This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lm0DFa46ixj1BTqdSNLT5hqtqhY.roa File: lm0DFa46ixj1BTqdSNLT5hqtqhY.roa (raw, json) Hash identifier: Af9sKSTwOm3WNdIcZ4KPFIPZD4CmP7D9iIGXZhPP6Ms= Subject key identifier: 96:6D:03:15:AE:3A:8B:18:F5:05:3A:9D:48:D2:D3:E6:1A:AD:AA:16 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01958742B140AF7D50B175882B6E3FF868C1 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lm0DFa46ixj1BTqdSNLT5hqtqhY.roa Signing time: Tue 11 Mar 2025 22:10:49 +0000 ROA not before: Tue 11 Mar 2025 22:10:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:87:42:b1:40:af:7d:50:b1:75:88:2b:6e:3f:f8:68:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 11 22:10:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=966d0315ae3a8b18f5053a9d48d2d3e61aadaa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:7a:bd:fd:bd:82:51:29:c7:91:7b:09:e5: 7b:ee:49:7c:5b:83:f7:f0:90:3a:41:5b:89:94:db: cc:a3:a3:86:7e:b0:6d:04:d1:ec:92:35:da:75:a2: 39:fb:a1:ef:aa:35:6e:41:3c:3e:55:b2:08:c2:12: d1:26:51:b2:7f:cd:3b:0d:c2:47:fa:fb:33:aa:35: 28:d2:3c:28:1d:26:92:47:1d:e2:9e:cf:d2:34:57: a6:a2:27:e9:cb:8d:77:ac:94:8d:89:78:08:38:fb: 9f:9c:e9:55:41:fc:8e:1e:0d:ca:b2:73:ad:4e:fa: d5:3f:4d:0d:d9:10:dc:9b:8a:10:61:41:3e:8d:3a: 39:79:27:d7:fd:a4:44:e4:18:34:07:4f:8e:7f:aa: 67:ec:b8:71:e4:87:7e:6b:ef:4d:52:cb:86:cf:49: 14:6b:0c:4e:ca:6f:42:b4:91:0b:8a:9c:13:0a:f8: 95:03:03:cb:62:cf:cb:0e:b3:ce:f1:1c:8b:22:79: dc:35:99:a5:f7:a6:76:64:fe:73:05:39:9f:c8:53: 15:a7:63:84:22:d7:e5:4b:41:01:e6:ad:61:a0:c5: fb:4f:bb:76:12:21:46:0b:3e:d7:6b:63:2b:5b:4b: 6d:4e:54:d2:4c:d1:73:3c:85:6a:5d:9f:1f:9d:48: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:03:15:AE:3A:8B:18:F5:05:3A:9D:48:D2:D3:E6:1A:AD:AA:16 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lm0DFa46ixj1BTqdSNLT5hqtqhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:86cf:630c/128 Signature Algorithm: sha256WithRSAEncryption 35:0c:91:67:0e:77:d4:13:ea:15:bd:f2:53:94:4b:23:11:29: ea:f0:e7:89:e0:c0:fe:ce:41:d1:90:c9:08:1c:e8:68:d4:53: f0:df:bf:66:55:16:7d:f6:9f:93:0a:f3:3f:a7:d0:5d:24:87: 26:9e:e2:19:1d:17:96:0c:68:9a:82:9b:ee:ff:91:7e:8e:4e: 3a:00:3d:fe:ee:b9:ed:de:6b:a3:2f:d5:21:4f:1f:cd:61:de: 85:8c:82:0c:a6:42:9d:b1:c7:62:8a:c2:5e:7a:ec:1a:7e:66: 71:e4:5e:55:17:38:8a:d6:ab:2b:ef:cb:07:00:23:bc:c1:bf: 1a:b7:8b:74:64:99:70:59:0e:7c:82:4d:39:9a:fb:d6:9c:55: 1a:08:36:62:db:c2:df:90:7b:69:d4:b7:cd:8d:2e:0c:6c:9a: 54:14:e7:94:de:01:d4:1c:1a:01:d2:fb:99:c1:f2:1a:5c:56: 43:45:57:ed:91:9b:8c:24:5a:a6:25:6c:f3:60:0a:ac:09:f2: 94:a0:43:6c:9a:35:34:c5:96:00:74:f5:c5:ce:b4:50:3c:e7: ff:b4:64:70:ba:38:91:62:94:e2:96:26:0c:e1:02:aa:c2:70: 3c:a8:24:01:bd:92:a9:4a:20:02:98:51:2d:e0:80:ac:bf:ab: 8f:d2:8d:c3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZWHQrFAr31QsXWIK24/+GjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzExMjIxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjZkMDMxNWFlM2E4YjE4ZjUwNTNhOWQ0OGQyZDNlNjFhYWRhYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGh6vf29glEpx5F7CeV77kl8W4P3 8JA6QVuJlNvMo6OGfrBtBNHskjXadaI5+6HvqjVuQTw+VbIIwhLRJlGyf807DcJH +vszqjUo0jwoHSaSRx3ins/SNFemoifpy413rJSNiXgIOPufnOlVQfyOHg3KsnOt TvrVP00N2RDcm4oQYUE+jTo5eSfX/aRE5Bg0B0+Of6pn7Lhx5Id+a+9NUsuGz0kU awxOym9CtJELipwTCviVAwPLYs/LDrPO8RyLInncNZml96Z2ZP5zBTmfyFMVp2OE ItflS0EB5q1hoMX7T7t2EiFGCz7Xa2MrW0ttTlTSTNFzPIVqXZ8fnUhdUwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFJZtAxWuOosY9QU6nUjS0+YaraoWMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvbG0wREZhNDZpeGoxQlRxZFNOTFQ1aHF0cWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEANQyRZw531BPqFb3yU5RLIxEp 6vDnieDA/s5B0ZDJCBzoaNRT8N+/ZlUWffafkwrzP6fQXSSHJp7iGR0XlgxomoKb 7v+Rfo5OOgA9/u657d5roy/VIU8fzWHehYyCDKZCnbHHYorCXnrsGn5mceReVRc4 itarK+/LBwAjvMG/GreLdGSZcFkOfIJNOZr71pxVGgg2YtvC35B7adS3zY0uDGya VBTnlN4B1BwaAdL7mcHyGlxWQ0VX7ZGbjCRapiVs82AKrAnylKBDbJo1NMWWAHT1 xc60UDzn/7RkcLo4kWKU4pYmDOECqsJwPKgkAb2SqUogAphRLeCArL+rj9KNww== -----END CERTIFICATE-----Generated at Mon Dec 15 13:34:05 2025 by rpki-client