This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oNQUBuMOUBhst50kU_fMvCTLyQQ.roa File: oNQUBuMOUBhst50kU_fMvCTLyQQ.roa (raw, json) Hash identifier: 1FkJ8Dd+q/UQ1cddqHpefSClrEMenJr4zlfny71CN1w= Subject key identifier: A0:D4:14:06:E3:0E:50:18:6C:B7:9D:24:53:F7:CC:BC:24:CB:C9:04 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01935D6AF1A872AE64B029403FD8CF4995B8 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oNQUBuMOUBhst50kU_fMvCTLyQQ.roa Signing time: Sun 24 Nov 2024 09:05:09 +0000 ROA not before: Sun 24 Nov 2024 09:05:09 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:193:5d6a:62ec/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:5d:6a:f1:a8:72:ae:64:b0:29:40:3f:d8:cf:49:95:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Nov 24 09:05:09 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=a0d41406e30e50186cb79d2453f7ccbc24cbc904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:d6:c8:97:ee:72:f6:63:8a:58:d0:6b:17: b1:72:70:87:c5:b4:01:3a:7b:ec:d1:3d:41:82:79: 41:36:3d:12:95:2f:7f:f4:8a:23:9d:2e:ec:89:56: 27:d4:11:bd:3d:e5:ec:b6:21:5a:bc:13:34:e3:b1: 11:d3:cf:78:0c:60:9c:a0:fd:85:29:05:d3:02:ba: 74:f8:98:57:19:94:f4:92:b5:8d:16:de:0f:6d:4f: a2:b2:74:59:0d:6d:fc:ea:1e:58:99:7f:48:44:b1: 14:21:0b:c7:d7:f9:0b:df:c9:c6:1f:0c:e4:8e:8c: ae:07:7b:16:45:f3:8a:f4:16:6a:f4:3a:f1:42:87: e0:97:2d:96:f9:59:2b:e9:cb:0a:27:bf:8e:80:a3: ed:b1:fa:9b:f4:ee:9a:1e:69:d7:b8:61:b7:3e:58: 76:cf:7b:e4:8b:8e:08:43:e5:d7:d7:3e:70:79:9a: 7d:08:35:f9:a7:a6:50:73:f0:8d:db:a0:a9:86:0a: 17:fc:57:3f:f4:89:ff:ac:2c:5a:c2:39:a0:79:53: d8:c8:bd:0a:d6:fa:3c:b1:cd:62:be:3a:e4:42:a8: 38:b7:85:c0:25:00:8b:b7:f7:9b:3e:49:b9:b4:a2: 06:f3:f0:3e:fe:34:db:c6:28:43:3b:81:68:b2:78: aa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D4:14:06:E3:0E:50:18:6C:B7:9D:24:53:F7:CC:BC:24:CB:C9:04 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oNQUBuMOUBhst50kU_fMvCTLyQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:193:5d6a:62ec/128 Signature Algorithm: sha256WithRSAEncryption 93:3d:be:cc:14:37:cb:1a:0b:40:2b:92:d7:9b:4b:9f:d0:bb: 89:5b:53:2a:2a:89:8f:3a:34:91:4f:ce:20:eb:f7:b4:6f:ec: 4f:17:93:b3:60:c3:d8:49:41:0b:9f:52:40:26:ee:10:46:8a: b3:73:34:99:4b:5c:df:8a:ab:b4:75:8e:5e:20:59:90:51:68: 93:9f:1f:30:75:f8:48:3e:22:41:0f:01:30:ec:e0:0e:05:99: 1c:8c:23:53:a1:12:81:8c:a6:b7:64:8c:4a:32:5b:7c:09:e8: 6b:96:be:7e:27:54:3b:bb:c3:34:32:e7:38:bb:99:c6:66:83: ef:7d:67:ed:95:95:89:c6:bf:70:15:6d:2d:72:29:3c:c0:9f: c0:93:6c:bf:77:08:b7:8d:79:63:f7:5c:bc:43:ca:88:31:7c: 47:44:a3:96:0e:36:be:3b:a3:13:bb:5d:2e:4d:74:b8:dd:cd: 11:b7:9c:8e:db:3a:70:dd:9a:a1:81:9c:56:c3:77:8d:69:74: 1d:cb:15:e5:f5:a8:61:be:32:19:c0:1e:c7:39:80:57:8e:14: d4:6f:28:bd:90:4a:dd:21:bc:55:e2:4a:00:53:ec:3e:5c:a9: 60:a1:fe:a0:8e:47:98:81:b9:7c:b6:62:15:42:f9:79:d4:8b: a0:5e:46:5a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZNdavGocq5ksClAP9jPSZW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQxMTI0MDkwNTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGQ0MTQwNmUzMGU1MDE4NmNiNzlkMjQ1M2Y3Y2NiYzI0Y2JjOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiTWyJfucvZjiljQaxexcnCHxbQB Onvs0T1BgnlBNj0SlS9/9IojnS7siVYn1BG9PeXstiFavBM047ER0894DGCcoP2F KQXTArp0+JhXGZT0krWNFt4PbU+isnRZDW386h5YmX9IRLEUIQvH1/kL38nGHwzk joyuB3sWRfOK9BZq9DrxQofgly2W+Vkr6csKJ7+OgKPtsfqb9O6aHmnXuGG3Plh2 z3vki44IQ+XX1z5weZp9CDX5p6ZQc/CN26CphgoX/Fc/9In/rCxawjmgeVPYyL0K 1vo8sc1ivjrkQqg4t4XAJQCLt/ebPkm5tKIG8/A+/jTbxihDO4FosniqAwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFKDUFAbjDlAYbLedJFP3zLwky8kEMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvb05RVUJ1TU9VQmhzdDUwa1VfZk12Q1RMeVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGTXWpi7DANBgkqhkiG9w0BAQsFAAOCAQEAkz2+zBQ3yxoLQCuS15tLn9C7 iVtTKiqJjzo0kU/OIOv3tG/sTxeTs2DD2ElBC59SQCbuEEaKs3M0mUtc34qrtHWO XiBZkFFok58fMHX4SD4iQQ8BMOzgDgWZHIwjU6ESgYymt2SMSjJbfAnoa5a+fidU O7vDNDLnOLuZxmaD731n7ZWVica/cBVtLXIpPMCfwJNsv3cIt415Y/dcvEPKiDF8 R0Sjlg42vjujE7tdLk10uN3NEbecjts6cN2aoYGcVsN3jWl0HcsV5fWoYb4yGcAe xzmAV44U1G8ovZBK3SG8VeJKAFPsPlypYKH+oI5HmIG5fLZiFUL5edSLoF5GWg== -----END CERTIFICATE-----Generated at Sun Dec 14 09:13:57 2025 by rpki-client