This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JkYAYendQ0xzPeXPXNSY1jnuiZQ.roa File: JkYAYendQ0xzPeXPXNSY1jnuiZQ.roa (raw, json) Hash identifier: G/gTiagTcRsl5XlvZtGvUsEKbDf13R5p/BoJBuWCULQ= Subject key identifier: 26:46:00:61:E9:DD:43:4C:73:3D:E5:CF:5C:D4:98:D6:39:EE:89:94 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0195A3593F374B657ED3812DE3A3D111E50C Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JkYAYendQ0xzPeXPXNSY1jnuiZQ.roa Signing time: Mon 17 Mar 2025 09:04:49 +0000 ROA not before: Mon 17 Mar 2025 09:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128 2001:67c:64:ffff:0:195:a358:f40a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:a3:59:3f:37:4b:65:7e:d3:81:2d:e3:a3:d1:11:e5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 17 09:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=26460061e9dd434c733de5cf5cd498d639ee8994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:3a:ba:b9:d0:81:52:4d:81:75:6e:76:a4: e6:a4:da:74:7b:f4:ae:c5:db:de:a9:2e:56:2a:2c: 33:64:71:18:46:5c:29:f6:3a:8c:9d:d2:6c:40:97: 9c:90:1f:77:13:b3:0b:c8:d0:21:a8:25:f5:19:c9: 6e:5a:46:ef:76:78:7e:ee:9f:c2:c2:c2:20:be:dd: 0c:62:22:60:6d:de:d8:5f:5d:dc:6f:a0:2f:23:19: 80:f0:3c:d4:35:63:48:22:b9:99:cc:be:d5:7c:28: f1:49:ee:5d:80:9c:4a:06:64:01:32:9a:2a:9c:a9: 32:07:31:6f:b2:35:64:c8:e3:91:20:f5:8a:80:2e: 32:39:53:1c:c6:8b:24:7b:fc:c7:32:67:5b:80:52: 2d:ad:5d:04:d4:3f:99:2d:33:94:36:17:1c:cc:6e: f3:0a:47:3c:b0:3b:7b:36:2a:41:bc:36:de:1b:34: 17:4a:5d:3e:e2:0e:3c:56:98:5b:f0:b3:30:f2:55: df:3b:34:19:bb:64:31:e5:8c:8b:1f:0c:d2:18:85: 43:bf:c0:0b:48:cd:c3:d4:20:3e:34:75:b8:26:a5: 85:fa:1a:3c:3f:cf:00:50:39:d1:c3:da:7c:46:e9: 10:97:9a:f4:9e:d1:85:8c:2e:4a:76:35:3a:76:6e: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:46:00:61:E9:DD:43:4C:73:3D:E5:CF:5C:D4:98:D6:39:EE:89:94 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JkYAYendQ0xzPeXPXNSY1jnuiZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:86cf:630c/128 2001:67c:64:ffff:0:195:a358:f40a/128 Signature Algorithm: sha256WithRSAEncryption 69:2f:30:24:6b:c6:ad:42:a2:7d:ce:f8:3d:76:cc:97:55:1d: 36:21:32:88:b1:ae:9e:90:62:e0:e9:9e:9f:55:22:ec:70:23: be:ab:64:ac:b4:da:08:88:e2:14:6a:0b:af:aa:cf:6d:06:0e: af:9c:e7:0e:04:f4:48:32:3d:79:72:f3:f0:b8:2a:a6:3a:9b: 93:6f:a7:ae:e3:01:97:7b:21:c0:41:f4:21:a4:e0:0d:f1:7a: 3c:08:b4:41:26:35:ca:37:b6:f5:71:df:5b:74:1b:7f:e6:be: 36:6b:4c:a1:87:1e:71:49:58:15:e0:8a:70:8f:1e:22:79:ee: 7b:7f:6f:89:50:e4:ce:eb:49:c3:a7:e8:64:f9:72:94:d2:ba: d3:85:75:e9:0b:4b:71:29:1b:ed:fb:63:60:99:d2:5f:52:f4: 0d:15:1f:f1:3f:44:5e:35:1d:00:63:42:cb:98:aa:ec:72:07: 3a:c3:41:80:b7:70:ab:72:21:10:90:96:2d:b6:ba:0f:96:6b: ea:7c:e9:df:02:99:63:d6:a5:77:d4:2d:27:36:88:20:63:e9: fa:a9:ce:81:2f:d8:06:4d:fc:77:26:ff:ee:fd:b9:f5:6a:a2: 80:f0:08:87:9f:b7:40:f9:3e:08:fb:50:30:2a:48:70:fd:aa: 9d:dc:c9:52 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZWjWT83S2V+04Et46PREeUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzE3MDkwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjQ2MDA2MWU5ZGQ0MzRjNzMzZGU1Y2Y1Y2Q0OThkNjM5ZWU4OTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPc6urnQgVJNgXVudqTmpNp0e/Su xdveqS5WKiwzZHEYRlwp9jqMndJsQJeckB93E7MLyNAhqCX1GcluWkbvdnh+7p/C wsIgvt0MYiJgbd7YX13cb6AvIxmA8DzUNWNIIrmZzL7VfCjxSe5dgJxKBmQBMpoq nKkyBzFvsjVkyOORIPWKgC4yOVMcxoske/zHMmdbgFItrV0E1D+ZLTOUNhcczG7z Ckc8sDt7NipBvDbeGzQXSl0+4g48Vphb8LMw8lXfOzQZu2Qx5YyLHwzSGIVDv8AL SM3D1CA+NHW4JqWF+ho8P88AUDnRw9p8RukQl5r0ntGFjC5KdjU6dm5PdwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCZGAGHp3UNMcz3lz1zUmNY57omUMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvSmtZQVllbmRRMHh6UGVYUFhOU1kxam51aVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGVhs9jDAMRACABBnwAZP//AAABlaNY9AowDQYJKoZIhvcNAQELBQADggEB AGkvMCRrxq1Con3O+D12zJdVHTYhMoixrp6QYuDpnp9VIuxwI76rZKy02giI4hRq C6+qz20GDq+c5w4E9EgyPXly8/C4KqY6m5Nvp67jAZd7IcBB9CGk4A3xejwItEEm Nco3tvVx31t0G3/mvjZrTKGHHnFJWBXginCPHiJ57nt/b4lQ5M7rScOn6GT5cpTS utOFdekLS3EpG+37Y2CZ0l9S9A0VH/E/RF41HQBjQsuYquxyBzrDQYC3cKtyIRCQ li22ug+Wa+p86d8CmWPWpXfULSc2iCBj6fqpzoEv2AZN/Hcm/+79ufVqooDwCIef t0D5Pgj7UDAqSHD9qp3cyVI= -----END CERTIFICATE-----Generated at Mon Dec 15 19:26:09 2025 by rpki-client