This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aWQdwUbWfpLoj3gIwNR38yfzzXg.roa File: aWQdwUbWfpLoj3gIwNR38yfzzXg.roa (raw, json) Hash identifier: 8O9nek21LkRYUwIMntPBGj+MQADUaPTGUYkPK6Fs+1o= Subject key identifier: 69:64:1D:C1:46:D6:7E:92:E8:8F:78:08:C0:D4:77:F3:27:F3:CD:78 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191E27957982F211ED108AEF344169F6E50 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aWQdwUbWfpLoj3gIwNR38yfzzXg.roa Signing time: Wed 11 Sep 2024 19:04:48 +0000 ROA not before: Wed 11 Sep 2024 19:04:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:191:e278:da0f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:e2:79:57:98:2f:21:1e:d1:08:ae:f3:44:16:9f:6e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Sep 11 19:04:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=69641dc146d67e92e88f7808c0d477f327f3cd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:67:2a:b4:53:7d:88:83:c9:75:35:3c:e1: 54:9f:52:ef:ee:61:04:f9:81:2a:80:67:6e:d4:12: 80:2e:ef:ab:fe:07:53:1a:65:b5:69:db:0b:d0:e1: b7:e5:f9:d1:2c:7c:66:93:21:ab:ee:56:df:dd:28: 4d:0c:ed:f1:bb:d2:24:b7:c6:9d:0e:8e:5e:d1:81: 4a:73:26:1c:7d:1e:0f:0c:36:be:24:90:97:72:12: 33:27:b5:e5:3f:f6:67:2b:f1:57:67:36:d9:dd:b6: e9:85:81:83:90:18:9b:b1:0e:14:d0:91:75:4b:99: 92:27:db:4b:d2:c8:f1:40:c6:e8:bf:f0:47:77:cc: 5e:5a:6d:47:ec:73:a6:ab:c7:98:6a:bb:43:5b:31: ed:b7:8f:8a:d9:63:b1:39:e1:ad:47:ac:1d:e7:62: 7b:4f:63:8a:d2:14:17:58:5a:fc:9e:cf:88:d6:3a: 16:2e:32:0c:c9:c4:b8:3c:e2:4c:2e:63:7b:00:c8: 81:f9:e1:2f:c4:57:25:3c:77:ab:f4:ca:9a:3e:ee: 59:8d:f3:d6:e8:6e:14:81:9e:53:e4:1b:17:34:cd: 6f:e7:e4:10:94:a8:b3:de:03:bd:27:19:f3:18:fc: 27:bd:54:f3:3d:6b:f8:16:d1:67:d7:12:4b:be:0a: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:64:1D:C1:46:D6:7E:92:E8:8F:78:08:C0:D4:77:F3:27:F3:CD:78 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aWQdwUbWfpLoj3gIwNR38yfzzXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:191:e278:da0f/128 Signature Algorithm: sha256WithRSAEncryption 5e:c7:8f:b0:07:03:f2:8d:f5:26:53:f9:f9:d3:33:ff:9b:9a: 72:f4:e2:fe:d3:5b:4e:30:9a:14:9d:a7:95:f6:63:47:d6:24: 2b:82:3b:28:ba:3a:dc:c8:18:ed:43:48:bc:11:ad:15:1e:ce: 88:8c:9a:cb:74:a9:e9:3d:09:29:ef:7b:35:10:fc:ce:2a:27: 68:22:49:68:fb:a5:de:d6:3d:33:8b:e9:f0:a9:54:e9:d3:da: 72:b3:f4:ea:0a:83:9f:6b:b4:01:f0:2e:85:21:f8:27:f3:47: c7:72:f6:04:45:18:c6:60:c1:e2:97:c9:eb:85:8e:53:3e:ce: 0c:da:9d:14:1e:5c:27:52:46:97:2a:3b:69:15:e4:4c:ad:31: 7d:fa:5c:5b:7e:9e:29:5c:e5:d9:6a:cd:8b:07:5d:98:02:e2: 11:f4:9a:08:3c:87:05:26:d3:e3:72:0a:7e:1a:81:42:11:0b: 06:cb:58:8f:4f:24:33:41:07:e0:fd:78:e3:77:4b:c3:e3:ff: 87:e1:a2:48:92:9a:e3:14:5a:f7:c7:75:36:31:e0:c3:82:1f: 50:d8:3f:b7:5c:20:f8:54:8f:40:0d:52:00:24:4a:b7:78:b6: fd:56:ff:5c:22:35:15:96:9a:7c:dc:1d:52:c3:e0:a1:f6:e2: 54:b5:f1:a2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZHieVeYLyEe0Qiu80QWn25QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwOTExMTkwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTY0MWRjMTQ2ZDY3ZTkyZTg4Zjc4MDhjMGQ0NzdmMzI3ZjNjZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfRnKrRTfYiDyXU1POFUn1Lv7mEE +YEqgGdu1BKALu+r/gdTGmW1adsL0OG35fnRLHxmkyGr7lbf3ShNDO3xu9Ikt8ad Do5e0YFKcyYcfR4PDDa+JJCXchIzJ7XlP/ZnK/FXZzbZ3bbphYGDkBibsQ4U0JF1 S5mSJ9tL0sjxQMbov/BHd8xeWm1H7HOmq8eYartDWzHtt4+K2WOxOeGtR6wd52J7 T2OK0hQXWFr8ns+I1joWLjIMycS4POJMLmN7AMiB+eEvxFclPHer9MqaPu5ZjfPW 6G4UgZ5T5BsXNM1v5+QQlKiz3gO9JxnzGPwnvVTzPWv4FtFn1xJLvgpiAwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFGlkHcFG1n6S6I94CMDUd/Mn8814MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvYVdRZHdVYldmcExvajNnSXdOUjM4eWZ6elhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGR4njaDzANBgkqhkiG9w0BAQsFAAOCAQEAXsePsAcD8o31JlP5+dMz/5ua cvTi/tNbTjCaFJ2nlfZjR9YkK4I7KLo63MgY7UNIvBGtFR7OiIyay3Sp6T0JKe97 NRD8zionaCJJaPul3tY9M4vp8KlU6dPacrP06gqDn2u0AfAuhSH4J/NHx3L2BEUY xmDB4pfJ64WOUz7ODNqdFB5cJ1JGlyo7aRXkTK0xffpcW36eKVzl2WrNiwddmALi EfSaCDyHBSbT43IKfhqBQhELBstYj08kM0EH4P1443dLw+P/h+GiSJKa4xRa98d1 NjHgw4IfUNg/t1wg+FSPQA1SACRKt3i2/Vb/XCI1FZaafNwdUsPgofbiVLXxog== -----END CERTIFICATE-----Generated at Wed Dec 17 19:03:50 2025 by rpki-client