This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L1MBadOv6ltz96BBBPU_8qRZnAQ.roa
File: L1MBadOv6ltz96BBBPU_8qRZnAQ.roa (raw, json)
Hash identifier: EhafIOou3MQycXgy2QM13ZaB3saWoO6Ukk6c1NyYOPI=
Subject key identifier: 2F:53:01:69:D3:AF:EA:5B:73:F7:A0:41:04:F5:3F:F2:A4:59:9C:04
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192AE89C3AF1272BF47C95B240125A957BC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L1MBadOv6ltz96BBBPU_8qRZnAQ.roa
Signing time: Mon 21 Oct 2024 10:05:16 +0000
ROA not before: Mon 21 Oct 2024 10:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:ae88:e568/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:89:c3:af:12:72:bf:47:c9:5b:24:01:25:a9:57:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 21 10:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f530169d3afea5b73f7a04104f53ff2a4599c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:f0:7f:3f:61:12:10:73:4f:2f:ce:e3:85:
7a:72:55:1e:24:79:4d:c3:3d:0d:98:03:36:2f:ad:
b2:27:b1:e0:c9:ba:bd:cd:e0:2f:15:b5:97:5d:aa:
bc:21:ed:64:d6:ac:52:b2:f3:60:44:0f:c6:d1:32:
eb:4c:16:3e:b9:a0:f3:63:57:cb:d2:76:0a:2e:61:
4c:46:a4:d4:91:3c:49:12:4e:64:5c:37:36:b6:50:
14:ba:fd:21:98:01:84:1f:ec:19:62:44:8c:75:e4:
48:f2:31:27:0c:1a:07:33:a4:a2:7e:43:09:fd:a9:
da:d3:92:09:79:51:85:12:ef:8a:2f:33:ce:0b:a8:
b0:b4:02:4a:d9:09:47:ed:a1:09:9f:a3:1b:1f:94:
b8:1e:64:cb:a6:cf:26:63:62:6b:09:e6:4e:bc:dc:
5f:21:c9:31:13:56:88:76:57:75:57:73:c4:da:65:
99:98:8d:f8:4a:5e:70:81:f9:a6:f2:48:ef:41:e5:
0d:b0:63:d9:da:5d:fc:7d:ff:b6:d3:07:ef:87:40:
8c:3a:8c:0d:2c:8a:ff:f8:a8:f0:1e:a7:57:a2:98:
70:ab:ae:e0:0f:bf:9e:ff:12:2f:9e:e8:00:2c:9b:
f8:51:e2:40:79:10:dd:01:b8:be:3d:c4:b2:3f:f9:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:01:69:D3:AF:EA:5B:73:F7:A0:41:04:F5:3F:F2:A4:59:9C:04
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L1MBadOv6ltz96BBBPU_8qRZnAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:ae88:e568/128
Signature Algorithm: sha256WithRSAEncryption
24:3e:c6:38:4f:7f:5d:d6:e0:05:c6:b5:f6:43:76:a8:62:21:
be:cc:7d:c9:86:63:10:a4:bb:ce:eb:bc:de:60:66:8e:15:7d:
fe:0e:e9:9f:b3:c4:52:5a:5a:76:85:b0:95:da:1a:5e:ae:20:
b2:29:8c:64:af:1b:69:e1:1d:75:dd:37:9a:ae:fb:de:c2:2b:
ec:67:af:a6:e1:ef:bb:88:52:02:63:19:4b:91:28:cc:e4:f1:
c4:06:c0:36:b3:2e:08:db:e4:69:4c:ff:ca:bb:21:c5:cc:94:
29:d9:10:9f:9a:0b:6d:e5:ec:10:38:2a:5d:b3:3a:05:14:b3:
12:82:f8:e6:4f:7b:fd:3d:f5:ca:bf:ec:59:92:a4:e8:b5:c7:
9d:a1:46:92:f6:3d:41:3a:69:66:9b:f2:f0:37:95:bf:82:04:
f4:89:d6:55:3d:45:3e:f0:f0:9e:91:cd:c8:35:84:ea:59:e0:
ba:3a:a0:55:14:af:a1:9c:7a:45:92:48:79:2f:5e:c7:6b:e4:
18:41:91:ff:e4:60:38:7d:54:bb:c9:7c:f0:7e:68:2b:f7:71:
4f:fb:3e:72:09:c5:d9:b0:c9:60:5b:b8:09:69:d6:26:48:1d:
a6:ae:9b:87:a3:23:be:96:42:5a:c9:b9:b3:3c:9d:db:7f:67:
de:e6:47:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:58:05 2025 by rpki-client