This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/S_-gOYDYae3R4I_9ko074ckSePY.roa File: S_-gOYDYae3R4I_9ko074ckSePY.roa (raw, json) Hash identifier: ii6Vx9ji5vkVEhexXCzTcDpc8Xv5119CXIj6ReibvRE= Subject key identifier: 4B:FF:A0:39:80:D8:69:ED:D1:E0:8F:FD:92:8D:3B:E1:C9:12:78:F6 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019528D37ADC8F0D07E2C049BECDC49CF484 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/S_-gOYDYae3R4I_9ko074ckSePY.roa Signing time: Fri 21 Feb 2025 14:05:02 +0000 ROA not before: Fri 21 Feb 2025 14:05:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:28d2:dcca/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:28:d3:7a:dc:8f:0d:07:e2:c0:49:be:cd:c4:9c:f4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Feb 21 14:05:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4bffa03980d869edd1e08ffd928d3be1c91278f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:84:4e:e2:ef:27:74:cf:b8:87:d4:d7:f7: 4f:40:32:eb:83:8b:dd:62:01:cc:6f:6a:72:1b:b3: 1b:e3:c3:91:a8:17:64:58:51:5e:fb:47:a4:8d:7e: b8:7c:f6:66:58:2c:21:af:14:49:ab:a2:c5:bc:84: 1b:37:a0:79:87:d1:4b:57:e5:ec:09:73:11:02:73: 66:8e:51:e6:04:1f:5d:f4:2e:d3:04:01:bb:30:33: d8:22:ee:ff:70:8b:0a:52:e7:f8:5f:ed:3d:ba:45: b2:73:30:16:0d:94:2d:83:eb:9b:24:fc:c4:8b:b9: 03:66:da:14:9d:61:aa:4e:dc:61:ec:d0:40:3f:d3: 87:a7:0b:bc:0e:67:2d:c3:8a:5f:26:0b:62:d2:f7: b3:bd:44:8e:e5:32:29:b9:9e:a1:e9:80:f5:34:82: ea:31:49:54:d6:43:6e:e2:94:97:9b:fe:1b:fe:3b: 89:5c:b5:67:1f:dd:50:de:f5:8d:97:12:b4:92:a2: e3:d7:be:43:b3:44:1a:fa:3f:dd:b1:00:c8:26:d9: 69:49:1c:26:3e:42:43:7d:c0:3c:68:d2:86:97:f5: 2b:65:11:e6:55:1d:42:b8:67:91:a5:43:ca:d2:76: 89:a6:81:98:0b:00:38:ef:9b:85:77:d2:b7:e4:f5: 65:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FF:A0:39:80:D8:69:ED:D1:E0:8F:FD:92:8D:3B:E1:C9:12:78:F6 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/S_-gOYDYae3R4I_9ko074ckSePY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:28d2:dcca/128 Signature Algorithm: sha256WithRSAEncryption 6b:0b:a1:03:c3:b2:9e:a6:03:49:c8:0f:c3:cb:c7:3b:9a:6f: f2:3d:83:16:99:50:cc:88:a0:cf:a4:de:99:87:65:3c:bd:c4: 9e:19:cb:32:20:51:1d:c2:c3:0d:f1:b3:75:04:c2:53:78:7e: 1c:c5:35:3b:7e:c9:0c:0b:1d:11:84:4f:97:b6:e8:67:b5:0a: a6:be:05:02:50:58:1e:46:64:9c:1a:85:56:0f:61:d0:fd:88: 50:67:2f:88:b3:19:5b:53:45:83:17:f0:e1:d7:6e:d6:53:de: 5d:5a:43:b6:4e:83:e3:6b:30:b5:8e:54:0d:a9:98:d5:98:75: e3:5a:3f:36:d2:b4:2f:8b:7e:57:93:5d:e7:19:1b:a6:ad:1f: bf:b3:24:51:4e:aa:93:d2:de:bf:be:b8:38:b4:57:e7:92:38: fd:6d:9e:0c:b1:55:40:66:94:97:c2:7f:6a:22:3e:e8:1c:b7: 2c:81:72:d6:6d:79:d2:96:58:22:42:d7:5a:e4:f3:86:36:37: 33:3e:e1:80:f6:63:d9:d8:f8:7e:f3:b6:0d:15:88:64:6c:e1: 35:18:6b:28:dc:6a:90:1e:9f:2e:92:96:dd:16:82:b2:d9:0b: 5a:a8:16:cf:e0:76:42:3f:66:71:13:37:51:32:50:2d:94:6e: 36:d4:71:c4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZUo03rcjw0H4sBJvs3EnPSEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMjIxMTQwNTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmZmYTAzOTgwZDg2OWVkZDFlMDhmZmQ5MjhkM2JlMWM5MTI3OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaWETuLvJ3TPuIfU1/dPQDLrg4vd YgHMb2pyG7Mb48ORqBdkWFFe+0ekjX64fPZmWCwhrxRJq6LFvIQbN6B5h9FLV+Xs CXMRAnNmjlHmBB9d9C7TBAG7MDPYIu7/cIsKUuf4X+09ukWyczAWDZQtg+ubJPzE i7kDZtoUnWGqTtxh7NBAP9OHpwu8Dmctw4pfJgti0vezvUSO5TIpuZ6h6YD1NILq MUlU1kNu4pSXm/4b/juJXLVnH91Q3vWNlxK0kqLj175Ds0Qa+j/dsQDIJtlpSRwm PkJDfcA8aNKGl/UrZRHmVR1CuGeRpUPK0naJpoGYCwA475uFd9K35PVlpQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFEv/oDmA2Gnt0eCP/ZKNO+HJEnj2MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvU18tZ09ZRFlhZTNSNElfOWtvMDc0Y2tTZVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVKNLcyjANBgkqhkiG9w0BAQsFAAOCAQEAawuhA8OynqYDScgPw8vHO5pv 8j2DFplQzIigz6TemYdlPL3EnhnLMiBRHcLDDfGzdQTCU3h+HMU1O37JDAsdEYRP l7boZ7UKpr4FAlBYHkZknBqFVg9h0P2IUGcviLMZW1NFgxfw4ddu1lPeXVpDtk6D 42swtY5UDamY1Zh141o/NtK0L4t+V5Nd5xkbpq0fv7MkUU6qk9Lev764OLRX55I4 /W2eDLFVQGaUl8J/aiI+6By3LIFy1m150pZYIkLXWuTzhjY3Mz7hgPZj2dj4fvO2 DRWIZGzhNRhrKNxqkB6fLpKW3RaCstkLWqgWz+B2Qj9mcRM3UTJQLZRuNtRxxA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:10 2025 by rpki-client