This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fxGFSqNX59-fJHH0b6DXLY1YGQ4.roa File: fxGFSqNX59-fJHH0b6DXLY1YGQ4.roa (raw, json) Hash identifier: 8lFDuzIa/RidEmSSyi2N8rusY+pCUgxSKXvvd3hQsv8= Subject key identifier: 7F:11:85:4A:A3:57:E7:DF:9F:24:71:F4:6F:A0:D7:2D:8D:58:19:0E Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01958BFB3074CDEBDC949952EB5C3FEC2787 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fxGFSqNX59-fJHH0b6DXLY1YGQ4.roa Signing time: Wed 12 Mar 2025 20:10:49 +0000 ROA not before: Wed 12 Mar 2025 20:10:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:8b:fb:30:74:cd:eb:dc:94:99:52:eb:5c:3f:ec:27:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 12 20:10:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7f11854aa357e7df9f2471f46fa0d72d8d58190e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:b7:c3:07:08:b9:ee:40:d3:73:53:35:11: 6e:89:0e:20:98:d8:ba:45:97:05:d8:ed:4a:e4:63: 15:53:9e:08:d2:90:ff:9d:a8:83:51:c6:38:ee:bd: 6c:2a:49:7a:3f:58:0e:77:7a:85:0c:3c:ba:fc:33: c7:dd:42:71:04:89:9b:57:02:63:57:6e:ae:26:e2: 95:06:6c:8c:6a:92:64:4b:63:a3:46:b6:f5:49:f1: 58:c2:9b:e6:df:ec:bd:00:ff:59:10:37:2c:52:81: 30:fc:c1:da:c1:87:e1:5e:17:29:02:0e:e1:dc:5b: 2a:95:67:75:23:eb:84:58:0f:9d:1e:d7:11:74:67: a3:94:d8:5c:98:19:95:ce:ad:cc:dc:c1:09:5c:13: 64:ed:6b:3b:3d:e4:04:04:ec:3f:f7:45:db:43:54: 69:8a:1d:9e:e1:07:6e:fd:3a:51:32:fe:93:37:8c: 78:f6:dd:1a:af:c8:cb:14:35:23:f1:00:93:e7:8f: 52:4b:bf:55:e6:47:28:35:ec:7e:a9:75:57:04:36: fb:b0:4f:02:bd:d6:93:46:d8:8f:a7:65:b4:a5:a7: 81:26:cd:f5:d9:55:10:6d:29:35:85:aa:dc:58:49: 4f:50:78:98:5f:f8:f5:5d:e1:c1:d9:dc:e0:65:f3: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:11:85:4A:A3:57:E7:DF:9F:24:71:F4:6F:A0:D7:2D:8D:58:19:0E X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fxGFSqNX59-fJHH0b6DXLY1YGQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:86cf:630c/128 Signature Algorithm: sha256WithRSAEncryption 19:ca:68:bd:ac:97:24:c5:d8:b8:60:28:66:3b:39:da:04:67: 64:5f:fe:0d:df:49:6e:3f:77:35:50:c7:5c:3a:5f:1a:69:fb: 16:de:a1:fa:53:98:1b:29:29:14:09:b0:a6:25:6e:82:ea:91: ff:c5:6b:ce:18:70:5c:76:d4:cc:7b:89:ef:d7:39:5a:48:15: 87:58:ea:e4:32:28:b5:c3:21:06:c8:e3:94:96:f1:04:a3:be: f3:55:6f:83:47:a3:63:ee:42:db:1a:ef:9b:a3:ef:1a:d7:f4: ae:b4:5d:31:bb:6e:bf:46:ba:ff:19:27:be:c9:1b:e3:83:10: bc:0d:79:96:92:86:b2:87:d8:b9:7c:2d:dd:26:16:7b:87:61: 29:a4:f4:d9:e8:b9:8a:da:92:c3:de:a3:19:74:0e:8c:7b:e8: 6f:17:c2:9c:bf:ef:b2:5d:4e:30:cc:9e:2e:2c:d4:ec:72:ab: d3:c4:8b:cd:e7:c8:20:1a:19:d0:cc:e0:e4:5c:fd:48:81:50: 43:22:8f:32:0e:ff:c9:a7:a3:dc:38:5c:00:ab:90:33:bd:63: 4a:ec:07:75:8b:4d:4d:4d:9e:89:41:ea:f3:96:c2:99:8a:ca: e5:cb:30:35:4c:22:45:b3:65:5e:6a:61:cd:ae:01:5a:ef:d1: 6c:bd:80:b7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZWL+zB0zevclJlS61w/7CeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzEyMjAxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjExODU0YWEzNTdlN2RmOWYyNDcxZjQ2ZmEwZDcyZDhkNTgxOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB63wwcIue5A03NTNRFuiQ4gmNi6 RZcF2O1K5GMVU54I0pD/naiDUcY47r1sKkl6P1gOd3qFDDy6/DPH3UJxBImbVwJj V26uJuKVBmyMapJkS2OjRrb1SfFYwpvm3+y9AP9ZEDcsUoEw/MHawYfhXhcpAg7h 3FsqlWd1I+uEWA+dHtcRdGejlNhcmBmVzq3M3MEJXBNk7Ws7PeQEBOw/90XbQ1Rp ih2e4Qdu/TpRMv6TN4x49t0ar8jLFDUj8QCT549SS79V5kcoNex+qXVXBDb7sE8C vdaTRtiPp2W0paeBJs312VUQbSk1harcWElPUHiYX/j1XeHB2dzgZfNqtwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFH8RhUqjV+ffnyRx9G+g1y2NWBkOMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvZnhHRlNxTlg1OS1mSkhIMGI2RFhMWTFZR1E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAGcpovayXJMXYuGAoZjs52gRn ZF/+Dd9Jbj93NVDHXDpfGmn7Ft6h+lOYGykpFAmwpiVuguqR/8VrzhhwXHbUzHuJ 79c5WkgVh1jq5DIotcMhBsjjlJbxBKO+81Vvg0ejY+5C2xrvm6PvGtf0rrRdMbtu v0a6/xknvskb44MQvA15lpKGsofYuXwt3SYWe4dhKaT02ei5itqSw96jGXQOjHvo bxfCnL/vsl1OMMyeLizU7HKr08SLzefIIBoZ0Mzg5Fz9SIFQQyKPMg7/yaej3Dhc AKuQM71jSuwHdYtNTU2eiUHq85bCmYrK5cswNUwiRbNlXmphza4BWu/RbL2Atw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:24 2025 by rpki-client