This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PcAonJcFwqeOH5HP4Yu7U4NvoKM.roa File: PcAonJcFwqeOH5HP4Yu7U4NvoKM.roa (raw, json) Hash identifier: zJiuOl9RAcYBcXg+jLjAQ64Akow+pUzUDchzcXzR1Hk= Subject key identifier: 3D:C0:28:9C:97:05:C2:A7:8E:1F:91:CF:E1:8B:BB:53:83:6F:A0:A3 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01955A2E03481BF2FBF26ACFA2D41B7F9AB0 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PcAonJcFwqeOH5HP4Yu7U4NvoKM.roa Signing time: Mon 03 Mar 2025 04:05:19 +0000 ROA not before: Mon 03 Mar 2025 04:05:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:5a2d:6f18/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:5a:2e:03:48:1b:f2:fb:f2:6a:cf:a2:d4:1b:7f:9a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 3 04:05:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3dc0289c9705c2a78e1f91cfe18bbb53836fa0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:05:8c:e9:5e:f9:42:1c:8d:01:8c:90:4d: 6f:d2:70:9f:d6:79:e7:90:8e:87:c2:be:dd:c8:f8: b3:9f:07:53:70:cb:53:a4:2c:9b:cc:df:ca:18:f2: 83:3c:b8:3c:d0:41:04:77:d4:98:67:89:e4:61:f3: 15:9e:a3:7a:c8:3a:e7:74:af:af:08:0d:a2:52:de: 0e:2f:a7:35:a7:72:8f:5c:98:61:0c:2b:58:55:ab: 1c:d0:db:51:e5:c1:7c:d0:0b:84:50:d4:a9:77:83: 0f:51:a0:7b:a3:5e:97:7a:43:80:0c:91:7d:d3:1d: cc:c8:41:a8:61:c4:43:f6:e7:5b:dc:06:8f:78:8d: f1:e6:9d:d4:c4:6f:93:c2:3e:60:a0:d8:4f:e1:f4: 31:1f:c9:7e:fc:4e:62:88:e5:7e:4b:f6:ec:cb:53: d6:79:39:6a:8d:fb:85:72:56:60:63:02:70:c4:52: 70:77:6d:63:25:a4:2d:1d:1f:15:72:59:54:89:7b: 3e:55:e4:cf:56:d2:16:8b:fe:67:b4:8d:f4:6c:3c: 43:db:84:37:ca:c7:5e:46:85:d2:fa:4b:6f:38:a1: 46:74:ef:4e:2e:70:ac:7c:fc:f4:68:a3:1e:e7:fa: 2b:d6:40:9a:68:ff:6d:19:d7:1a:b4:05:52:0d:3f: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C0:28:9C:97:05:C2:A7:8E:1F:91:CF:E1:8B:BB:53:83:6F:A0:A3 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PcAonJcFwqeOH5HP4Yu7U4NvoKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:5a2d:6f18/128 Signature Algorithm: sha256WithRSAEncryption 1d:30:af:0f:47:2b:cc:05:b1:72:bf:ee:97:4f:d8:e2:a2:61: be:11:a1:3a:7f:a6:6c:41:eb:c0:ae:14:2c:fd:07:57:33:b7: 5b:43:e4:32:a9:6a:99:1e:76:e2:9c:b5:a0:8a:00:82:4b:86: 12:2c:4f:16:6c:30:1a:ef:d8:b9:ac:25:ac:55:70:2d:04:8f: eb:15:fd:d5:7c:12:2d:8e:ba:22:d1:19:63:a2:9e:98:ae:eb: 9a:d2:51:0f:9b:9d:79:c6:aa:85:24:83:73:a4:34:a5:45:b1: c8:32:0d:d5:55:72:00:09:bf:5f:d7:35:a9:ef:64:c5:a0:fc: 95:54:13:07:4c:58:e8:a0:23:1c:96:b9:55:20:03:a8:54:33: 8d:d5:9b:49:b1:eb:5b:e9:76:ae:87:03:1e:2e:a3:d4:79:b9: 89:15:11:49:b7:57:3e:ef:29:ed:d9:62:1e:a9:62:89:d7:f1: 02:bb:72:e4:d6:f0:4f:84:ec:b3:21:0a:93:92:79:8d:fa:e2: 3c:57:e1:c5:d1:4b:7a:3f:0a:1e:d9:70:20:7a:4d:88:6c:5a: 80:33:6d:2c:c2:8f:1b:9e:96:0d:27:c4:ed:cb:c9:de:5e:57: 56:0f:31:0d:56:41:90:e3:29:fa:76:89:ee:06:8f:67:2f:5a: 33:97:63:dd -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZVaLgNIG/L78mrPotQbf5qwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzAzMDQwNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGMwMjg5Yzk3MDVjMmE3OGUxZjkxY2ZlMThiYmI1MzgzNmZhMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw8FjOle+UIcjQGMkE1v0nCf1nnn kI6Hwr7dyPiznwdTcMtTpCybzN/KGPKDPLg80EEEd9SYZ4nkYfMVnqN6yDrndK+v CA2iUt4OL6c1p3KPXJhhDCtYVasc0NtR5cF80AuEUNSpd4MPUaB7o16XekOADJF9 0x3MyEGoYcRD9udb3AaPeI3x5p3UxG+Twj5goNhP4fQxH8l+/E5iiOV+S/bsy1PW eTlqjfuFclZgYwJwxFJwd21jJaQtHR8VcllUiXs+VeTPVtIWi/5ntI30bDxD24Q3 ysdeRoXS+ktvOKFGdO9OLnCsfPz0aKMe5/or1kCaaP9tGdcatAVSDT+cEQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFD3AKJyXBcKnjh+Rz+GLu1ODb6CjMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvUGNBb25KY0Z3cWVPSDVIUDRZdTdVNE52b0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVWi1vGDANBgkqhkiG9w0BAQsFAAOCAQEAHTCvD0crzAWxcr/ul0/Y4qJh vhGhOn+mbEHrwK4ULP0HVzO3W0PkMqlqmR524py1oIoAgkuGEixPFmwwGu/Yuawl rFVwLQSP6xX91XwSLY66ItEZY6KemK7rmtJRD5udecaqhSSDc6Q0pUWxyDIN1VVy AAm/X9c1qe9kxaD8lVQTB0xY6KAjHJa5VSADqFQzjdWbSbHrW+l2rocDHi6j1Hm5 iRURSbdXPu8p7dliHqliidfxArty5NbwT4TssyEKk5J5jfriPFfhxdFLej8KHtlw IHpNiGxagDNtLMKPG56WDSfE7cvJ3l5XVg8xDVZBkOMp+naJ7gaPZy9aM5dj3Q== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:16 2025 by rpki-client