This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dOxI2dvzdIRMm4XKAqt4B0wlM-8.roa File: dOxI2dvzdIRMm4XKAqt4B0wlM-8.roa (raw, json) Hash identifier: GWG2aYgUnBI8ZkSq32Opm0mIzLBSvvz3x9l3dxAvl7s= Subject key identifier: 74:EC:48:D9:DB:F3:74:84:4C:9B:85:CA:02:AB:78:07:4C:25:33:EF Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01947C8AEB949B60DB0D511927B6F8742A59 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dOxI2dvzdIRMm4XKAqt4B0wlM-8.roa Signing time: Sun 19 Jan 2025 03:11:06 +0000 ROA not before: Sun 19 Jan 2025 03:11:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:7c:8a:eb:94:9b:60:db:0d:51:19:27:b6:f8:74:2a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 19 03:11:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=74ec48d9dbf374844c9b85ca02ab78074c2533ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:ce:18:2f:47:80:37:f2:eb:26:ce:61:9f: a4:65:06:c4:f2:1a:1c:5c:c2:93:d1:69:06:bb:7a: 05:74:a4:87:20:2d:38:77:68:22:e4:d2:ba:e8:cc: b2:e3:aa:71:76:0b:77:d0:82:70:8c:82:ad:ae:e6: d1:09:17:22:ce:51:00:9a:c1:98:76:8a:4e:7a:4b: cb:e0:42:54:7f:c3:30:6f:e5:8a:02:be:e5:cb:20: 59:34:48:f7:8d:23:d2:f4:3a:da:86:ff:32:eb:0f: b5:68:ae:76:e2:36:70:8e:f1:d7:83:b3:b6:18:36: e1:fd:ea:b7:fc:41:19:11:ed:0c:9e:f8:97:a6:b2: e5:bc:00:ee:35:4d:93:77:2b:2d:ab:be:3d:a0:d5: cb:ee:c1:de:c1:c4:a0:61:c3:57:35:2a:b9:c7:53: c2:1c:1e:a7:06:09:69:09:d7:6d:49:d1:6e:c1:d4: 28:d5:63:5f:79:f3:fc:44:17:8d:9a:8e:52:6d:df: 9b:08:62:24:d9:8e:52:2c:ea:e0:96:a0:3a:d1:b9: a6:cc:0e:9f:1b:65:48:61:0f:2f:50:ce:f1:88:f2: a0:ca:0c:1f:27:77:3e:f9:7f:b1:58:f1:cb:8f:36: e6:de:1b:e7:4f:21:b2:6b:c1:42:d9:92:5d:90:0b: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EC:48:D9:DB:F3:74:84:4C:9B:85:CA:02:AB:78:07:4C:25:33:EF X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dOxI2dvzdIRMm4XKAqt4B0wlM-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 7f:42:c2:ed:4e:8f:d0:c8:9a:f5:42:72:11:4b:98:3b:9d:2f: 52:b4:e3:9d:ae:7e:ec:27:09:a8:65:c1:4c:d5:43:ad:6e:cd: 51:7f:3b:42:b2:24:43:b1:95:31:e8:e3:9e:95:b3:b0:3b:61: 88:96:c4:57:5a:9b:da:9c:84:94:93:7e:70:5c:f9:fc:b5:cf: 40:3a:70:98:2b:51:05:27:fd:b9:36:49:6a:2d:a2:4e:7a:b1: 2e:85:08:5a:1a:d1:dc:1f:73:2e:72:cd:05:d8:f4:75:5b:ca: 87:5b:de:9a:57:76:bf:86:00:ed:44:ee:cd:17:1c:86:02:e5: ed:4a:dd:50:5e:46:7e:a9:ef:d8:ff:5a:6a:46:2a:af:cf:b3: a0:01:27:d0:12:9e:70:d4:52:c7:7a:1a:31:48:99:91:17:30: f5:0c:0a:cd:64:47:0b:80:16:4d:44:9d:32:3a:fb:75:85:92: 3b:bf:32:a7:89:22:a3:29:a2:57:7e:d6:96:0c:3f:53:b6:3b: 30:d3:c2:32:16:1e:95:78:5d:6f:47:80:af:6a:0a:2e:47:2e: b1:07:e9:db:f1:ec:3d:5d:97:b1:2a:55:de:cd:e3:4c:7c:f5: b1:56:54:fe:02:f1:83:fb:6b:82:1e:6f:ba:e5:f4:e0:2d:24: e2:26:c6:b1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZR8iuuUm2DbDVEZJ7b4dCpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTE5MDMxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGVjNDhkOWRiZjM3NDg0NGM5Yjg1Y2EwMmFiNzgwNzRjMjUzM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYzOGC9HgDfy6ybOYZ+kZQbE8hoc XMKT0WkGu3oFdKSHIC04d2gi5NK66Myy46pxdgt30IJwjIKtrubRCRcizlEAmsGY dopOekvL4EJUf8Mwb+WKAr7lyyBZNEj3jSPS9Drahv8y6w+1aK524jZwjvHXg7O2 GDbh/eq3/EEZEe0MnviXprLlvADuNU2Tdystq749oNXL7sHewcSgYcNXNSq5x1PC HB6nBglpCddtSdFuwdQo1WNfefP8RBeNmo5Sbd+bCGIk2Y5SLOrglqA60bmmzA6f G2VIYQ8vUM7xiPKgygwfJ3c++X+xWPHLjzbm3hvnTyGya8FC2ZJdkAs4twIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFHTsSNnb83SETJuFygKreAdMJTPvMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvZE94STJkdnpkSVJNbTRYS0FxdDRCMHdsTS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAf0LC7U6P0Mia9UJyEUuYO50v UrTjna5+7CcJqGXBTNVDrW7NUX87QrIkQ7GVMejjnpWzsDthiJbEV1qb2pyElJN+ cFz5/LXPQDpwmCtRBSf9uTZJai2iTnqxLoUIWhrR3B9zLnLNBdj0dVvKh1vemld2 v4YA7UTuzRcchgLl7UrdUF5Gfqnv2P9aakYqr8+zoAEn0BKecNRSx3oaMUiZkRcw 9QwKzWRHC4AWTUSdMjr7dYWSO78yp4kioymiV37Wlgw/U7Y7MNPCMhYelXhdb0eA r2oKLkcusQfp2/HsPV2XsSpV3s3jTHz1sVZU/gLxg/trgh5vuuX04C0k4ibGsQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:41 2025 by rpki-client