This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hSYIlJ04orJ1xTJjyy8pvLeKi_E.roa File: hSYIlJ04orJ1xTJjyy8pvLeKi_E.roa (raw, json) Hash identifier: vA6JlBWz1Zb7mAww+dXdT9FBqb3b9idnZ8Q242hsaB4= Subject key identifier: 85:26:08:94:9D:38:A2:B2:75:C5:32:63:CB:2F:29:BC:B7:8A:8B:F1 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0195A736049157E4DBD8A58BA13673F5DDC0 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hSYIlJ04orJ1xTJjyy8pvLeKi_E.roa Signing time: Tue 18 Mar 2025 03:04:50 +0000 ROA not before: Tue 18 Mar 2025 03:04:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128 2001:67c:64:ffff:0:195:a735:e77f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:a7:36:04:91:57:e4:db:d8:a5:8b:a1:36:73:f5:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 18 03:04:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=852608949d38a2b275c53263cb2f29bcb78a8bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:c2:6b:a6:6a:b4:fe:30:5c:33:79:64:cf: ac:bd:e0:42:ec:ee:53:19:3d:35:02:44:1e:a3:63: 47:70:0e:47:e5:f4:9b:47:a5:66:76:e6:99:65:e5: 0b:e2:30:9a:b5:1b:2f:b8:8b:92:30:30:a0:82:01: 39:01:50:9a:4b:4e:21:85:e3:4e:d4:71:72:d0:f7: 2f:b4:5e:36:74:8f:4d:1f:d6:6b:55:3c:5f:c9:7d: 4c:76:1f:7e:3b:fb:99:dc:6d:77:cc:97:a5:77:c9: ed:a1:f5:25:5f:52:42:3a:ad:c9:c5:4e:a4:ca:d4: c1:af:e5:9a:01:bc:88:06:c4:6a:a6:f5:14:f4:54: b4:dd:dd:38:a3:fe:4f:ec:9d:77:be:f1:a8:d4:83: bd:48:f5:2c:8e:bb:5e:c9:98:39:4f:2f:6f:fb:93: ae:dd:84:5b:13:6c:0c:0a:67:fb:54:e0:dc:41:94: da:60:97:51:26:d0:ff:5f:4d:5f:9d:e4:b8:b1:b8: b2:a9:e0:fe:39:b9:2e:80:42:78:7a:08:98:6d:73: a8:5a:c6:31:55:39:ae:be:8a:fb:b0:85:57:da:c0: ff:3d:57:4a:7d:aa:2b:cb:ed:68:6c:8f:f7:be:8f: 53:8a:e3:46:e8:8c:44:32:9d:b7:56:60:f9:f4:d8: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:08:94:9D:38:A2:B2:75:C5:32:63:CB:2F:29:BC:B7:8A:8B:F1 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hSYIlJ04orJ1xTJjyy8pvLeKi_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:86cf:630c/128 2001:67c:64:ffff:0:195:a735:e77f/128 Signature Algorithm: sha256WithRSAEncryption 08:31:77:8e:c2:5a:a9:5f:23:d0:f8:95:7a:92:31:47:87:25: cd:fe:53:1d:ea:f9:b7:28:1b:82:e4:94:f6:19:cf:e4:62:85: bb:64:b5:05:c0:7c:63:6d:2e:f1:52:b4:f7:1e:63:12:6e:f8: bc:2d:ad:83:b0:87:7c:34:9f:a6:88:12:06:10:56:7f:3b:6d: 5c:2a:5f:dd:ca:38:dd:26:c8:14:0e:e9:87:76:02:e8:8c:88: fa:d6:bc:33:a8:d2:3b:a2:58:ed:14:69:3b:86:54:20:51:9c: e6:0b:17:07:e0:d5:e9:66:78:b7:4b:5d:6d:fe:72:39:6e:cd: 72:e3:f5:1a:e6:cd:22:8b:a4:ba:42:35:45:54:77:5b:06:98: 76:b9:1e:f9:39:b4:17:ec:92:06:c8:47:3b:0d:27:ae:5f:3f: b6:dc:c6:44:10:92:26:f8:22:f2:b3:02:6e:21:89:bd:af:71: 2f:17:3e:24:f2:b4:3e:8e:cb:4e:1c:26:0e:d0:20:69:43:b7: 37:a5:07:d4:f2:90:69:6c:15:49:ab:05:e4:c1:f4:d5:01:bc: c8:56:cf:fb:4e:d2:21:d8:4f:01:e2:81:51:6e:26:d8:de:9f: 4e:9e:c0:cd:80:aa:20:11:33:fb:d8:ba:34:3c:a7:0b:8c:b4: 06:48:56:96 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZWnNgSRV+Tb2KWLoTZz9d3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzE4MDMwNDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTI2MDg5NDlkMzhhMmIyNzVjNTMyNjNjYjJmMjliY2I3OGE4YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqATCa6ZqtP4wXDN5ZM+sveBC7O5T GT01AkQeo2NHcA5H5fSbR6VmduaZZeUL4jCatRsvuIuSMDCgggE5AVCaS04hheNO 1HFy0PcvtF42dI9NH9ZrVTxfyX1Mdh9+O/uZ3G13zJeld8ntofUlX1JCOq3JxU6k ytTBr+WaAbyIBsRqpvUU9FS03d04o/5P7J13vvGo1IO9SPUsjrteyZg5Ty9v+5Ou 3YRbE2wMCmf7VODcQZTaYJdRJtD/X01fneS4sbiyqeD+ObkugEJ4egiYbXOoWsYx VTmuvor7sIVX2sD/PVdKfaory+1obI/3vo9TiuNG6IxEMp23VmD59Njm2wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFIUmCJSdOKKydcUyY8svKby3iovxMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvaFNZSWxKMDRvckoxeFRKanl5OHB2TGVLaV9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGVhs9jDAMRACABBnwAZP//AAABlac1538wDQYJKoZIhvcNAQELBQADggEB AAgxd47CWqlfI9D4lXqSMUeHJc3+Ux3q+bcoG4LklPYZz+RihbtktQXAfGNtLvFS tPceYxJu+LwtrYOwh3w0n6aIEgYQVn87bVwqX93KON0myBQO6Yd2AuiMiPrWvDOo 0juiWO0UaTuGVCBRnOYLFwfg1elmeLdLXW3+cjluzXLj9RrmzSKLpLpCNUVUd1sG mHa5Hvk5tBfskgbIRzsNJ65fP7bcxkQQkib4IvKzAm4hib2vcS8XPiTytD6Oy04c Jg7QIGlDtzelB9TykGlsFUmrBeTB9NUBvMhWz/tO0iHYTwHigVFuJtjen06ewM2A qiARM/vYujQ8pwuMtAZIVpY= -----END CERTIFICATE-----Generated at Fri Dec 19 04:48:01 2025 by rpki-client