This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mlsaxdgBo5F2uj2esh2MpEQysEE.roa File: mlsaxdgBo5F2uj2esh2MpEQysEE.roa (raw, json) Hash identifier: aPlbyx0dXjWvkALRweS5I+FtfY6Kjl44y3g4mQZgiRU= Subject key identifier: 9A:5B:1A:C5:D8:01:A3:91:76:BA:3D:9E:B2:1D:8C:A4:44:32:B0:41 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191C99C5D16950A0C7087EFD1F4176A8062 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mlsaxdgBo5F2uj2esh2MpEQysEE.roa Signing time: Fri 06 Sep 2024 23:12:33 +0000 ROA not before: Fri 06 Sep 2024 23:12:33 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:c9:9c:5d:16:95:0a:0c:70:87:ef:d1:f4:17:6a:80:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Sep 6 23:12:33 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=9a5b1ac5d801a39176ba3d9eb21d8ca44432b041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:88:1b:81:96:61:f0:1c:86:1d:a9:40:43: d3:11:27:c9:11:ec:a4:71:59:2c:52:e5:4b:f2:cd: 74:80:06:57:f5:44:bf:45:4c:93:8a:c0:85:23:9e: 56:8e:2c:e6:1d:cf:ea:99:88:b9:12:87:2f:f0:9f: eb:83:de:62:02:33:71:2c:35:a9:d1:c7:a1:db:fa: fb:6c:27:63:ec:9d:b3:52:1e:bf:99:b8:a2:06:57: 24:e1:bb:a7:80:f5:2f:ed:1b:18:9f:8e:b2:bb:7a: 24:81:af:13:6c:57:4d:16:ee:c0:8b:4e:54:d2:3a: da:10:f8:f1:c6:bd:90:f7:95:80:d5:d9:ce:2c:57: 48:e7:af:28:c1:c1:e1:b2:5d:71:b4:35:9b:44:8a: dd:48:b9:91:58:62:5f:14:7f:6b:fd:45:dc:9d:f8: ff:6e:7f:89:b1:aa:8b:ce:3d:f4:5a:3b:59:ee:fd: b5:da:15:67:b8:bb:1f:8c:0a:a0:d6:f8:b6:e1:f7: c2:74:9f:1a:92:89:af:29:d0:48:28:72:89:ea:4d: 1b:8e:78:65:b7:98:fa:4b:d3:02:81:0b:72:4a:30: 3d:b5:90:68:b8:55:84:95:86:a1:fd:5e:59:f3:2a: 64:4a:54:8b:4a:6e:37:b0:54:dc:28:7f:a2:fa:89: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:1A:C5:D8:01:A3:91:76:BA:3D:9E:B2:1D:8C:A4:44:32:B0:41 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mlsaxdgBo5F2uj2esh2MpEQysEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 Signature Algorithm: sha256WithRSAEncryption 47:3d:1e:8b:da:5d:dc:00:56:42:3e:8c:6e:8a:9b:8f:65:40: a2:1c:d4:8a:6d:12:5c:b5:e3:78:29:2b:ca:78:a5:4e:36:ec: 0b:7d:28:d8:ee:11:63:b6:fa:4d:6f:bd:24:0d:61:2a:d6:ba: 6e:d2:e7:58:72:ef:13:23:b5:de:3c:26:c1:b5:97:f6:1f:74: ff:13:dd:12:6f:69:64:b3:e9:42:e3:9b:db:33:c2:09:aa:9d: cb:3a:0a:39:b5:44:86:ac:4a:28:81:4c:cd:8f:82:b0:04:0a: 6a:13:4a:40:63:aa:05:79:a4:19:a7:6e:52:eb:36:df:c2:08: fb:7a:ee:23:da:e6:99:8d:b6:8d:5a:18:20:86:e9:0b:60:9e: c9:7c:f6:58:5b:17:63:95:1e:e4:47:cc:14:37:d9:22:ae:d8: 13:aa:ed:8c:c1:88:83:32:24:ff:3b:ef:f6:e9:10:98:ab:81: e8:bb:d1:89:58:fe:97:2c:3c:f8:3f:89:5f:37:46:dc:7b:78: 8c:85:87:22:5a:18:fc:b1:e0:eb:51:80:2e:b6:ed:63:2a:a0: 13:ed:9f:28:30:37:54:45:f7:c0:4c:ca:55:e4:7a:8e:df:15: bf:a0:8d:85:39:90:0a:59:11:6d:a1:6d:b7:6e:be:2c:13:8a: 40:47:d6:64 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZHJnF0WlQoMcIfv0fQXaoBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwOTA2MjMxMjMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTViMWFjNWQ4MDFhMzkxNzZiYTNkOWViMjFkOGNhNDQ0MzJiMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8iIG4GWYfAchh2pQEPTESfJEeyk cVksUuVL8s10gAZX9US/RUyTisCFI55WjizmHc/qmYi5Eocv8J/rg95iAjNxLDWp 0ceh2/r7bCdj7J2zUh6/mbiiBlck4bungPUv7RsYn46yu3okga8TbFdNFu7Ai05U 0jraEPjxxr2Q95WA1dnOLFdI568owcHhsl1xtDWbRIrdSLmRWGJfFH9r/UXcnfj/ bn+JsaqLzj30WjtZ7v212hVnuLsfjAqg1vi24ffCdJ8akomvKdBIKHKJ6k0bjnhl t5j6S9MCgQtySjA9tZBouFWElYah/V5Z8ypkSlSLSm43sFTcKH+i+okpZQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFJpbGsXYAaORdro9nrIdjKREMrBBMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvbWxzYXhkZ0JvNUYydWoyZXNoMk1wRVF5c0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEARz0ei9pd3ABWQj6Mboqbj2VA ohzUim0SXLXjeCkrynilTjbsC30o2O4RY7b6TW+9JA1hKta6btLnWHLvEyO13jwm wbWX9h90/xPdEm9pZLPpQuOb2zPCCaqdyzoKObVEhqxKKIFMzY+CsAQKahNKQGOq BXmkGaduUus238II+3ruI9rmmY22jVoYIIbpC2CeyXz2WFsXY5Ue5EfMFDfZIq7Y E6rtjMGIgzIk/zvv9ukQmKuB6LvRiVj+lyw8+D+JXzdG3Ht4jIWHIloY/LHg61GA LrbtYyqgE+2fKDA3VEX3wEzKVeR6jt8Vv6CNhTmQClkRbaFtt26+LBOKQEfWZA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:50 2025 by rpki-client