This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NraeSkI4DC_BoAZT9x7H2fEZzAk.roa File: NraeSkI4DC_BoAZT9x7H2fEZzAk.roa (raw, json) Hash identifier: NimfyxgtO7MrkEz/z7u6q/ZuUWQDvUfP6DmuS3CZOXo= Subject key identifier: 36:B6:9E:4A:42:38:0C:2F:C1:A0:06:53:F7:1E:C7:D9:F1:19:CC:09 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01933C96677AD5B1C4676CBB0A33D7CE9186 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NraeSkI4DC_BoAZT9x7H2fEZzAk.roa Signing time: Mon 18 Nov 2024 00:05:10 +0000 ROA not before: Mon 18 Nov 2024 00:05:10 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:193:3c95:bb6b/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:3c:96:67:7a:d5:b1:c4:67:6c:bb:0a:33:d7:ce:91:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Nov 18 00:05:10 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=36b69e4a42380c2fc1a00653f71ec7d9f119cc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:ec:9a:4d:c9:84:4f:51:79:c3:88:ec:97: d6:7e:f7:58:32:f2:76:3d:8e:1f:7d:2f:37:e8:f9: 65:74:0c:03:95:f1:5f:e0:fa:d9:95:36:da:9f:fa: ce:8e:2d:5d:9d:bf:7b:9b:c5:c7:76:94:36:d9:03: 43:36:90:b1:34:28:68:d2:f0:8a:c4:df:f8:3a:91: 0c:30:ce:a4:a8:9a:42:90:19:36:a0:b9:9b:d0:dc: b9:67:c8:63:b7:39:4d:c6:6a:c0:94:98:8c:e1:83: 95:89:14:c4:9f:a5:cd:cc:99:f3:3f:ad:14:c8:b8: 1e:0e:d3:87:2c:67:d9:5a:15:9a:f9:a0:c4:cd:f2: 6c:25:0e:82:b4:bf:0c:70:a4:4b:3a:2b:3c:56:db: 18:b2:73:58:0c:a4:34:17:56:57:eb:fe:0a:14:c1: e1:9e:12:c5:25:ae:31:75:26:88:12:b6:34:c7:0a: 04:e3:97:b4:2c:57:9e:09:3a:12:0a:8a:7b:ca:e6: 44:80:a2:72:7f:96:76:4b:ef:96:34:17:ac:f2:8f: 23:11:69:cf:b6:5e:44:e8:39:f0:f1:ce:d7:67:39: 0d:3a:a7:b9:cd:d2:69:72:d9:a2:5d:d8:6e:41:af: 89:b7:7e:f4:f3:1b:29:c5:4c:49:62:54:7a:ec:a3: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B6:9E:4A:42:38:0C:2F:C1:A0:06:53:F7:1E:C7:D9:F1:19:CC:09 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NraeSkI4DC_BoAZT9x7H2fEZzAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:193:3c95:bb6b/128 Signature Algorithm: sha256WithRSAEncryption 97:68:25:fb:20:2c:e4:9c:c2:f7:49:ff:9e:f3:da:ca:c3:f4: 9f:9a:22:48:34:c2:57:08:c2:9a:50:13:0e:e4:ba:67:6f:eb: e9:6d:d7:94:3e:48:ea:bb:eb:f2:dd:fe:e2:ce:69:00:7e:63: bc:67:38:01:68:87:17:d3:3c:9b:15:e8:60:f8:00:5d:53:25: 9c:40:42:6c:9e:ad:0d:d5:47:a4:0b:a1:68:24:53:51:31:e6: e4:50:40:81:a7:29:38:a1:eb:05:5d:1b:79:27:66:88:3f:c9: 05:e5:3e:83:78:30:00:04:81:10:cb:ef:5e:63:da:92:a6:45: cd:be:9c:83:44:b2:e7:ef:82:6c:de:e8:c2:f5:37:65:27:37: b5:fe:8c:07:28:36:68:5f:84:fe:74:ee:34:69:3a:42:08:88: ff:df:b8:37:8d:0e:1c:8a:b3:5e:ef:46:20:f0:66:6b:e9:ff: e3:cc:c5:4f:ba:71:2d:46:e5:d9:7d:52:b9:cc:cf:36:5c:f1: 0f:a5:7e:ea:18:5d:75:e2:f7:ba:27:06:fd:c0:81:34:7b:8e: 1c:4b:41:77:12:22:0d:c7:f7:64:69:e0:15:ba:59:0a:ee:7f: df:81:7c:e9:ce:11:ee:90:15:a0:ba:4b:c0:2b:5b:c2:03:2e: da:42:39:13 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZM8lmd61bHEZ2y7CjPXzpGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQxMTE4MDAwNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmI2OWU0YTQyMzgwYzJmYzFhMDA2NTNmNzFlYzdkOWYxMTljYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIzsmk3JhE9RecOI7JfWfvdYMvJ2 PY4ffS836PlldAwDlfFf4PrZlTban/rOji1dnb97m8XHdpQ22QNDNpCxNCho0vCK xN/4OpEMMM6kqJpCkBk2oLmb0Ny5Z8hjtzlNxmrAlJiM4YOViRTEn6XNzJnzP60U yLgeDtOHLGfZWhWa+aDEzfJsJQ6CtL8McKRLOis8VtsYsnNYDKQ0F1ZX6/4KFMHh nhLFJa4xdSaIErY0xwoE45e0LFeeCToSCop7yuZEgKJyf5Z2S++WNBes8o8jEWnP tl5E6Dnw8c7XZzkNOqe5zdJpctmiXdhuQa+Jt3708xspxUxJYlR67KMyDQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFDa2nkpCOAwvwaAGU/cex9nxGcwJMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvTnJhZVNrSTREQ19Cb0FaVDl4N0gyZkVaekFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGTPJW7azANBgkqhkiG9w0BAQsFAAOCAQEAl2gl+yAs5JzC90n/nvPaysP0 n5oiSDTCVwjCmlATDuS6Z2/r6W3XlD5I6rvr8t3+4s5pAH5jvGc4AWiHF9M8mxXo YPgAXVMlnEBCbJ6tDdVHpAuhaCRTUTHm5FBAgacpOKHrBV0beSdmiD/JBeU+g3gw AASBEMvvXmPakqZFzb6cg0Sy5++CbN7owvU3ZSc3tf6MByg2aF+E/nTuNGk6QgiI /9+4N40OHIqzXu9GIPBma+n/48zFT7pxLUbl2X1SuczPNlzxD6V+6hhddeL3uicG /cCBNHuOHEtBdxIiDcf3ZGngFbpZCu5/34F86c4R7pAVoLpLwCtbwgMu2kI5Ew== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:17 2025 by rpki-client