This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezN4CuiwcXInSYQAplkF9cRKxe0.roa
File: ezN4CuiwcXInSYQAplkF9cRKxe0.roa (raw, json)
Hash identifier: E8QmQBmcdR2uUTqOjG+hqWxzINaJ20BlgAHXqMSe/Q8=
Subject key identifier: 7B:33:78:0A:E8:B0:71:72:27:49:84:00:A6:59:05:F5:C4:4A:C5:ED
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A1B33DB0D012DFD23D87249648E15A05
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezN4CuiwcXInSYQAplkF9cRKxe0.roa
Signing time: Fri 30 Aug 2024 05:12:44 +0000
ROA not before: Fri 30 Aug 2024 05:12:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a1:b3:3d:b0:d0:12:df:d2:3d:87:24:96:48:e1:5a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 30 05:12:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b33780ae8b0717227498400a65905f5c44ac5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:be:7c:63:1c:4f:e6:c0:d5:fb:32:44:e8:
56:f5:60:ca:46:76:f6:aa:26:92:99:4f:a6:93:5e:
e3:29:8d:eb:d0:f2:bd:2c:2c:81:fe:d4:d7:f2:98:
6b:2b:7a:82:bf:49:dc:96:3b:c7:f2:bb:2a:7a:e7:
8d:1a:84:36:61:af:04:52:db:7b:7f:73:d0:65:76:
5b:30:0f:f8:d0:21:f2:56:c0:9d:4d:94:bc:98:75:
8a:ba:3b:ec:0f:e4:db:10:89:8a:60:31:0b:f4:be:
c1:65:f3:a8:45:ad:37:59:94:cc:c6:fe:39:4d:64:
9d:8f:bd:cb:ef:68:a3:22:f8:ac:99:22:86:7d:4b:
00:13:0d:ad:49:b0:99:bf:c3:66:73:5d:96:c0:4c:
04:88:86:a1:27:de:f7:64:06:67:dd:92:65:85:d1:
d0:ad:30:46:dc:01:5a:bb:ef:01:ec:6b:c8:52:8b:
0b:62:92:08:90:b0:89:26:02:48:60:f7:ee:a1:c4:
83:80:a4:f4:79:16:57:2a:90:fb:8c:da:f1:63:5f:
e3:b7:ac:c6:91:df:6e:a4:08:01:a0:6b:1f:c1:c8:
d0:d5:24:84:b9:8d:0e:7e:a0:28:09:6d:fc:16:0c:
62:b8:f6:91:64:26:12:85:01:a1:e9:44:2b:8c:5a:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:78:0A:E8:B0:71:72:27:49:84:00:A6:59:05:F5:C4:4A:C5:ED
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezN4CuiwcXInSYQAplkF9cRKxe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
5b:90:18:00:56:0e:ba:08:25:9a:26:4e:af:8f:d7:bd:c4:b5:
61:30:ae:13:a7:d0:04:38:4a:4b:06:8a:62:1a:90:70:a0:0f:
aa:b4:7c:ff:e6:34:3c:4f:a6:a3:34:90:1d:30:0c:69:90:e0:
67:a9:7c:14:74:7a:c4:d4:7b:34:4e:6c:90:8a:2e:02:f0:1c:
d2:54:18:a2:53:15:10:95:10:25:f3:12:dc:5f:92:df:13:d9:
c3:23:88:0e:51:45:21:d2:2d:f9:02:23:97:74:05:9d:b1:d3:
f0:ae:e5:a1:21:12:fa:48:c8:b9:c7:11:b9:c8:62:2c:7b:60:
d6:27:7a:96:d7:fc:06:e1:e2:ef:5c:8d:10:59:53:0e:d8:48:
27:11:3a:9f:30:b8:af:45:4b:88:2e:ad:fd:66:ad:34:4f:01:
b7:f9:73:71:94:dd:e2:a9:8a:bd:26:75:5e:ef:e3:0e:bc:ad:
d9:69:be:90:0b:5c:9e:b7:1a:e4:51:87:18:92:d2:32:50:13:
19:87:59:fb:31:83:ec:9b:a5:c5:35:ca:e2:6f:4d:b4:67:8b:
d3:c6:70:d2:86:2a:ce:c8:b2:61:1b:60:81:76:53:bd:09:72:
f9:f1:bc:a3:25:00:c3:c6:30:ff:2c:f4:73:62:a2:7c:77:2b:
72:ec:70:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 00:02:38 2025 by rpki-client