This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OpmpvWeqxfnleG4oI4trJc6d1PA.roa File: OpmpvWeqxfnleG4oI4trJc6d1PA.roa (raw, json) Hash identifier: WtoN+lJl4IS+yP6LQm5HN6e4mrltVqtz/Z6HoIroktg= Subject key identifier: 3A:99:A9:BD:67:AA:C5:F9:E5:78:6E:28:23:8B:6B:25:CE:9D:D4:F0 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019478AFFAC807F4502C0272587578AAFEA1 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OpmpvWeqxfnleG4oI4trJc6d1PA.roa Signing time: Sat 18 Jan 2025 09:13:06 +0000 ROA not before: Sat 18 Jan 2025 09:13:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:78:af:fa:c8:07:f4:50:2c:02:72:58:75:78:aa:fe:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 18 09:13:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a99a9bd67aac5f9e5786e28238b6b25ce9dd4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:4e:b3:fa:4b:a6:da:30:da:b9:d8:37:43: df:61:ac:90:ce:c3:b1:e6:dd:94:04:46:3f:a0:d6: f9:43:c8:a4:a8:6e:b9:cd:7d:a7:cf:0b:be:27:8c: df:c2:8f:fa:69:f0:39:71:ce:16:30:b0:be:ef:1c: 7f:92:25:a2:e7:96:a3:2e:37:6a:c9:24:90:26:a0: b4:ba:93:47:b6:bf:44:43:44:08:4b:53:30:21:cb: 49:fd:e2:a3:93:33:62:79:01:f5:b2:75:62:0d:70: 0f:b4:57:47:2f:7a:a7:32:29:9f:72:30:9a:d7:da: 50:51:1f:2f:c3:8f:0c:5c:b5:83:ea:a8:b4:f1:52: 23:e1:9e:d7:83:4c:1c:cc:ee:1a:0f:15:d6:c6:49: 60:dc:7b:1e:b4:12:7f:25:ca:82:32:95:9a:c6:55: 38:07:c6:61:93:d7:08:02:32:ad:22:57:62:07:ae: cc:1f:7d:12:21:ab:cf:12:94:76:2f:9a:b8:13:8e: 20:54:36:53:d2:20:c6:6a:ce:26:71:cf:a0:56:d1: 30:6e:16:76:9b:62:c3:f0:e3:50:d7:c5:d1:38:91: 0e:9b:5a:6a:2d:d1:a2:e1:6d:7a:b5:bd:70:0a:71: 35:56:c3:9a:16:fb:0a:a0:8b:84:f5:81:c5:92:6d: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:99:A9:BD:67:AA:C5:F9:E5:78:6E:28:23:8B:6B:25:CE:9D:D4:F0 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OpmpvWeqxfnleG4oI4trJc6d1PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 0a:ce:97:b8:24:09:0d:bf:de:42:80:2c:2b:3b:aa:ce:e4:d0: 6a:7f:62:00:04:4b:21:ce:ed:c1:8c:33:8f:9a:6e:be:27:42: a0:08:f2:e7:a0:eb:7f:48:c6:59:43:fc:5a:25:60:dd:e1:d3: 6e:80:7b:1b:fe:ec:60:aa:49:80:14:29:42:8c:a3:5f:98:55: 84:fc:6a:7c:bb:9b:a5:98:eb:22:17:48:ed:a9:b6:94:d0:89: 2e:9a:de:86:f7:69:3c:13:b4:f3:9c:e3:8b:4c:4c:4e:49:c1: 8d:b8:c0:42:e2:26:3e:92:67:97:d1:1f:0c:64:02:6e:5a:61: 55:d3:d7:31:3f:45:24:b5:3a:65:93:0b:9f:3d:94:af:16:90: 63:64:94:c6:dd:fa:a2:1e:01:5d:f2:33:1e:31:8a:5a:96:33: 82:a3:c9:92:d7:53:11:2e:03:12:ed:14:00:04:23:40:36:fe: 47:77:d9:aa:ce:7d:f6:cb:4e:c7:6e:9f:d3:40:fd:69:82:f8: 88:a2:2f:64:c3:1d:4d:2d:07:88:51:29:cf:0e:b9:7f:91:66: c8:af:59:25:dd:38:12:78:ab:8f:9e:26:8d:95:56:ba:6e:a4: 71:a4:91:0a:6a:b2:b6:90:cb:a5:83:18:e4:7f:92:bb:ee:5a: 6d:4f:c4:8b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZR4r/rIB/RQLAJyWHV4qv6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTE4MDkxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk5YTliZDY3YWFjNWY5ZTU3ODZlMjgyMzhiNmIyNWNlOWRkNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNBOs/pLptow2rnYN0PfYayQzsOx 5t2UBEY/oNb5Q8ikqG65zX2nzwu+J4zfwo/6afA5cc4WMLC+7xx/kiWi55ajLjdq ySSQJqC0upNHtr9EQ0QIS1MwIctJ/eKjkzNieQH1snViDXAPtFdHL3qnMimfcjCa 19pQUR8vw48MXLWD6qi08VIj4Z7Xg0wczO4aDxXWxklg3HsetBJ/JcqCMpWaxlU4 B8Zhk9cIAjKtIldiB67MH30SIavPEpR2L5q4E44gVDZT0iDGas4mcc+gVtEwbhZ2 m2LD8ONQ18XROJEOm1pqLdGi4W16tb1wCnE1VsOaFvsKoIuE9YHFkm1VKQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFDqZqb1nqsX55XhuKCOLayXOndTwMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvT3BtcHZXZXF4Zm5sZUc0b0k0dHJKYzZkMVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEACs6XuCQJDb/eQoAsKzuqzuTQ an9iAARLIc7twYwzj5puvidCoAjy56Drf0jGWUP8WiVg3eHTboB7G/7sYKpJgBQp QoyjX5hVhPxqfLubpZjrIhdI7am2lNCJLprehvdpPBO085zji0xMTknBjbjAQuIm PpJnl9EfDGQCblphVdPXMT9FJLU6ZZMLnz2UrxaQY2SUxt36oh4BXfIzHjGKWpYz gqPJktdTES4DEu0UAAQjQDb+R3fZqs599stOx26f00D9aYL4iKIvZMMdTS0HiFEp zw65f5FmyK9ZJd04Enirj54mjZVWum6kcaSRCmqytpDLpYMY5H+Su+5abU/Eiw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:18 2025 by rpki-client