This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ipItOPeJRCWiNkVWJZDrNUAGbXs.roa File: ipItOPeJRCWiNkVWJZDrNUAGbXs.roa (raw, json) Hash identifier: 7UQA3OTN+CjdwZodaNJRaaTctIeOYUUmmTai3NJ48Kg= Subject key identifier: 8A:92:2D:38:F7:89:44:25:A2:36:45:56:25:90:EB:35:40:06:6D:7B Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0194614B97550CBA489EC7B4C18B82956AA4 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ipItOPeJRCWiNkVWJZDrNUAGbXs.roa Signing time: Mon 13 Jan 2025 20:12:11 +0000 ROA not before: Mon 13 Jan 2025 20:12:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:61:4b:97:55:0c:ba:48:9e:c7:b4:c1:8b:82:95:6a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 13 20:12:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a922d38f7894425a23645562590eb3540066d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:37:8e:0f:af:b5:92:71:71:c4:51:e5:14: 01:0f:ae:32:d0:1a:cc:25:82:bf:1c:fa:13:6c:30: 6c:8c:9e:7e:22:3c:71:ea:cc:b8:04:7d:ea:6a:21: 60:5b:19:d3:d2:be:52:a8:39:d8:fd:76:03:12:f0: 1c:3e:5d:79:ed:72:2e:c9:63:17:8d:ba:e1:47:76: 58:02:66:d1:26:4a:7b:65:48:b5:b8:b4:c6:2a:0d: fe:d8:95:07:a0:0d:53:ad:5d:30:db:0d:f4:16:34: e3:51:3b:37:ec:2d:09:23:8f:9b:64:af:95:57:9e: 3c:3c:c4:ca:67:ba:d9:ae:53:3b:e2:59:bd:31:3b: 57:2a:3d:09:d6:17:3b:df:f9:cb:e9:25:e7:76:d6: 57:7f:ac:fb:c5:95:c0:2b:8e:80:ed:27:b1:ac:10: 50:5e:84:a8:47:9f:bb:3a:99:9b:05:20:1e:ff:c9: 54:2b:b3:49:dc:3d:b7:01:8e:ac:d3:a2:45:66:44: 9e:6d:75:7f:e2:75:6d:72:cd:b5:75:06:23:7b:ef: cf:c0:26:f6:d7:b1:01:dd:47:87:85:be:db:ee:e0: c4:07:eb:e7:51:d8:d8:fc:e1:17:0e:90:b1:6f:42: 5b:4f:2b:ad:06:49:01:35:44:c3:c0:8d:6f:69:52: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:92:2D:38:F7:89:44:25:A2:36:45:56:25:90:EB:35:40:06:6D:7B X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ipItOPeJRCWiNkVWJZDrNUAGbXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 5a:fc:81:2d:8c:9a:65:b2:f7:12:c4:73:65:dd:07:dd:90:78: a2:78:ff:af:dd:58:60:51:64:f9:53:f9:48:f1:99:a4:2d:80: cd:48:34:f6:5d:ca:fe:81:a8:41:f8:59:8d:a8:d8:e8:6a:b4: 21:b9:96:a6:8c:e0:4a:24:e5:9f:b4:7d:bc:7e:9f:8b:e5:13: 74:3e:74:8c:72:f6:ff:22:74:ce:bd:38:6e:82:96:da:9b:5a: be:cc:e5:a1:1c:3a:9e:24:11:8f:cf:55:a8:ad:04:77:be:e6: eb:60:db:58:78:0e:b7:ba:b1:fc:5f:19:cc:15:eb:76:ba:fa: 99:97:9e:66:52:19:ea:1d:6c:6f:8c:60:96:5e:63:29:ce:0b: 1f:87:c4:e5:66:bb:cd:2d:8e:0b:da:0f:4e:12:01:50:31:ee: 72:54:8e:54:15:45:57:dc:21:25:a7:eb:55:da:d9:bf:e7:75: 8e:59:44:be:4d:0f:04:4a:29:71:fc:b8:ec:89:d4:4e:da:97: 4b:72:02:5e:96:60:b8:5b:db:5b:e2:95:e0:a2:5b:f4:d7:9b: 8f:e6:48:24:59:e4:11:8c:fa:1e:ca:be:44:50:f5:cb:80:97: cb:a9:ca:6e:72:fc:97:71:9e:50:ad:1a:01:ed:5a:57:e3:50: 74:3e:7b:4b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZRhS5dVDLpInse0wYuClWqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTEzMjAxMjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTkyMmQzOGY3ODk0NDI1YTIzNjQ1NTYyNTkwZWIzNTQwMDY2ZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06E3jg+vtZJxccRR5RQBD64y0BrM JYK/HPoTbDBsjJ5+Ijxx6sy4BH3qaiFgWxnT0r5SqDnY/XYDEvAcPl157XIuyWMX jbrhR3ZYAmbRJkp7ZUi1uLTGKg3+2JUHoA1TrV0w2w30FjTjUTs37C0JI4+bZK+V V548PMTKZ7rZrlM74lm9MTtXKj0J1hc73/nL6SXndtZXf6z7xZXAK46A7SexrBBQ XoSoR5+7OpmbBSAe/8lUK7NJ3D23AY6s06JFZkSebXV/4nVtcs21dQYje+/PwCb2 17EB3UeHhb7b7uDEB+vnUdjY/OEXDpCxb0JbTyutBkkBNUTDwI1vaVKuoQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFIqSLTj3iUQlojZFViWQ6zVABm17MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvaXBJdE9QZUpSQ1dpTmtWV0paRHJOVUFHYlhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAWvyBLYyaZbL3EsRzZd0H3ZB4 onj/r91YYFFk+VP5SPGZpC2AzUg09l3K/oGoQfhZjajY6Gq0IbmWpozgSiTln7R9 vH6fi+UTdD50jHL2/yJ0zr04boKW2ptavszloRw6niQRj89VqK0Ed77m62DbWHgO t7qx/F8ZzBXrdrr6mZeeZlIZ6h1sb4xgll5jKc4LH4fE5Wa7zS2OC9oPThIBUDHu clSOVBVFV9whJafrVdrZv+d1jllEvk0PBEopcfy47InUTtqXS3ICXpZguFvbW+KV 4KJb9Nebj+ZIJFnkEYz6Hsq+RFD1y4CXy6nKbnL8l3GeUK0aAe1aV+NQdD57Sw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:22 2025 by rpki-client