This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZYVb-KwVRpPQxzJuISBzbWPFljw.roa
File: ZYVb-KwVRpPQxzJuISBzbWPFljw.roa (raw, json)
Hash identifier: mo7C59sK8wkFfuK/A1iXduoGPmmLOSqbe1oukPuaBys=
Subject key identifier: 65:85:5B:F8:AC:15:46:93:D0:C7:32:6E:21:20:73:6D:63:C5:96:3C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193A8BB87E84314FD913E43EB09B303CB5A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZYVb-KwVRpPQxzJuISBzbWPFljw.roa
Signing time: Mon 09 Dec 2024 00:04:42 +0000
ROA not before: Mon 09 Dec 2024 00:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:a8bb:3951/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a8:bb:87:e8:43:14:fd:91:3e:43:eb:09:b3:03:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 9 00:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65855bf8ac154693d0c7326e2120736d63c5963c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:94:bd:d0:b8:c7:7c:d6:e6:27:5c:9c:b9:
e3:ee:12:3f:30:12:ef:25:30:a0:18:59:3f:79:7b:
d6:8b:67:6d:fb:66:99:d1:83:14:9d:fb:d8:d2:8e:
fc:f7:16:68:51:3b:bb:04:45:c5:a7:3d:9c:c0:8a:
56:9a:13:ac:3b:e1:13:d6:d2:91:c9:5a:78:4a:ca:
f2:e5:91:5a:31:ec:e2:88:a8:d8:c7:85:1d:f1:5f:
4c:76:e7:75:c9:e5:05:9f:56:7f:39:7e:2f:26:6a:
71:d6:d6:0a:27:33:7f:1c:cb:7a:e2:3a:94:fa:2a:
ff:50:fd:ab:d0:01:99:7f:1e:be:da:b9:d1:78:b5:
5c:a5:68:56:38:c3:cf:cb:7a:f8:05:42:4e:35:22:
29:05:85:16:4e:0e:9f:8b:c8:1b:4f:e3:bb:04:36:
03:09:55:d5:1f:ec:79:f4:9d:df:a0:89:78:dd:ee:
45:6e:82:b6:43:d3:b9:76:c5:51:60:5f:18:56:50:
56:44:e2:83:28:72:a3:4c:5b:aa:f7:25:06:5f:10:
5b:6e:9b:7a:96:98:92:23:13:61:40:d0:40:0f:5f:
02:bb:3d:0f:f1:18:ee:ae:da:43:a3:79:9f:6f:a7:
ae:03:4b:1b:97:d5:30:5b:79:d0:20:f9:43:f0:6b:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:85:5B:F8:AC:15:46:93:D0:C7:32:6E:21:20:73:6D:63:C5:96:3C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZYVb-KwVRpPQxzJuISBzbWPFljw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:a8bb:3951/128
Signature Algorithm: sha256WithRSAEncryption
68:59:a3:4c:20:7f:9f:5f:a1:4f:c7:a4:be:9e:f9:38:c7:52:
e3:2d:59:80:84:db:13:80:5e:b9:ec:11:b1:aa:76:70:a6:c7:
75:86:28:d7:b2:20:04:2b:78:f0:ec:41:ea:71:95:11:9b:0a:
4f:22:60:b0:2f:66:b7:76:6b:85:bc:be:6d:5f:6e:ce:57:c3:
0b:74:b5:c2:46:45:e0:ef:00:2c:04:81:ea:ad:d8:51:17:45:
bd:70:7f:f3:e3:c9:e2:27:d8:2e:82:3a:8c:f5:d9:a2:46:7b:
18:93:9e:c8:1a:8b:74:bf:35:ed:57:fd:fb:f6:5f:ea:4e:52:
5d:29:e0:36:2e:69:03:30:db:11:50:7b:65:62:ce:a5:33:e6:
f8:77:92:72:d7:68:85:50:10:3b:d4:6c:28:23:89:5b:63:58:
e5:ee:35:df:a9:86:61:38:f2:5f:cc:63:ac:79:5c:a0:58:df:
ec:d8:f0:cf:b6:8b:7c:fb:5a:52:49:62:f1:f9:0c:86:b3:2b:
7a:10:be:2d:11:34:bc:fa:5b:eb:86:a9:f0:8a:0f:93:ed:62:
d5:8a:e0:75:71:f9:9a:5b:9f:e0:be:37:8b:06:61:82:d2:f5:
a4:99:3c:9b:22:d6:ab:11:e4:a4:a2:bc:26:57:33:bd:8b:ec:
7f:65:0a:21
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZOou4foQxT9kT5D6wmzA8taMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMjA5MDAwNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTg1NWJmOGFjMTU0NjkzZDBjNzMyNmUyMTIwNzM2ZDYzYzU5NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBCUvdC4x3zW5idcnLnj7hI/MBLv
JTCgGFk/eXvWi2dt+2aZ0YMUnfvY0o789xZoUTu7BEXFpz2cwIpWmhOsO+ET1tKR
yVp4Ssry5ZFaMeziiKjYx4Ud8V9Mdud1yeUFn1Z/OX4vJmpx1tYKJzN/HMt64jqU
+ir/UP2r0AGZfx6+2rnReLVcpWhWOMPPy3r4BUJONSIpBYUWTg6fi8gbT+O7BDYD
CVXVH+x59J3foIl43e5FboK2Q9O5dsVRYF8YVlBWROKDKHKjTFuq9yUGXxBbbpt6
lpiSIxNhQNBAD18Cuz0P8RjurtpDo3mfb6euA0sbl9UwW3nQIPlD8GsEswIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGWFW/isFUaT0McybiEgc21jxZY8MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWllWYi1Ld1ZScFBReHpKdUlTQnpiV1BGbGp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGTqLs5UTANBgkqhkiG9w0BAQsFAAOCAQEAaFmjTCB/n1+hT8ekvp75OMdS
4y1ZgITbE4BeuewRsap2cKbHdYYo17IgBCt48OxB6nGVEZsKTyJgsC9mt3Zrhby+
bV9uzlfDC3S1wkZF4O8ALASB6q3YURdFvXB/8+PJ4ifYLoI6jPXZokZ7GJOeyBqL
dL817Vf9+/Zf6k5SXSngNi5pAzDbEVB7ZWLOpTPm+HeSctdohVAQO9RsKCOJW2NY
5e4136mGYTjyX8xjrHlcoFjf7Njwz7aLfPtaUkli8fkMhrMrehC+LRE0vPpb64ap
8IoPk+1i1YrgdXH5mluf4L43iwZhgtL1pJk8myLWqxHkpKK8JlczvYvsf2UKIQ==
-----END CERTIFICATE-----
Generated at Mon Dec 15 13:13:15 2025 by rpki-client