This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MTYia0MCyCeSHEY0fN-__g9Z5jQ.roa
File: MTYia0MCyCeSHEY0fN-__g9Z5jQ.roa (raw, json)
Hash identifier: 8i0BeBM0MygL7lZ2oSYkNJlQt0fFLiyflazEkiguqSk=
Subject key identifier: 31:36:22:6B:43:02:C8:27:92:1C:46:34:7C:DF:BF:FE:0F:59:E6:34
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019479FA7C5445815529CCE8216246735AB6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MTYia0MCyCeSHEY0fN-__g9Z5jQ.roa
Signing time: Sat 18 Jan 2025 15:14:06 +0000
ROA not before: Sat 18 Jan 2025 15:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:fa:7c:54:45:81:55:29:cc:e8:21:62:46:73:5a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 18 15:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3136226b4302c827921c46347cdfbffe0f59e634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:dd:e7:ea:f4:0d:a5:2e:8e:26:e1:57:1c:
4b:48:75:01:42:b3:96:41:28:13:dc:2a:c8:4b:45:
ac:27:07:c1:2a:6b:6e:37:eb:85:43:37:bc:ec:a7:
cc:8c:13:3c:f8:be:03:ae:dd:6c:ff:1d:cd:50:bf:
18:23:fe:d9:52:49:fb:7c:c6:fb:1a:11:26:c2:2d:
d0:21:b5:70:15:52:74:06:95:0a:e7:22:96:79:2d:
45:55:e0:9f:3a:03:0f:09:fd:dd:3c:0c:13:61:2c:
81:cb:d8:26:77:d7:46:11:47:a9:85:57:d7:8d:93:
76:2b:c2:7e:b4:4b:03:f4:9b:1f:23:d1:e1:dd:a8:
8c:2b:c1:5e:38:f3:29:50:8b:60:5e:bd:00:c2:6d:
27:32:bf:49:2e:5d:a0:db:42:0f:a0:12:0d:97:2d:
61:4d:35:b9:fe:53:d8:1b:a9:95:97:f2:71:e9:22:
81:e1:cb:01:39:1e:32:18:ff:c4:bf:d9:a1:8e:22:
05:da:8b:f0:fe:cd:33:6b:52:d3:84:1d:03:08:28:
b9:40:13:c5:ec:b7:9b:7e:2b:d9:a8:a7:59:91:66:
7e:a7:e4:58:b2:76:ae:17:18:15:a0:20:06:73:6a:
ad:9e:8e:5c:3b:50:8d:f2:fa:c5:1e:7b:f2:b5:5f:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:22:6B:43:02:C8:27:92:1C:46:34:7C:DF:BF:FE:0F:59:E6:34
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MTYia0MCyCeSHEY0fN-__g9Z5jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
50:9c:90:83:35:00:f1:ad:1b:85:f4:a6:33:5a:f9:f4:6b:f6:
f1:24:a0:e6:39:af:21:58:25:bb:ed:49:bb:3d:0d:26:13:05:
24:8e:53:aa:17:43:4b:bf:46:f0:46:80:37:9c:00:93:f7:53:
79:8b:11:39:2d:6f:d0:27:8c:e5:14:5c:65:45:bd:12:9e:fb:
35:e4:0d:d8:a8:61:80:53:59:ec:f5:3b:31:0b:5d:b5:a5:1a:
b2:53:f0:5f:37:d2:eb:8c:9d:5f:e5:86:d1:af:0b:65:09:71:
66:6a:05:20:97:b3:2c:31:cf:af:32:3c:5d:fc:2a:a2:dc:19:
d8:00:02:a2:f7:42:fd:57:5b:46:86:c5:45:05:98:10:ed:53:
8c:4b:0c:e1:6d:0d:e1:df:6b:11:75:75:ad:5b:f8:13:ae:f3:
bc:70:55:7f:41:ad:9e:42:46:5c:b0:5e:9d:9b:b9:f0:68:bf:
c4:71:9d:3b:60:ef:c0:55:f8:be:c0:97:54:88:cc:3b:0a:c8:
cc:20:e3:51:8d:13:0b:3e:90:23:d5:a4:f6:ea:82:dc:fe:f3:
f5:78:94:ad:86:c7:2b:91:6e:1b:d0:8a:ae:c8:36:62:d9:5d:
d9:e9:7d:7d:f0:90:47:61:82:8d:45:ab:5e:bc:cf:75:a2:87:
76:0c:fc:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 07:59:05 2025 by rpki-client