1A:7A:04:59:B5:4E:DC:81 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191A1759273ED2311492ECE7D04C032FFC8 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HCDGr0ssnrj5Vj4YGnoEWbVO3IE.roa Signing time: Fri 30 Aug 2024 04:05:22 +0000 ROA not before: Fri 30 Aug 2024 04:05:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 2001:67c:64:ffff:0:191:a174:b60f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:a1:75:92:73:ed:23:11:49:2e:ce:7d:04:c0:32:ff:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Aug 30 04:05:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=1c20c6af4b2c9eb8f9563e181a7a0459b54edc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:8a:8f:bd:0c:e7:61:56:0d:f4:40:da:b0: 9f:ef:5d:5e:a0:f2:ba:c7:24:cd:5a:64:9c:63:4e: 71:48:0f:11:69:76:c4:ae:4d:a3:5b:0f:f6:36:30: 23:02:10:b3:41:8e:e4:51:83:f8:f2:33:36:5e:33: 0f:45:c5:7f:cf:bb:5d:5e:a8:ec:b4:c7:51:cf:53: 79:cd:ac:b4:4d:7c:73:7b:9a:44:b4:f7:4a:d8:69: 35:22:a7:10:48:a1:ab:25:7f:8d:f4:52:e5:02:5b: 33:6d:b1:06:01:98:cd:53:bd:bf:5e:42:6b:54:ab: 8d:ec:30:0c:8e:dd:88:4e:01:40:ec:a4:ac:c4:58: fe:f8:cb:69:75:7c:e1:d9:1c:fc:ad:8f:aa:94:e5: 4c:8b:12:83:50:d1:96:e3:2f:3d:73:08:25:8a:fb: 84:c4:b1:88:77:3c:e2:dc:68:fd:2f:a1:ee:55:47: cc:a8:99:05:b0:3d:a7:18:74:3f:90:f9:0a:5b:55: 98:16:82:3d:68:f9:86:a8:1f:f9:d4:8e:d8:f0:64: 75:d4:4b:e2:6b:65:8f:1b:3a:ff:13:80:98:7f:b1: 28:0a:8a:da:ed:d6:d7:c7:23:9a:99:bc:01:95:b5: 8f:c8:e3:ee:c5:85:dd:b1:a4:ad:92:47:6b:4d:04: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:20:C6:AF:4B:2C:9E:B8:F9:56:3E:18:1A:7A:04:59:B5:4E:DC:81 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HCDGr0ssnrj5Vj4YGnoEWbVO3IE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 2001:67c:64:ffff:0:191:a174:b60f/128 Signature Algorithm: sha256WithRSAEncryption 94:a6:bd:b5:31:08:5f:09:f6:05:42:f3:b8:85:78:d2:05:a7: e9:51:fa:62:ab:d6:07:e9:4e:33:2c:2d:f1:49:87:b3:58:5b: 1a:27:86:eb:a6:2b:ac:db:ef:1e:56:0f:95:23:52:ef:38:12: 6b:54:85:b3:85:ea:5e:81:d5:83:da:7c:1a:42:62:37:ec:f4: 83:7c:c4:9c:97:08:f3:dd:c3:11:dc:74:36:b4:68:11:5b:17: 58:b4:da:1e:96:b6:b1:9f:b9:7d:e5:92:e4:e6:9a:42:0b:78: bf:b9:25:ad:1f:92:bb:da:b0:4f:5c:90:05:d3:b5:4e:49:2f: 95:b5:3d:6e:47:6e:4d:7e:fa:3f:a9:f1:87:aa:f0:ca:1c:2e: 14:9f:fd:1e:a6:cf:70:7d:ad:cc:0d:58:96:4c:78:96:4d:68: 37:86:36:be:e4:15:5d:95:e9:19:a6:5b:fc:86:e0:2f:23:8d: 87:c4:c2:e4:3e:e2:d4:06:fc:46:be:cf:df:bc:62:fe:c2:85: d9:ad:47:b2:33:16:a8:31:1f:49:83:e4:d6:1b:f6:d2:55:45: 8e:64:e0:6a:13:38:e4:34:f6:71:84:c7:42:bf:6e:f5:9a:85: 80:92:8d:5a:81:08:42:e4:01:26:ed:af:98:d6:2e:6c:0e:57: 94:a1:45:f7 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZGhdZJz7SMRSS7OfQTAMv/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwODMwMDQwNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzIwYzZhZjRiMmM5ZWI4Zjk1NjNlMTgxYTdhMDQ1OWI1NGVkYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzluKj70M52FWDfRA2rCf711eoPK6 xyTNWmScY05xSA8RaXbErk2jWw/2NjAjAhCzQY7kUYP48jM2XjMPRcV/z7tdXqjs tMdRz1N5zay0TXxze5pEtPdK2Gk1IqcQSKGrJX+N9FLlAlszbbEGAZjNU72/XkJr VKuN7DAMjt2ITgFA7KSsxFj++MtpdXzh2Rz8rY+qlOVMixKDUNGW4y89cwglivuE xLGIdzzi3Gj9L6HuVUfMqJkFsD2nGHQ/kPkKW1WYFoI9aPmGqB/51I7Y8GR11Evi a2WPGzr/E4CYf7EoCora7dbXxyOambwBlbWPyOPuxYXdsaStkkdrTQRNGQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFBwgxq9LLJ64+VY+GBp6BFm1TtyBMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvSENER3Iwc3Nucmo1Vmo0WUdub0VXYlZPM0lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGQ/fLzAgMRACABBnwAZP//AAABkaF0tg8wDQYJKoZIhvcNAQELBQADggEB AJSmvbUxCF8J9gVC87iFeNIFp+lR+mKr1gfpTjMsLfFJh7NYWxonhuumK6zb7x5W D5UjUu84EmtUhbOF6l6B1YPafBpCYjfs9IN8xJyXCPPdwxHcdDa0aBFbF1i02h6W trGfuX3lkuTmmkILeL+5Ja0fkrvasE9ckAXTtU5JL5W1PW5Hbk1++j+p8Yeq8Moc LhSf/R6mz3B9rcwNWJZMeJZNaDeGNr7kFV2V6RmmW/yG4C8jjYfEwuQ+4tQG/Ea+ z9+8Yv7ChdmtR7IzFqgxH0mD5NYb9tJVRY5k4GoTOOQ09nGEx0K/bvWahYCSjVqB CELkASbtr5jWLmwOV5ShRfc= -----END CERTIFICATE-----Generated at Sun Dec 14 03:30:33 2025 by rpki-client