This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sn70FhefaDwqyqCbH-RWNmMLKJI.roa File: Sn70FhefaDwqyqCbH-RWNmMLKJI.roa (raw, json) Hash identifier: bN6MlrNhIrsDqk8eIEFX3zlS1pn/ms2CPzuhx/WKxik= Subject key identifier: 4A:7E:F4:16:17:9F:68:3C:2A:CA:A0:9B:1F:E4:56:36:63:0B:28:92 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01943661611B1AF7CE4A1DD0B4C9B0D5CF5A Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sn70FhefaDwqyqCbH-RWNmMLKJI.roa Signing time: Sun 05 Jan 2025 12:12:18 +0000 ROA not before: Sun 05 Jan 2025 12:12:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:36:61:61:1b:1a:f7:ce:4a:1d:d0:b4:c9:b0:d5:cf:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 5 12:12:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a7ef416179f683c2acaa09b1fe45636630b2892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:52:30:0a:45:4a:3b:d9:74:d0:3e:d1:f3: f3:25:a0:44:dc:27:cf:e5:52:0f:b4:92:99:ab:90: 7d:17:80:6f:e9:32:a3:62:21:c8:c8:48:bb:db:ec: ad:68:f7:09:2d:97:90:c4:00:f4:4b:d9:71:07:77: fd:12:4b:7a:28:77:10:d6:95:7c:45:f0:16:6c:a6: 03:05:e1:40:1c:0e:62:48:27:9e:71:17:e4:77:b7: 2d:62:d9:b3:5c:cb:1d:49:51:f6:e3:0e:6d:c3:30: 8f:41:f3:1b:1b:9c:cf:c1:9b:d8:9d:55:4d:4c:ea: b5:b1:c1:95:53:f4:52:2a:a9:fe:8b:dd:66:46:ee: 4e:ad:69:7f:70:7d:18:3d:c5:de:f0:6e:7b:ae:f8: b7:25:47:3d:62:a9:20:7a:bb:70:05:51:2e:a4:ef: 67:f0:2f:e4:2e:84:38:3c:29:14:3a:e4:53:5e:dd: 8e:8f:f6:78:27:bc:9d:e4:73:af:be:1a:31:01:a0: 37:47:a4:1f:83:23:f0:d3:5f:7b:69:62:07:63:ac: 9a:aa:08:23:e3:66:c6:3b:77:1c:bd:28:0c:bb:a5: 7f:18:8a:99:cc:4f:5a:a8:8b:23:0f:d6:82:a7:c8: e2:56:4b:32:8d:f6:72:e6:b4:6a:08:ed:e9:ac:47: 93:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7E:F4:16:17:9F:68:3C:2A:CA:A0:9B:1F:E4:56:36:63:0B:28:92 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sn70FhefaDwqyqCbH-RWNmMLKJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 2a:ee:6d:d1:70:0f:5d:ae:6a:d3:2b:cc:b1:60:43:93:0d:13: 21:db:96:10:d7:f7:63:16:ac:2c:8e:bf:7d:17:26:44:87:1c: e6:3d:f5:4b:a8:c8:3f:dd:12:e7:21:e5:cd:94:ca:4e:67:66: 60:38:18:6b:9a:f1:eb:19:5e:28:95:8b:fc:46:26:d2:16:3f: d0:3a:6e:22:77:ea:56:66:31:b9:ef:30:9c:41:37:bd:c1:63: 44:cd:fa:a2:20:4d:e3:78:2f:09:58:47:d7:f4:77:44:6e:c9: a6:23:99:7b:fd:7d:76:a3:01:f3:2f:85:72:a8:78:f8:dd:51: 63:3b:11:1d:c9:7c:71:0b:db:33:83:98:e6:8d:0c:b3:cf:02: b8:d1:76:6b:17:62:68:57:38:2b:5b:06:41:01:9e:4e:17:70: 84:00:40:36:46:cf:2d:78:32:8f:55:d7:19:7e:00:29:e8:d3: d1:b7:91:7e:ff:6b:69:15:11:24:0a:67:12:9c:65:24:cf:01: 68:f5:f5:41:a9:52:7f:b3:b3:3f:6f:b5:60:fd:2f:72:d3:08: a4:98:63:9f:bf:7b:fe:b6:07:30:75:02:1d:af:83:16:09:31: 4d:62:01:2d:eb:d5:98:1e:80:ff:7f:6b:05:97:10:e3:bf:f9: 9b:32:e5:48 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZQ2YWEbGvfOSh3QtMmw1c9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTA1MTIxMjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTdlZjQxNjE3OWY2ODNjMmFjYWEwOWIxZmU0NTYzNjYzMGIyODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYNSMApFSjvZdNA+0fPzJaBE3CfP 5VIPtJKZq5B9F4Bv6TKjYiHIyEi72+ytaPcJLZeQxAD0S9lxB3f9Ekt6KHcQ1pV8 RfAWbKYDBeFAHA5iSCeecRfkd7ctYtmzXMsdSVH24w5twzCPQfMbG5zPwZvYnVVN TOq1scGVU/RSKqn+i91mRu5OrWl/cH0YPcXe8G57rvi3JUc9YqkgertwBVEupO9n 8C/kLoQ4PCkUOuRTXt2Oj/Z4J7yd5HOvvhoxAaA3R6QfgyPw0197aWIHY6yaqggj 42bGO3ccvSgMu6V/GIqZzE9aqIsjD9aCp8jiVksyjfZy5rRqCO3prEeT5wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFEp+9BYXn2g8Ksqgmx/kVjZjCyiSMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvU243MEZoZWZhRHdxeXFDYkgtUldObU1MS0pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAKu5t0XAPXa5q0yvMsWBDkw0T IduWENf3YxasLI6/fRcmRIcc5j31S6jIP90S5yHlzZTKTmdmYDgYa5rx6xleKJWL /EYm0hY/0DpuInfqVmYxue8wnEE3vcFjRM36oiBN43gvCVhH1/R3RG7JpiOZe/19 dqMB8y+Fcqh4+N1RYzsRHcl8cQvbM4OY5o0Ms88CuNF2axdiaFc4K1sGQQGeThdw hABANkbPLXgyj1XXGX4AKejT0beRfv9raRURJApnEpxlJM8BaPX1QalSf7OzP2+1 YP0vctMIpJhjn797/rYHMHUCHa+DFgkxTWIBLevVmB6A/39rBZcQ47/5mzLlSA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:33:39 2025 by rpki-client