This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fFsbgVoyybuvztir6xTVIIUG5QM.roa
File: fFsbgVoyybuvztir6xTVIIUG5QM.roa (raw, json)
Hash identifier: NsbeWqmXffWHxAt7LB1/AGlUmPMtLuInDfW2z/vJ1rA=
Subject key identifier: 7C:5B:1B:81:5A:32:C9:BB:AF:CE:D8:AB:EB:14:D5:20:85:06:E5:03
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01956DB4CB4E51C983392EBFD5C63CAA684D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fFsbgVoyybuvztir6xTVIIUG5QM.roa
Signing time: Thu 06 Mar 2025 23:05:19 +0000
ROA not before: Thu 06 Mar 2025 23:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:6db4:e54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6d:b4:cb:4e:51:c9:83:39:2e:bf:d5:c6:3c:aa:68:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 6 23:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c5b1b815a32c9bbafced8abeb14d5208506e503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:29:d0:7d:42:57:02:ba:f9:dd:62:2c:f6:
1e:27:4b:50:60:13:3a:42:43:61:93:1f:e3:5c:42:
e1:04:12:45:8a:b8:19:56:63:54:69:de:2f:77:8a:
54:d9:0b:3b:1f:f5:6a:83:6c:18:41:f8:d0:93:8d:
9c:f5:fa:88:b4:bf:eb:5a:8d:9f:4a:2d:bf:aa:5d:
42:15:25:8e:89:eb:8e:a5:cd:4e:e3:ab:d6:1f:a1:
77:f0:9b:4b:a1:c2:ac:4e:e6:62:d8:34:25:98:8a:
2c:a4:5f:4d:e5:7c:7a:f8:16:06:1b:d2:22:da:fd:
7a:40:6c:b7:2f:70:00:e2:2a:92:8e:fc:11:a3:28:
ad:0e:69:0f:fe:f5:0a:86:66:6e:54:99:cd:fc:95:
b8:b4:9c:ef:0f:8a:4a:c2:f5:23:62:42:4e:d3:f5:
0f:7f:c1:d8:42:d3:6d:c4:72:8a:22:dc:56:2d:c7:
6e:3a:0c:24:85:32:42:8d:ba:2e:f4:7c:1e:9d:94:
9a:d2:4b:f5:fd:67:ae:bc:a5:e4:f3:60:81:9e:b4:
5e:5e:29:8e:e0:d4:9f:19:c4:ff:ef:44:a6:69:24:
25:30:f7:02:b2:e0:44:97:33:bf:5e:bc:a7:38:d7:
ba:11:58:61:18:66:53:24:87:1e:06:c2:5f:d5:f1:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5B:1B:81:5A:32:C9:BB:AF:CE:D8:AB:EB:14:D5:20:85:06:E5:03
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fFsbgVoyybuvztir6xTVIIUG5QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:6db4:e54/128
Signature Algorithm: sha256WithRSAEncryption
34:fc:0a:66:34:ff:df:47:43:3d:b6:78:2c:c2:82:90:5c:b1:
12:68:fa:8f:e1:ad:78:21:74:c7:23:64:b5:dc:15:21:3a:d7:
2e:53:09:de:b9:b0:f3:e9:fe:58:a5:fc:90:3c:fb:9e:3f:20:
6b:82:31:63:10:c5:e1:72:9b:77:f2:86:1a:2a:dd:fc:26:51:
d2:32:cb:aa:5e:df:6a:f9:75:b8:3b:e1:24:b0:cc:87:c1:0d:
4a:dd:95:cd:aa:20:99:bc:46:cf:42:db:d4:2b:15:ea:d3:fd:
bc:06:6e:5b:38:ed:4d:e1:30:05:97:92:f7:dd:04:1a:fa:b8:
d1:08:d2:e3:69:5b:30:dd:b6:e5:83:91:cc:a5:46:ba:90:53:
67:95:dd:9c:ea:c1:d1:16:e4:20:fc:38:fa:53:4c:65:2d:5b:
2d:c5:bc:fb:e4:29:3e:df:35:68:3f:0c:33:1c:d4:d3:08:10:
53:a1:46:f5:87:a6:86:a8:fa:83:00:c3:25:e2:58:3e:7d:3e:
4e:a1:69:2c:66:07:a6:b2:69:2f:7e:c3:b3:5e:bf:0a:5b:8d:
24:75:36:cc:14:ef:8e:a6:82:1d:43:90:49:a1:88:12:6c:ea:
d9:ec:77:6e:c1:52:88:af:7a:a1:e5:10:14:7c:77:b0:f2:ea:
a8:3a:69:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 22:39:15 2025 by rpki-client