This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_5tRH66_veE2fBQTs1UtEV7pxg.roa
File: c_5tRH66_veE2fBQTs1UtEV7pxg.roa (raw, json)
Hash identifier: 2uXBfEqQ5bUP87uOeZNraZxM6rNAo7MCniqDnnEBmh0=
Subject key identifier: 73:FE:6D:44:7E:BA:FE:F7:84:D9:F0:50:4E:CD:54:B4:45:7B:A7:18
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958FA2DD5B53A2221F2CD3988520FE572E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_5tRH66_veE2fBQTs1UtEV7pxg.roa
Signing time: Thu 13 Mar 2025 13:12:50 +0000
ROA not before: Thu 13 Mar 2025 13:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:a2:dd:5b:53:a2:22:1f:2c:d3:98:85:20:fe:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 13:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fe6d447ebafef784d9f0504ecd54b4457ba718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:d1:58:7e:24:56:0c:c7:71:8f:58:ac:82:
77:dc:17:45:bb:d4:d5:5b:9e:02:2e:95:fb:70:cc:
42:3f:6a:01:43:d7:9d:73:7f:8b:2a:b1:4e:3b:58:
28:49:30:12:e9:7f:d3:03:6f:05:cd:8a:f4:f1:ed:
10:fe:cb:71:9a:c3:b8:38:b7:0e:33:7e:88:86:72:
8c:36:9b:40:08:cb:42:9a:10:fc:fe:db:0f:4a:18:
40:b3:8e:d0:40:0b:88:17:db:2a:d0:97:63:f8:75:
65:b6:33:a0:f2:5e:de:7c:ef:d8:91:99:b6:22:ce:
bb:72:be:bc:b7:d8:1e:08:71:94:82:45:83:02:9d:
d4:ad:fd:be:99:e1:aa:84:22:08:81:cb:68:5c:a0:
61:8b:cb:78:4f:7b:52:ad:96:4a:fd:1d:26:0d:d3:
7e:25:56:90:8d:e9:fd:68:8e:24:fd:bd:05:7c:af:
e9:10:a6:3d:04:c7:f6:24:11:ea:18:ee:45:82:b6:
66:28:f4:81:94:33:77:d9:e2:3b:15:ab:18:f1:8a:
d6:91:9d:a7:0c:30:a9:27:d1:2b:39:98:2b:9a:c3:
ca:96:81:40:1c:02:e3:99:3d:1b:be:3d:48:3a:45:
7c:ac:01:26:03:e7:34:a9:cc:61:c6:4a:41:ea:68:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:6D:44:7E:BA:FE:F7:84:D9:F0:50:4E:CD:54:B4:45:7B:A7:18
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_5tRH66_veE2fBQTs1UtEV7pxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
42:d8:e8:b6:78:1e:fb:78:98:d1:91:c4:02:aa:5f:ae:4d:9b:
59:61:80:0a:c1:73:f9:dd:63:c0:2c:33:49:f9:17:0d:66:27:
bf:9f:7a:6f:1b:46:55:54:e2:30:ed:d6:43:8e:ed:8f:0c:52:
80:90:06:c8:52:55:b1:5c:c5:aa:d5:a1:d3:0e:31:7c:89:7b:
57:c2:de:32:9b:0e:1f:18:d9:de:70:df:8a:0e:98:ec:29:de:
ee:26:a7:64:4a:80:6a:f4:ac:ad:15:bf:3d:8f:5f:97:b1:24:
81:77:83:5a:7e:85:e3:74:5d:a0:bf:4b:a4:02:75:ac:ac:57:
cc:84:e7:71:38:e9:23:d2:88:b0:6a:09:20:51:57:a9:93:2b:
72:17:d4:34:94:e1:e0:35:4d:59:ec:3f:30:82:31:4f:c4:2d:
6e:7e:af:2e:cc:30:2f:7b:2c:c7:73:21:bf:ae:ef:56:3e:f5:
06:ac:3b:00:44:03:0e:87:2a:f6:ce:61:5b:f8:51:e2:57:82:
b9:5d:db:39:e3:39:39:7f:f9:9f:09:8f:b7:b5:f9:ec:55:8f:
84:84:3e:51:8b:de:e7:6f:77:17:36:e7:35:ad:d7:f1:d6:1f:
07:df:a3:11:45:1d:ac:04:c0:5d:4d:4f:d0:6e:d4:da:0a:cb:
f2:ee:9b:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:28:58 2025 by rpki-client