This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Md2hkfPkNSsBclBZv535LRurT6o.roa File: Md2hkfPkNSsBclBZv535LRurT6o.roa (raw, json) Hash identifier: b+4aJfskN9D+nwYcqYf/x/SLllMrSrorA2R0Hp8kewM= Subject key identifier: 31:DD:A1:91:F3:E4:35:2B:01:72:50:59:BF:9D:F9:2D:1B:AB:4F:AA Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019588BDB8EDE5035291721E8C55631923B7 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Md2hkfPkNSsBclBZv535LRurT6o.roa Signing time: Wed 12 Mar 2025 05:04:49 +0000 ROA not before: Wed 12 Mar 2025 05:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128 2001:67c:64:ffff:0:195:88bd:33d6/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:88:bd:b8:ed:e5:03:52:91:72:1e:8c:55:63:19:23:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 12 05:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=31dda191f3e4352b01725059bf9df92d1bab4faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:42:0f:1e:1d:b3:b9:61:ed:91:45:a0:71: 1c:e9:c7:0a:28:d8:ab:05:67:dc:c4:69:71:0b:60: 5d:05:20:9b:88:03:a5:20:ce:9d:f8:18:c5:dd:ea: bf:0a:b0:1e:0a:d5:84:59:ba:bf:d3:0d:d8:89:f7: 74:7a:d8:8b:01:6a:74:64:05:7f:a6:ec:fe:89:65: 84:18:fd:6b:a8:5d:76:f1:22:2a:fb:0f:2e:0d:6c: 1c:21:8d:3d:66:26:46:91:1c:51:d4:19:de:a5:54: 66:68:5b:85:39:d4:01:e6:24:68:75:27:8e:97:b0: b2:83:fb:f4:84:c1:82:15:23:70:c8:95:c0:7e:11: d2:6f:18:ef:7a:98:9f:e8:9f:07:6c:25:de:25:7e: 63:ad:c5:a0:23:47:70:10:79:fe:87:1a:6a:5f:9e: d5:2d:71:53:60:81:e8:1c:8d:40:13:68:6a:a6:08: f0:f2:41:27:33:d9:58:e6:17:4e:3b:d7:aa:db:a1: a3:01:70:4c:42:5a:dd:31:3a:6c:88:f1:e5:9a:0c: 6e:14:7b:f2:20:73:62:08:12:73:68:fa:bd:03:1a: a8:f2:36:88:20:a2:15:88:1a:f2:20:3e:01:d1:d2: 1e:f1:f0:35:0c:84:e2:25:4c:a2:fd:b5:ef:f2:b1: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DD:A1:91:F3:E4:35:2B:01:72:50:59:BF:9D:F9:2D:1B:AB:4F:AA X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Md2hkfPkNSsBclBZv535LRurT6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:86cf:630c/128 2001:67c:64:ffff:0:195:88bd:33d6/128 Signature Algorithm: sha256WithRSAEncryption 72:c2:ae:a1:bc:9a:bf:c0:2f:76:d1:ad:53:98:f1:28:16:62: dd:db:fd:3e:18:12:6e:f9:b1:05:d8:c3:cb:b9:c0:20:4c:e8: dc:9d:10:0f:e2:ab:e0:18:af:0f:64:92:d2:41:83:15:b1:4b: 08:fb:c5:2a:bb:49:a1:56:55:cf:5a:89:dc:a7:43:cd:c1:89: 88:fb:fd:12:8a:d1:f0:d4:44:55:53:f1:98:4e:39:c8:1e:03: 35:5e:dc:2e:36:85:9f:91:0e:ff:40:c1:e2:72:52:e6:47:81: a6:92:48:80:9a:13:67:31:86:5e:34:11:6e:75:3f:c4:f0:59: 19:06:45:67:4f:63:7b:ea:0b:7a:2c:67:ce:f7:7e:fd:bf:7d: cc:f5:fe:77:db:3b:e4:50:3a:30:ca:0e:a2:50:5a:d4:22:cb: ab:50:e6:a6:30:59:a8:dc:18:d9:8c:70:26:ae:70:5c:75:e5: ac:4e:7f:ff:81:5c:38:53:a1:2e:a6:55:bf:10:41:d0:df:ec: 33:bf:66:69:a7:ed:49:98:af:e2:38:f7:7f:0e:50:14:f2:36: 91:5b:f5:84:3b:6e:67:2e:e0:75:54:46:2b:c5:d5:94:df:0e: ee:93:10:fc:10:69:a1:46:57:5a:65:5e:c8:5f:ec:48:c7:6a: 29:b0:1a:2f -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZWIvbjt5QNSkXIejFVjGSO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzEyMDUwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWRkYTE5MWYzZTQzNTJiMDE3MjUwNTliZjlkZjkyZDFiYWI0ZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx15CDx4ds7lh7ZFFoHEc6ccKKNir BWfcxGlxC2BdBSCbiAOlIM6d+BjF3eq/CrAeCtWEWbq/0w3Yifd0etiLAWp0ZAV/ puz+iWWEGP1rqF128SIq+w8uDWwcIY09ZiZGkRxR1BnepVRmaFuFOdQB5iRodSeO l7Cyg/v0hMGCFSNwyJXAfhHSbxjvepif6J8HbCXeJX5jrcWgI0dwEHn+hxpqX57V LXFTYIHoHI1AE2hqpgjw8kEnM9lY5hdOO9eq26GjAXBMQlrdMTpsiPHlmgxuFHvy IHNiCBJzaPq9Axqo8jaIIKIViBryID4B0dIe8fA1DITiJUyi/bXv8rEOVwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDHdoZHz5DUrAXJQWb+d+S0bq0+qMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvTWQyaGtmUGtOU3NCY2xCWnY1MzVMUnVyVDZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGVhs9jDAMRACABBnwAZP//AAABlYi9M9YwDQYJKoZIhvcNAQELBQADggEB AHLCrqG8mr/AL3bRrVOY8SgWYt3b/T4YEm75sQXYw8u5wCBM6NydEA/iq+AYrw9k ktJBgxWxSwj7xSq7SaFWVc9aidynQ83BiYj7/RKK0fDURFVT8ZhOOcgeAzVe3C42 hZ+RDv9AweJyUuZHgaaSSICaE2cxhl40EW51P8TwWRkGRWdPY3vqC3osZ873fv2/ fcz1/nfbO+RQOjDKDqJQWtQiy6tQ5qYwWajcGNmMcCaucFx15axOf/+BXDhToS6m Vb8QQdDf7DO/Zmmn7UmYr+I4938OUBTyNpFb9YQ7bmcu4HVURivF1ZTfDu6TEPwQ aaFGV1plXshf7EjHaimwGi8= -----END CERTIFICATE-----Generated at Mon Dec 15 12:06:13 2025 by rpki-client