This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bEZuSUzpguUhPvT6QzTjWLyuO5s.roa File: bEZuSUzpguUhPvT6QzTjWLyuO5s.roa (raw, json) Hash identifier: 2PND8k+3Kc8e2wo5rm8yW2Xff+y81Yc/YUjZeiAz7gE= Subject key identifier: 6C:46:6E:49:4C:E9:82:E5:21:3E:F4:FA:43:34:E3:58:BC:AE:3B:9B Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01944A8C0A006E97D8DA8AE40B6D1816E495 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bEZuSUzpguUhPvT6QzTjWLyuO5s.roa Signing time: Thu 09 Jan 2025 10:11:19 +0000 ROA not before: Thu 09 Jan 2025 10:11:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:4a:8c:0a:00:6e:97:d8:da:8a:e4:0b:6d:18:16:e4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 9 10:11:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c466e494ce982e5213ef4fa4334e358bcae3b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:1f:8f:4b:e9:f0:db:36:f6:99:32:68:3f: c8:3f:db:e6:4e:1b:23:10:51:83:6e:dc:e8:67:2c: 32:6d:5c:b8:15:c3:59:4a:5d:2b:8d:7d:4a:83:6a: 96:bf:be:c6:9a:e0:42:a9:6f:81:b2:fc:88:61:d0: a1:68:30:af:c4:b9:1a:e0:a8:34:7f:4a:85:5c:76: 1e:c4:7a:8a:0a:c8:21:59:65:c0:e4:db:6d:f9:e5: 63:1a:db:46:82:58:69:6e:2d:d6:97:f2:21:c7:c6: 0f:1b:bd:23:68:15:69:d3:f3:84:83:51:94:19:e4: ad:f1:c0:60:3b:22:b3:38:a1:67:9a:a7:d2:90:82: fb:9e:b3:a2:3c:b9:75:27:cb:65:3e:79:e3:13:79: 76:7a:f8:ac:c1:a2:3d:ad:0d:5e:1d:e5:4c:15:21: c6:05:23:d4:71:c3:de:c3:d9:2c:84:e4:5e:6f:6a: ad:cb:be:9d:23:2d:28:e8:4a:a1:e5:30:cb:be:1e: ac:99:ee:76:65:7c:64:b1:48:df:79:ff:7d:82:2a: 92:5d:c1:52:6a:16:8a:4a:6b:f7:5c:62:9b:a4:61: bc:ae:0c:86:7f:cb:17:cf:af:5b:d9:c9:3c:cc:f3: 86:bc:94:61:7f:04:a0:53:5d:a1:57:fd:c3:07:4e: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:46:6E:49:4C:E9:82:E5:21:3E:F4:FA:43:34:E3:58:BC:AE:3B:9B X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bEZuSUzpguUhPvT6QzTjWLyuO5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 2e:c5:aa:7a:d8:8d:74:31:46:be:73:95:9b:ca:d3:ee:af:61: a5:dd:5c:05:96:99:0e:8c:94:11:f2:4a:15:54:91:01:ba:37: c0:ba:39:78:74:fc:b0:34:81:15:09:10:b2:c2:27:a0:7c:d3: 46:8d:85:2f:fa:56:e1:41:c4:4e:d3:2c:01:2d:8e:c3:37:03: e9:76:53:e1:b5:1b:55:ca:30:8e:b5:75:7b:f7:66:e7:da:ba: a6:9c:f6:6a:55:25:ee:5f:14:89:c3:59:44:06:ed:ed:25:64: dd:35:84:f6:24:69:8a:08:33:b8:e8:0c:f2:da:fd:32:cf:67: a5:13:38:25:04:e5:3e:a6:76:65:ea:bc:65:9a:aa:6f:ee:c6: 71:33:ec:2b:83:58:79:3d:a1:4a:3b:8d:54:23:ee:df:1e:93: 8d:2b:3d:23:e6:47:1e:43:a7:79:a2:fc:b8:e7:12:bc:8a:06: f8:4f:90:fa:cd:24:05:4c:c2:a0:c7:44:07:c6:5d:fe:aa:41: 9e:df:35:68:7f:b8:3a:b6:4b:d0:08:aa:f3:3b:83:2f:20:6b: 14:84:99:38:f1:fc:ee:19:d4:57:86:75:81:d0:e9:24:ac:18: 21:2e:94:de:40:68:8a:b4:d8:df:03:2f:6d:3e:d0:e8:6d:f4: f9:35:88:2a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZRKjAoAbpfY2orkC20YFuSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTA5MTAxMTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzQ2NmU0OTRjZTk4MmU1MjEzZWY0ZmE0MzM0ZTM1OGJjYWUzYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo4fj0vp8Ns29pkyaD/IP9vmThsj EFGDbtzoZywybVy4FcNZSl0rjX1Kg2qWv77GmuBCqW+BsvyIYdChaDCvxLka4Kg0 f0qFXHYexHqKCsghWWXA5Ntt+eVjGttGglhpbi3Wl/Ihx8YPG70jaBVp0/OEg1GU GeSt8cBgOyKzOKFnmqfSkIL7nrOiPLl1J8tlPnnjE3l2eviswaI9rQ1eHeVMFSHG BSPUccPew9kshOReb2qty76dIy0o6Eqh5TDLvh6sme52ZXxksUjfef99giqSXcFS ahaKSmv3XGKbpGG8rgyGf8sXz69b2ck8zPOGvJRhfwSgU12hV/3DB06yNQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFGxGbklM6YLlIT70+kM041i8rjubMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvYkVadVNVenBndVVoUHZUNlF6VGpXTHl1TzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEALsWqetiNdDFGvnOVm8rT7q9h pd1cBZaZDoyUEfJKFVSRAbo3wLo5eHT8sDSBFQkQssInoHzTRo2FL/pW4UHETtMs AS2OwzcD6XZT4bUbVcowjrV1e/dm59q6ppz2alUl7l8UicNZRAbt7SVk3TWE9iRp iggzuOgM8tr9Ms9npRM4JQTlPqZ2Zeq8ZZqqb+7GcTPsK4NYeT2hSjuNVCPu3x6T jSs9I+ZHHkOneaL8uOcSvIoG+E+Q+s0kBUzCoMdEB8Zd/qpBnt81aH+4OrZL0Aiq 8zuDLyBrFISZOPH87hnUV4Z1gdDpJKwYIS6U3kBoirTY3wMvbT7Q6G30+TWIKg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:48 2025 by rpki-client