This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Md9fEMR5HVNkiI_TOcW4fTU9zTY.roa File: Md9fEMR5HVNkiI_TOcW4fTU9zTY.roa (raw, json) Hash identifier: 2hqkcRGBDArueU4BbbdB64j8t2GChdy5Qu2eFAcybyo= Subject key identifier: 31:DF:5F:10:C4:79:1D:53:64:88:8F:D3:39:C5:B8:7D:35:3D:CD:36 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191A107B54D5622942B912BCB0C596BECD3 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Md9fEMR5HVNkiI_TOcW4fTU9zTY.roa Signing time: Fri 30 Aug 2024 02:05:22 +0000 ROA not before: Fri 30 Aug 2024 02:05:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 2001:67c:64:ffff:0:191:a106:ebdc/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:a1:07:b5:4d:56:22:94:2b:91:2b:cb:0c:59:6b:ec:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Aug 30 02:05:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=31df5f10c4791d5364888fd339c5b87d353dcd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:17:9a:9c:83:64:31:ed:73:e9:e9:41:a5: c0:83:02:6f:f5:ba:f2:20:cd:7b:c2:3c:63:52:9b: 6a:6a:c7:ff:bc:c6:82:84:09:93:73:6c:27:e5:ae: ee:47:3b:3a:28:23:bb:68:87:b7:a0:88:d0:90:8d: 3a:bb:cc:b7:5e:0e:7e:08:83:18:9c:4b:1a:6d:d6: 17:8f:55:65:78:64:ac:11:ab:2a:cf:12:07:38:52: 81:e4:de:65:ed:8d:9f:3b:53:62:ee:cb:05:df:fc: 5b:3b:92:9d:34:bc:7a:d0:28:d3:a2:38:56:90:af: 6f:1a:26:51:b9:c4:4a:88:0f:9c:9e:e7:33:74:77: 84:c4:54:b2:d9:fc:9f:7c:22:69:c7:bb:a9:98:e4: 7e:b6:81:0a:2a:e2:3a:c1:c3:fb:ce:9f:22:1d:3a: 24:06:11:64:f7:1e:e8:b5:2d:b5:1a:18:5e:e3:01: 27:02:7b:86:30:d6:e1:2a:09:5a:10:a9:03:97:86: b8:b2:76:a5:c6:59:7f:0b:9c:79:7a:c1:c6:f8:17: a0:06:5a:5d:07:47:41:42:2e:13:e0:a8:2a:2d:a8: 60:97:f0:fd:4b:70:e2:83:25:df:e0:78:5e:a0:d4: d8:c2:d2:3b:61:e7:46:5e:cd:bc:c9:08:1f:65:b9: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DF:5F:10:C4:79:1D:53:64:88:8F:D3:39:C5:B8:7D:35:3D:CD:36 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Md9fEMR5HVNkiI_TOcW4fTU9zTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 2001:67c:64:ffff:0:191:a106:ebdc/128 Signature Algorithm: sha256WithRSAEncryption 7e:62:b1:57:11:ce:38:8a:69:19:83:16:da:ac:71:a4:33:a2: b8:b5:61:64:79:ce:4d:dd:d8:8f:72:71:c7:29:2f:59:30:c3: fb:73:a2:56:18:0c:37:6c:13:af:fa:ce:dd:e5:a3:96:13:21: 18:61:74:f3:51:5e:c2:e0:bc:ed:ea:56:29:31:46:25:4e:13: f7:50:b9:f7:3f:1c:89:b2:73:ab:d7:43:8c:cb:35:d7:b0:86: 66:1d:ca:44:f2:5e:9e:1b:4a:e8:62:70:5e:64:a4:b6:b6:31: d4:a7:21:6a:48:39:20:50:eb:27:ff:35:f8:6e:00:ff:41:d6: 89:f8:91:c9:77:09:b6:2b:94:da:e5:7f:b9:d9:cf:ee:45:38: 78:0d:3e:64:15:21:41:c4:01:f3:67:5d:82:9e:f9:8d:7f:c7: bb:09:a0:9c:e4:f8:0b:b3:e5:c7:2c:03:56:eb:d1:47:ab:48: f9:db:83:ba:f8:8c:fa:6c:61:bf:84:4c:b9:4d:c5:ed:38:ed: 5e:66:7c:f6:30:7d:12:f6:83:57:00:37:e8:b9:72:a6:6b:fa: c4:cb:a7:76:c2:eb:cf:63:90:80:e3:5c:b1:a0:64:5e:08:6e: 42:5d:4c:b7:8c:c6:ee:d7:50:a2:01:ae:ed:35:81:26:df:c7: 70:8e:e3:29 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZGhB7VNViKUK5ErywxZa+zTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwODMwMDIwNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWRmNWYxMGM0NzkxZDUzNjQ4ODhmZDMzOWM1Yjg3ZDM1M2RjZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqoXmpyDZDHtc+npQaXAgwJv9bry IM17wjxjUptqasf/vMaChAmTc2wn5a7uRzs6KCO7aIe3oIjQkI06u8y3Xg5+CIMY nEsabdYXj1VleGSsEasqzxIHOFKB5N5l7Y2fO1Ni7ssF3/xbO5KdNLx60CjTojhW kK9vGiZRucRKiA+cnuczdHeExFSy2fyffCJpx7upmOR+toEKKuI6wcP7zp8iHTok BhFk9x7otS21Ghhe4wEnAnuGMNbhKglaEKkDl4a4snalxll/C5x5esHG+BegBlpd B0dBQi4T4KgqLahgl/D9S3DigyXf4HheoNTYwtI7YedGXs28yQgfZbnd5QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDHfXxDEeR1TZIiP0znFuH01Pc02MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvTWQ5ZkVNUjVIVk5raUlfVE9jVzRmVFU5elRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGQ/fLzAgMRACABBnwAZP//AAABkaEG69wwDQYJKoZIhvcNAQELBQADggEB AH5isVcRzjiKaRmDFtqscaQzori1YWR5zk3d2I9ycccpL1kww/tzolYYDDdsE6/6 zt3lo5YTIRhhdPNRXsLgvO3qVikxRiVOE/dQufc/HImyc6vXQ4zLNdewhmYdykTy Xp4bSuhicF5kpLa2MdSnIWpIOSBQ6yf/NfhuAP9B1on4kcl3CbYrlNrlf7nZz+5F OHgNPmQVIUHEAfNnXYKe+Y1/x7sJoJzk+Auz5ccsA1br0UerSPnbg7r4jPpsYb+E TLlNxe047V5mfPYwfRL2g1cAN+i5cqZr+sTLp3bC689jkIDjXLGgZF4IbkJdTLeM xu7XUKIBru01gSbfx3CO4yk= -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:14 2025 by rpki-client