This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oYx0SD905F0v7q65eXDnZmmKAJU.roa File: oYx0SD905F0v7q65eXDnZmmKAJU.roa (raw, json) Hash identifier: o2bOiAmXcO3VIUYpn51qTGviKEkUAfJUpIAQnZEokkU= Subject key identifier: A1:8C:74:48:3F:74:E4:5D:2F:EE:AE:B9:79:70:E7:66:69:8A:00:95 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191BEDA4B21B55CEBADA70509D9226F4F1C Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oYx0SD905F0v7q65eXDnZmmKAJU.roa Signing time: Wed 04 Sep 2024 21:04:22 +0000 ROA not before: Wed 04 Sep 2024 21:04:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 2001:67c:64:ffff:0:191:beda:36ad/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:be:da:4b:21:b5:5c:eb:ad:a7:05:09:d9:22:6f:4f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Sep 4 21:04:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=a18c74483f74e45d2feeaeb97970e766698a0095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:ae:22:43:19:ab:1d:ee:9e:4c:94:10:c8: bc:e4:c5:90:d7:77:ac:1f:1d:7a:d8:48:55:0e:68: 4b:90:87:c7:1e:31:99:d0:a7:4f:f3:68:0e:90:31: b4:be:bc:48:d8:af:6f:62:d5:fb:bc:bc:84:de:f9: 4a:01:36:38:35:0e:9c:7e:91:22:4c:fb:85:53:6b: 9a:6b:65:9f:2e:25:a7:82:d6:60:75:50:3b:03:cb: b8:19:9b:82:e3:9d:65:27:65:3d:37:0a:7f:90:87: d9:29:91:5c:cb:65:3a:3e:1f:4e:f3:9e:e8:39:49: 09:2e:77:ff:6d:02:31:69:2d:d1:aa:60:f3:b0:33: f9:f1:00:42:6a:e5:15:b1:67:67:15:f2:cd:7a:68: a7:bc:b2:94:b8:81:19:28:52:bb:ac:1c:23:47:81: 96:b9:d4:34:1a:7c:4c:d5:2b:a9:41:53:a3:65:3b: a3:23:e7:07:2c:b4:cb:4b:c1:6d:a5:59:7d:dc:d6: 5b:53:ed:ea:02:0f:03:be:e2:49:56:8d:22:1e:7d: 44:05:e9:f1:b8:c3:a7:2f:0b:ae:13:34:55:6f:0b: 7c:32:f1:58:72:09:21:03:04:a3:fd:d3:19:22:72: 9e:b8:1c:b3:4e:4e:39:2c:0e:07:fc:22:a2:f6:91: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8C:74:48:3F:74:E4:5D:2F:EE:AE:B9:79:70:E7:66:69:8A:00:95 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oYx0SD905F0v7q65eXDnZmmKAJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 2001:67c:64:ffff:0:191:beda:36ad/128 Signature Algorithm: sha256WithRSAEncryption 85:eb:09:ca:3e:92:2e:1e:cc:16:31:78:7d:a5:93:e1:97:17: 45:e9:4e:fa:d7:ed:b6:50:9b:7a:3e:af:58:8f:0b:f1:86:45: 3c:1c:fd:b6:6f:c7:b1:63:c4:59:f8:49:54:27:c3:0b:40:8e: 2b:28:b7:01:6b:18:f6:41:53:52:2c:e3:2d:32:76:41:30:36: af:b0:a4:ce:b8:85:8a:5b:0d:d9:03:1d:29:dd:ae:dd:a5:d4: b7:3f:ab:37:d2:0d:cc:c3:06:45:53:f3:5a:11:97:37:52:fa: 5f:05:48:5e:9c:c2:ba:de:05:ee:5e:d7:b0:d6:d0:fb:ab:06: 6c:50:99:54:d2:b3:19:eb:77:38:b9:a4:b3:1b:70:aa:84:18: 82:28:a3:11:2f:1b:5a:a6:2a:b2:b7:2a:02:7b:7d:5f:4f:ea: af:3c:b9:36:1f:8c:ba:c0:57:37:b6:3c:a3:51:48:18:1c:58: 63:ef:56:4b:2a:20:01:0d:7f:dc:01:47:ce:b3:ff:f4:3f:64: 07:e6:1b:d7:b2:7a:dc:c7:58:d1:4b:38:9b:10:5e:a9:80:19: 6b:9e:04:4f:3f:f7:55:89:91:92:b2:b9:0e:7f:69:32:e1:9a: a1:9d:2d:3b:e4:8b:fd:58:67:00:71:71:c5:a8:0e:19:5e:49: ce:3d:b7:44 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZG+2kshtVzrracFCdkib08cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwOTA0MjEwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMThjNzQ0ODNmNzRlNDVkMmZlZWFlYjk3OTcwZTc2NjY5OGEwMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuKuIkMZqx3unkyUEMi85MWQ13es Hx162EhVDmhLkIfHHjGZ0KdP82gOkDG0vrxI2K9vYtX7vLyE3vlKATY4NQ6cfpEi TPuFU2uaa2WfLiWngtZgdVA7A8u4GZuC451lJ2U9Nwp/kIfZKZFcy2U6Ph9O857o OUkJLnf/bQIxaS3RqmDzsDP58QBCauUVsWdnFfLNeminvLKUuIEZKFK7rBwjR4GW udQ0GnxM1SupQVOjZTujI+cHLLTLS8FtpVl93NZbU+3qAg8DvuJJVo0iHn1EBenx uMOnLwuuEzRVbwt8MvFYcgkhAwSj/dMZInKeuByzTk45LA4H/CKi9pGTcQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKGMdEg/dORdL+6uuXlw52ZpigCVMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvb1l4MFNEOTA1RjB2N3E2NWVYRG5abW1LQUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGQ/fLzAgMRACABBnwAZP//AAABkb7aNq0wDQYJKoZIhvcNAQELBQADggEB AIXrCco+ki4ezBYxeH2lk+GXF0XpTvrX7bZQm3o+r1iPC/GGRTwc/bZvx7FjxFn4 SVQnwwtAjisotwFrGPZBU1Is4y0ydkEwNq+wpM64hYpbDdkDHSndrt2l1Lc/qzfS DczDBkVT81oRlzdS+l8FSF6cwrreBe5e17DW0PurBmxQmVTSsxnrdzi5pLMbcKqE GIIooxEvG1qmKrK3KgJ7fV9P6q88uTYfjLrAVze2PKNRSBgcWGPvVksqIAENf9wB R86z//Q/ZAfmG9eyetzHWNFLOJsQXqmAGWueBE8/91WJkZKyuQ5/aTLhmqGdLTvk i/1YZwBxccWoDhleSc49t0Q= -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:51 2025 by rpki-client