This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jzWSPOoZ64kDunS-mdJZOtxC-2E.roa
File: jzWSPOoZ64kDunS-mdJZOtxC-2E.roa (raw, json)
Hash identifier: k4SK93uxxPRbB6aR7nQxmH0l++tOaINhFo2ChbVa1GY=
Subject key identifier: 8F:35:92:3C:EA:19:EB:89:03:BA:74:BE:99:D2:59:3A:DC:42:FB:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917F5E0655CA3C5D626E733976D0D7E36E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jzWSPOoZ64kDunS-mdJZOtxC-2E.roa
Signing time: Fri 23 Aug 2024 13:12:33 +0000
ROA not before: Fri 23 Aug 2024 13:12:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:5e:06:55:ca:3c:5d:62:6e:73:39:76:d0:d7:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 23 13:12:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f35923cea19eb8903ba74be99d2593adc42fb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:0b:dc:57:6b:f3:e2:12:35:80:c1:8d:39:
70:75:02:6f:cf:96:39:34:a7:cf:a4:87:75:ed:ea:
83:eb:67:1c:11:3f:35:fc:14:22:a6:ef:e7:d1:5e:
68:8b:fb:3e:b0:f3:3a:52:c2:b6:ce:4a:92:59:49:
b6:89:fc:10:e6:d8:96:01:c1:03:49:7e:f3:ac:4b:
86:c9:48:2e:91:dd:04:83:dd:b3:92:0b:fb:3a:04:
ad:bb:0e:2a:7e:f0:cd:14:00:bf:95:a4:f7:59:0e:
d3:a8:23:7f:cf:0f:ae:fd:ae:fe:09:fc:57:86:15:
68:b9:88:99:48:f5:ce:41:44:cf:2b:fc:93:c6:cb:
04:50:4e:03:0f:2f:89:fc:b3:0b:c8:ee:ed:b1:b6:
e2:2d:39:24:bb:fd:1c:26:d6:ef:55:84:11:bf:d5:
a9:b0:f0:ad:60:27:a7:c0:ae:ac:1c:30:a0:b6:c8:
e8:45:87:2d:df:37:d8:cb:84:5b:b4:7d:ef:b0:f7:
84:86:9f:ab:90:47:aa:36:fe:76:ff:10:fa:9e:7a:
84:c7:56:a7:c6:7d:44:f8:d5:42:32:f0:ae:7e:7c:
98:3b:d3:5f:ce:95:ed:e0:4a:bf:f7:33:b9:11:c2:
6d:81:e5:51:25:24:6a:76:a8:06:be:ff:2f:52:c1:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:35:92:3C:EA:19:EB:89:03:BA:74:BE:99:D2:59:3A:DC:42:FB:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jzWSPOoZ64kDunS-mdJZOtxC-2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
65:c1:50:f3:96:0e:37:e8:c9:51:5c:77:78:3e:98:d0:ca:ff:
60:22:6b:6c:1c:f0:60:bb:51:90:11:e5:c7:62:71:e1:e1:d2:
ee:cd:7a:66:0c:a8:73:6d:66:21:44:a9:3a:68:b3:67:e5:7f:
85:7f:c3:99:22:2b:5b:8c:9f:87:a5:ca:7d:22:ec:95:43:39:
72:c0:89:3c:60:82:76:35:50:30:8b:7f:2b:10:70:0b:87:32:
fb:ca:7d:f7:16:d3:46:6d:ef:0a:dd:f6:ad:1b:71:06:1d:8d:
2a:f4:1f:ce:01:4a:83:df:f0:10:35:21:17:61:d4:2c:46:ec:
75:2c:83:5e:55:83:6c:f7:df:85:b7:1f:d4:bc:ea:26:ab:95:
4b:a9:f2:22:17:1c:e4:3f:e5:44:81:e7:85:be:5e:80:3d:3a:
58:f1:0a:30:61:39:bf:38:05:f4:15:22:df:a9:7d:f0:02:4b:
06:0a:b4:28:a4:b6:77:b8:ed:e7:dd:ae:a9:87:5a:82:f6:e5:
31:65:cd:5d:d8:7e:fc:75:62:d2:3f:39:37:89:26:22:21:f3:
11:ad:24:a1:43:28:08:13:ba:6b:65:30:e0:bd:33:4a:a2:55:
a6:e6:55:7d:7a:7c:ea:1f:22:38:6b:77:d1:30:81:33:4c:88:
61:56:68:1b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZF/XgZVyjxdYm5zOXbQ1+NuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODIzMTMxMjMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjM1OTIzY2VhMTllYjg5MDNiYTc0YmU5OWQyNTkzYWRjNDJmYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09ML3Fdr8+ISNYDBjTlwdQJvz5Y5
NKfPpId17eqD62ccET81/BQipu/n0V5oi/s+sPM6UsK2zkqSWUm2ifwQ5tiWAcED
SX7zrEuGyUgukd0Eg92zkgv7OgStuw4qfvDNFAC/laT3WQ7TqCN/zw+u/a7+CfxX
hhVouYiZSPXOQUTPK/yTxssEUE4DDy+J/LMLyO7tsbbiLTkku/0cJtbvVYQRv9Wp
sPCtYCenwK6sHDCgtsjoRYct3zfYy4RbtH3vsPeEhp+rkEeqNv52/xD6nnqEx1an
xn1E+NVCMvCufnyYO9NfzpXt4Eq/9zO5EcJtgeVRJSRqdqgGvv8vUsE2EwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFI81kjzqGeuJA7p0vpnSWTrcQvthMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvanpXU1BPb1o2NGtEdW5TLW1kSlpPdHhDLTJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAZcFQ85YON+jJUVx3eD6Y0Mr/
YCJrbBzwYLtRkBHlx2Jx4eHS7s16Zgyoc21mIUSpOmizZ+V/hX/DmSIrW4yfh6XK
fSLslUM5csCJPGCCdjVQMIt/KxBwC4cy+8p99xbTRm3vCt32rRtxBh2NKvQfzgFK
g9/wEDUhF2HULEbsdSyDXlWDbPffhbcf1LzqJquVS6nyIhcc5D/lRIHnhb5egD06
WPEKMGE5vzgF9BUi36l98AJLBgq0KKS2d7jt592uqYdagvblMWXNXdh+/HVi0j85
N4kmIiHzEa0koUMoCBO6a2Uw4L0zSqJVpuZVfXp86h8iOGt30TCBM0yIYVZoGw==
-----END CERTIFICATE-----
Generated at Sun Dec 14 00:07:51 2025 by rpki-client