This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LbPg4SoLYKsq2qAyoJv0Bi75AOo.roa File: LbPg4SoLYKsq2qAyoJv0Bi75AOo.roa (raw, json) Hash identifier: wAZFudVjC1CG2sAQ3cfI7fS5rLVWSkggQWuSz12bVT8= Subject key identifier: 2D:B3:E0:E1:2A:0B:60:AB:2A:DA:A0:32:A0:9B:F4:06:2E:F9:00:EA Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0194D7EE4FFFE9DFC7D1A8531F6B6BE29E22 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LbPg4SoLYKsq2qAyoJv0Bi75AOo.roa Signing time: Wed 05 Feb 2025 21:05:06 +0000 ROA not before: Wed 05 Feb 2025 21:05:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:d7ed:8c5a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:d7:ee:4f:ff:e9:df:c7:d1:a8:53:1f:6b:6b:e2:9e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Feb 5 21:05:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2db3e0e12a0b60ab2adaa032a09bf4062ef900ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:f7:9d:ef:6a:fe:bd:3e:c9:d1:f1:23:c7: 89:01:64:ac:d2:3b:05:b9:d4:0d:44:c7:05:8e:64: 48:e7:a3:ac:a8:80:7c:bb:91:2a:99:8d:df:a6:6f: ef:22:d0:7b:f4:24:2e:15:17:11:18:68:bb:72:6c: d5:b3:a8:63:b9:1c:9f:e0:35:f7:dd:d1:17:9c:75: 87:33:70:c2:4c:a5:2f:35:a4:9d:e6:73:4c:50:bd: e4:9d:3e:1c:dd:97:1d:fd:a3:82:5d:90:b3:04:2e: 9b:cb:e6:28:76:2f:f2:51:b0:99:71:d6:24:f8:3b: 29:95:1a:02:9a:f7:2e:d8:21:8b:1d:67:88:9f:4e: b3:bf:8c:b9:f5:a0:e3:d9:31:3c:41:cc:a0:7b:3d: 4c:5b:cd:d6:0c:21:df:55:59:a0:f9:38:04:b0:2c: 6a:23:38:e6:92:9d:74:c0:5b:06:10:65:51:f8:27: cb:8d:24:9a:3b:f3:b4:30:f6:4c:6b:61:d5:94:f4: 80:86:2b:b3:5c:23:21:b6:1f:b9:03:80:a7:5f:52: d1:70:6a:42:c9:27:c1:b3:2c:1c:83:22:45:11:c0: 69:15:98:cc:1c:d0:ec:0a:37:b8:91:bf:ed:d8:f2: 0e:a7:b3:ef:80:ea:11:80:a3:aa:11:b1:97:b2:fb: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B3:E0:E1:2A:0B:60:AB:2A:DA:A0:32:A0:9B:F4:06:2E:F9:00:EA X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LbPg4SoLYKsq2qAyoJv0Bi75AOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:d7ed:8c5a/128 Signature Algorithm: sha256WithRSAEncryption 48:1d:4a:60:a3:3a:a0:86:ab:c0:6a:a4:36:01:70:03:05:51: 16:8b:a6:4d:35:b1:3d:a4:f9:50:fd:f8:e7:33:8a:a9:23:2f: 26:61:06:83:bd:33:4c:44:5b:0a:71:7e:c9:9a:6b:80:c3:49: 27:05:72:8d:ca:af:cb:98:fb:58:b4:3b:c9:eb:80:c3:e6:19: f3:ea:9c:bc:f1:99:cb:e4:f3:60:29:44:b8:0f:e5:1a:4e:16: 26:1c:86:fe:0a:b6:ba:57:27:2d:11:2b:d8:33:06:20:ba:ba: f4:e8:a6:5d:85:b3:76:84:3a:53:2c:9c:a0:97:c8:45:18:52: 90:59:37:5b:55:26:28:87:0a:13:e1:72:4b:31:16:39:b4:03: 95:4d:98:91:74:6b:d9:92:d5:23:db:ce:86:07:6b:2d:40:65: e7:a1:ad:28:57:30:57:2b:90:90:24:ab:14:91:7f:05:59:ea: f4:76:2d:e6:a0:a0:e4:f9:5b:31:5b:4e:ef:a4:f2:3c:05:4a: 4b:08:70:8f:a6:5e:03:7c:2f:74:3f:6e:74:25:bd:e5:71:10: 3a:26:ca:92:64:fa:b1:d7:60:92:5c:c1:14:16:e3:ca:5e:44: 05:39:9a:7f:39:0e:2c:57:aa:30:51:fc:17:28:41:24:ea:90: c4:f6:9a:67 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZTX7k//6d/H0ahTH2tr4p4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMjA1MjEwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGIzZTBlMTJhMGI2MGFiMmFkYWEwMzJhMDliZjQwNjJlZjkwMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPT3ne9q/r0+ydHxI8eJAWSs0jsF udQNRMcFjmRI56OsqIB8u5EqmY3fpm/vItB79CQuFRcRGGi7cmzVs6hjuRyf4DX3 3dEXnHWHM3DCTKUvNaSd5nNMUL3knT4c3Zcd/aOCXZCzBC6by+Yodi/yUbCZcdYk +DsplRoCmvcu2CGLHWeIn06zv4y59aDj2TE8Qcygez1MW83WDCHfVVmg+TgEsCxq Izjmkp10wFsGEGVR+CfLjSSaO/O0MPZMa2HVlPSAhiuzXCMhth+5A4CnX1LRcGpC ySfBsywcgyJFEcBpFZjMHNDsCje4kb/t2PIOp7PvgOoRgKOqEbGXsvu1MQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFC2z4OEqC2CrKtqgMqCb9AYu+QDqMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvTGJQZzRTb0xZS3NxMnFBeW9KdjBCaTc1QU9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGU1+2MWjANBgkqhkiG9w0BAQsFAAOCAQEASB1KYKM6oIarwGqkNgFwAwVR FoumTTWxPaT5UP345zOKqSMvJmEGg70zTERbCnF+yZprgMNJJwVyjcqvy5j7WLQ7 yeuAw+YZ8+qcvPGZy+TzYClEuA/lGk4WJhyG/gq2ulcnLREr2DMGILq69OimXYWz doQ6UyycoJfIRRhSkFk3W1UmKIcKE+FySzEWObQDlU2YkXRr2ZLVI9vOhgdrLUBl 56GtKFcwVyuQkCSrFJF/BVnq9HYt5qCg5PlbMVtO76TyPAVKSwhwj6ZeA3wvdD9u dCW95XEQOibKkmT6sddgklzBFBbjyl5EBTmafzkOLFeqMFH8FyhBJOqQxPaaZw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:27:51 2025 by rpki-client