This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SfdDeO8z29BMiM_Lwo3WW6OVNBA.roa
File: SfdDeO8z29BMiM_Lwo3WW6OVNBA.roa (raw, json)
Hash identifier: s3+aarqcltRdLuKUH/lW5y1cxKoZwytl69henyIlmpI=
Subject key identifier: 49:F7:43:78:EF:33:DB:D0:4C:88:CF:CB:C2:8D:D6:5B:A3:95:34:10
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191DC0FCD938A22A4BEAD4AAE0FBBF627A6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SfdDeO8z29BMiM_Lwo3WW6OVNBA.roa
Signing time: Tue 10 Sep 2024 13:11:48 +0000
ROA not before: Tue 10 Sep 2024 13:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:0f:cd:93:8a:22:a4:be:ad:4a:ae:0f:bb:f6:27:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 10 13:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49f74378ef33dbd04c88cfcbc28dd65ba3953410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:5d:ad:67:fe:ea:0c:8f:ee:d3:94:14:7f:
46:cb:6e:45:03:c9:1e:fd:fe:bb:03:d3:1f:2a:4e:
24:44:cd:ff:52:c0:3c:45:84:a6:95:f7:af:82:02:
79:f9:4e:98:07:26:0e:c9:e6:45:6d:dc:58:97:3c:
53:29:af:0a:75:11:3d:96:61:be:35:eb:62:01:04:
00:1b:92:8e:a5:d0:56:5b:68:6e:10:a3:5d:39:dd:
57:1b:0b:d9:75:8a:fa:ff:ec:f9:2c:54:6a:7e:94:
3b:35:d1:38:ac:29:bf:92:19:21:05:95:a2:79:28:
45:2d:ad:0e:d6:0d:50:05:3b:99:4e:57:66:a9:f8:
cc:5d:4d:6c:d0:d8:09:ff:3e:03:02:7a:50:28:eb:
b8:14:93:fd:fb:fd:6c:bd:58:e5:0a:b1:72:bb:59:
1c:7c:37:58:75:ca:a5:95:eb:9d:be:8b:87:46:cb:
f1:53:5d:6d:6f:d8:c9:de:54:5c:63:d2:7c:1f:ff:
7f:04:73:67:2c:f0:7d:e1:74:69:ab:0e:20:58:ac:
9b:30:47:d4:9d:0e:c4:29:4d:23:85:58:7e:8e:5d:
30:0a:d0:ad:40:31:59:09:78:91:d7:f2:80:f0:02:
1e:71:9d:b2:e4:de:09:4b:23:80:7e:0d:01:40:db:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:43:78:EF:33:DB:D0:4C:88:CF:CB:C2:8D:D6:5B:A3:95:34:10
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SfdDeO8z29BMiM_Lwo3WW6OVNBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:d606:d79c/128
2001:67c:64:ffff:0:191:d82c:371b/128
Signature Algorithm: sha256WithRSAEncryption
32:b0:30:b5:82:98:80:16:da:5e:8e:34:54:90:ba:3f:a1:47:
94:6d:6d:b3:7c:52:99:d7:19:1f:4e:d8:ab:28:26:3f:46:de:
92:32:55:00:02:f8:63:ca:35:5a:9d:29:80:a3:44:f4:ca:af:
9f:38:44:f8:63:b7:54:df:0f:47:b9:00:70:04:27:15:3c:46:
16:e1:4d:a7:e7:8d:17:38:92:de:9a:aa:81:2b:56:e9:ec:28:
b8:6b:2b:f0:89:20:6e:d6:d6:15:ed:9b:64:92:5e:32:31:8b:
65:de:1b:24:53:60:c9:db:4f:1e:ef:68:da:e3:c2:01:4d:82:
98:bb:e6:1c:63:e1:b8:70:71:96:29:00:21:bb:a6:c5:e0:3e:
11:fa:a8:2e:94:31:de:a1:ee:0d:51:46:fe:6f:72:43:10:a9:
fa:50:41:6a:df:c7:f2:e8:45:c4:b3:42:a6:33:6b:f6:7b:d5:
a7:ce:23:c2:2d:5d:3e:38:b4:a1:35:60:5b:36:5c:18:5d:e3:
e2:d3:8e:af:96:b1:cf:ea:e6:ab:3f:64:f6:f7:00:9e:99:40:
e5:25:a4:62:38:19:c1:a7:3d:fc:03:85:81:12:ac:12:d4:31:
66:5c:80:d3:39:77:95:a3:6c:bb:2b:e7:8e:16:9e:b4:a1:ac:
dc:0a:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 19:27:00 2025 by rpki-client