This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HFHX1XLvPL4kO_QIbM2NnI1ASzU.roa File: HFHX1XLvPL4kO_QIbM2NnI1ASzU.roa (raw, json) Hash identifier: B3YzWafMv2PjNhIduh1KmGlEuZVx3aTSCxIkTRXk/vQ= Subject key identifier: 1C:51:D7:D5:72:EF:3C:BE:24:3B:F4:08:6C:CD:8D:9C:8D:40:4B:35 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01924AC21EDC79EE10DD53F798974BCFCCD4 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HFHX1XLvPL4kO_QIbM2NnI1ASzU.roa Signing time: Wed 02 Oct 2024 01:04:48 +0000 ROA not before: Wed 02 Oct 2024 01:04:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:192:4ac1:8ee4/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:92:4a:c2:1e:dc:79:ee:10:dd:53:f7:98:97:4b:cf:cc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Oct 2 01:04:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=1c51d7d572ef3cbe243bf4086ccd8d9c8d404b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:b4:d2:65:cd:2b:07:52:8d:f8:b4:2a:a7: a8:72:2f:7d:cd:e9:d2:71:96:4c:5f:b2:22:83:05: 81:89:a8:31:6c:93:10:7d:c5:e6:89:42:c8:d1:31: 35:40:8e:a4:94:31:78:a6:85:af:de:d0:58:99:e2: 6d:33:3e:d5:06:ab:87:cc:ae:2d:60:14:d6:4e:a9: 34:20:01:8f:13:e3:32:e0:7f:41:f3:d8:81:33:95: 0c:58:53:1c:df:f3:c0:24:46:7c:5d:3a:77:27:7b: a1:93:4a:4c:56:93:3a:63:5b:f3:e5:e7:41:42:0f: 1e:8b:aa:28:28:b7:c2:4b:66:b9:32:a7:4b:b9:ba: 6f:ab:92:22:a9:da:04:95:83:f0:56:ac:cb:e2:0b: 87:88:26:c9:86:8d:fc:62:40:44:13:46:47:84:fd: 36:25:ef:24:68:75:65:fd:d6:a5:07:75:42:a7:21: f5:ec:7f:1f:e9:e4:4e:87:29:ee:45:74:f2:16:0e: 90:66:5d:68:30:94:a3:ff:eb:f0:8b:39:ca:25:e5: 30:81:27:83:5e:40:08:56:f8:cc:f7:d9:9f:32:14: a7:e0:6d:28:47:6d:5f:d1:04:27:73:e5:c1:1c:1c: f2:5d:38:ac:f0:73:29:c6:08:0b:2d:de:b9:73:82: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:D7:D5:72:EF:3C:BE:24:3B:F4:08:6C:CD:8D:9C:8D:40:4B:35 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HFHX1XLvPL4kO_QIbM2NnI1ASzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:192:4ac1:8ee4/128 Signature Algorithm: sha256WithRSAEncryption 0b:c3:fb:ca:f2:b1:50:3a:45:db:30:63:81:7e:5b:d1:b5:7d: 0b:2e:eb:94:45:e7:07:9e:fe:04:84:b3:e4:d0:d3:f8:23:64: 74:9d:3c:d6:1b:fa:23:cd:a2:9e:71:de:82:a6:37:4b:5d:a7: 58:f4:b3:28:ee:10:72:53:d5:82:8b:4f:8a:ca:9a:0d:75:4c: b0:e6:7f:15:89:ba:03:b0:dd:b6:17:54:e0:c3:21:5a:c3:87: 98:61:ac:33:68:ae:39:80:42:38:9c:26:5b:fd:dc:7e:3f:18: 72:5e:3f:4b:55:57:a6:0e:9e:11:18:1e:82:80:2f:61:23:25: 79:45:37:8d:ee:10:36:d8:63:d6:21:92:cf:ce:e3:df:e9:54: f2:a5:bc:0b:80:5a:c4:00:b3:cf:6e:8d:13:04:37:d8:be:8d: a8:ee:a0:68:08:1f:41:e7:e9:1b:95:1f:9d:89:4f:36:48:a6: 77:ea:59:af:a7:a3:56:f1:73:84:01:17:c1:d8:91:5f:e6:34: a2:aa:5d:a4:0e:a1:78:f2:77:23:c6:78:51:63:a8:69:64:e1: b5:d4:bc:20:b1:ef:34:16:31:ee:40:c7:92:a6:51:7d:2d:fd: 52:60:4b:e9:46:1f:3d:28:26:2b:9b:72:16:d1:17:a8:30:55: b0:be:8c:22 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZJKwh7cee4Q3VP3mJdLz8zUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQxMDAyMDEwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzUxZDdkNTcyZWYzY2JlMjQzYmY0MDg2Y2NkOGQ5YzhkNDA0YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArji00mXNKwdSjfi0Kqeoci99zenS cZZMX7IigwWBiagxbJMQfcXmiULI0TE1QI6klDF4poWv3tBYmeJtMz7VBquHzK4t YBTWTqk0IAGPE+My4H9B89iBM5UMWFMc3/PAJEZ8XTp3J3uhk0pMVpM6Y1vz5edB Qg8ei6ooKLfCS2a5MqdLubpvq5IiqdoElYPwVqzL4guHiCbJho38YkBEE0ZHhP02 Je8kaHVl/dalB3VCpyH17H8f6eROhynuRXTyFg6QZl1oMJSj/+vwiznKJeUwgSeD XkAIVvjM99mfMhSn4G0oR21f0QQnc+XBHBzyXTis8HMpxggLLd65c4L5bwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFBxR19Vy7zy+JDv0CGzNjZyNQEs1MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvSEZIWDFYTHZQTDRrT19RSWJNMk5uSTFBU3pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGSSsGO5DANBgkqhkiG9w0BAQsFAAOCAQEAC8P7yvKxUDpF2zBjgX5b0bV9 Cy7rlEXnB57+BISz5NDT+CNkdJ081hv6I82innHegqY3S12nWPSzKO4QclPVgotP isqaDXVMsOZ/FYm6A7DdthdU4MMhWsOHmGGsM2iuOYBCOJwmW/3cfj8Ycl4/S1VX pg6eERgegoAvYSMleUU3je4QNthj1iGSz87j3+lU8qW8C4BaxACzz26NEwQ32L6N qO6gaAgfQefpG5UfnYlPNkimd+pZr6ejVvFzhAEXwdiRX+Y0oqpdpA6hePJ3I8Z4 UWOoaWThtdS8ILHvNBYx7kDHkqZRfS39UmBL6UYfPSgmK5tyFtEXqDBVsL6MIg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:27 2025 by rpki-client