This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HpiHfaRSh1kNICoVJuZ5xp1fPJc.roa File: HpiHfaRSh1kNICoVJuZ5xp1fPJc.roa (raw, json) Hash identifier: ymtsYavy+rCv8qnrZtbBulOb1IE2HZ9hVI1AFVbX9w0= Subject key identifier: 1E:98:87:7D:A4:52:87:59:0D:20:2A:15:26:E6:79:C6:9D:5F:3C:97 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019569A118E1CC0B67C93DC0604139B52C9C Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HpiHfaRSh1kNICoVJuZ5xp1fPJc.roa Signing time: Thu 06 Mar 2025 04:05:19 +0000 ROA not before: Thu 06 Mar 2025 04:05:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:69a0:30e8/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:69:a1:18:e1:cc:0b:67:c9:3d:c0:60:41:39:b5:2c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 6 04:05:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1e98877da45287590d202a1526e679c69d5f3c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:f8:27:58:cb:d4:0a:13:e5:f3:e8:4a:a7: e5:19:6a:d1:66:4c:9e:14:48:32:bf:71:60:90:e6: 09:92:b5:21:cb:f6:5a:62:25:e8:8b:cc:35:58:1e: d2:de:a1:a4:3c:55:99:54:79:22:f3:54:db:ce:bb: 6d:03:27:3f:58:11:b0:58:d4:08:35:e4:a0:c5:c2: 76:15:ad:84:35:5e:fc:62:67:7a:8c:da:ad:41:97: 74:7f:bd:ba:a7:6b:15:f4:1b:cf:70:7b:8f:58:96: e4:05:bb:97:2f:53:c3:7a:bc:3d:47:dd:b2:b4:e4: 3e:7f:f1:c4:5d:61:27:dd:35:d4:93:d9:63:2d:7b: c1:6a:69:8d:99:62:96:82:79:ce:8a:38:64:4e:b0: 4d:61:d1:9e:a5:e4:d9:7c:b0:c1:71:f1:74:db:2f: d1:a7:0b:db:db:55:2b:73:b9:38:7f:ff:c2:a0:22: 8a:a0:bf:e0:11:b6:fa:32:2b:b4:79:5e:b1:50:59: b7:a5:ce:aa:70:ad:77:a9:44:fa:fc:16:51:98:12: d7:96:c2:27:6f:44:71:1d:28:11:b6:45:48:a0:ec: 55:65:a9:93:1d:02:3b:07:35:ff:47:a8:fc:25:09: 82:97:7b:30:78:e1:6f:c8:d4:00:4e:41:43:c5:65: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:98:87:7D:A4:52:87:59:0D:20:2A:15:26:E6:79:C6:9D:5F:3C:97 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HpiHfaRSh1kNICoVJuZ5xp1fPJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:69a0:30e8/128 Signature Algorithm: sha256WithRSAEncryption 50:25:75:20:9c:88:45:ec:99:15:36:6a:84:14:4f:6f:4b:38: 92:52:8a:5b:0c:66:45:04:80:81:b6:2b:97:db:88:88:76:ff: e0:f0:a3:4b:6d:67:0c:c8:bd:7b:3e:da:84:67:3c:d0:5b:89: 82:69:c0:7a:5e:70:ad:3c:76:45:ae:a0:cb:b5:7d:db:9c:fe: cb:08:fb:69:07:68:b9:ce:c7:45:64:75:d2:96:50:6e:db:58: f0:c8:f8:0c:e2:d6:29:d4:19:46:ee:81:ad:f1:a0:2b:84:54: 7f:b6:07:ad:0b:44:aa:8f:89:f1:44:a3:7d:e1:22:66:a3:12: 53:fe:75:0b:1e:3d:c4:f2:2c:35:e7:57:0a:c3:98:8a:4d:e5: 3a:4e:83:04:8e:7b:47:23:ad:39:50:2a:9b:95:9a:22:4f:b0: b4:64:38:28:a5:87:a8:e3:f9:ef:4a:73:c3:4e:80:82:4f:6a: a8:be:73:14:65:db:e4:e2:79:75:13:09:a5:9d:c3:72:7a:63: a1:b9:8c:96:57:34:2c:f5:75:7c:04:17:c5:2d:01:27:af:0e: 3e:00:0b:cd:65:73:7f:1b:e3:77:f7:c2:ef:4d:fe:e4:19:59: d3:7e:9e:76:65:8c:ba:59:28:b7:17:37:eb:4a:a7:54:73:2f: 1d:f3:e9:b5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZVpoRjhzAtnyT3AYEE5tSycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzA2MDQwNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTk4ODc3ZGE0NTI4NzU5MGQyMDJhMTUyNmU2NzljNjlkNWYzYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWv4J1jL1AoT5fPoSqflGWrRZkye FEgyv3FgkOYJkrUhy/ZaYiXoi8w1WB7S3qGkPFWZVHki81TbzrttAyc/WBGwWNQI NeSgxcJ2Fa2ENV78Ymd6jNqtQZd0f726p2sV9BvPcHuPWJbkBbuXL1PDerw9R92y tOQ+f/HEXWEn3TXUk9ljLXvBammNmWKWgnnOijhkTrBNYdGepeTZfLDBcfF02y/R pwvb21Urc7k4f//CoCKKoL/gEbb6Miu0eV6xUFm3pc6qcK13qUT6/BZRmBLXlsIn b0RxHSgRtkVIoOxVZamTHQI7BzX/R6j8JQmCl3sweOFvyNQATkFDxWVu0wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFB6Yh32kUodZDSAqFSbmecadXzyXMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvSHBpSGZhUlNoMWtOSUNvVkp1WjV4cDFmUEpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVaaAw6DANBgkqhkiG9w0BAQsFAAOCAQEAUCV1IJyIReyZFTZqhBRPb0s4 klKKWwxmRQSAgbYrl9uIiHb/4PCjS21nDMi9ez7ahGc80FuJgmnAel5wrTx2Ra6g y7V925z+ywj7aQdouc7HRWR10pZQbttY8Mj4DOLWKdQZRu6BrfGgK4RUf7YHrQtE qo+J8USjfeEiZqMSU/51Cx49xPIsNedXCsOYik3lOk6DBI57RyOtOVAqm5WaIk+w tGQ4KKWHqOP570pzw06Agk9qqL5zFGXb5OJ5dRMJpZ3DcnpjobmMllc0LPV1fAQX xS0BJ68OPgALzWVzfxvjd/fC703+5BlZ036edmWMulkotxc360qnVHMvHfPptQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:11 2025 by rpki-client