This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/o_pSy9wYPHW2EE9w3LaqSYHb66Y.roa File: o_pSy9wYPHW2EE9w3LaqSYHb66Y.roa (raw, json) Hash identifier: b2mErp2qr+N934TJH8HjnV+42bduZmWnlBAoCqMAfr4= Subject key identifier: A3:FA:52:CB:DC:18:3C:75:B6:10:4F:70:DC:B6:AA:49:81:DB:EB:A6 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01946FE59E995DEA4A92626AC0A4BD374ADC Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/o_pSy9wYPHW2EE9w3LaqSYHb66Y.roa Signing time: Thu 16 Jan 2025 16:15:06 +0000 ROA not before: Thu 16 Jan 2025 16:15:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:6f:e5:9e:99:5d:ea:4a:92:62:6a:c0:a4:bd:37:4a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 16 16:15:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3fa52cbdc183c75b6104f70dcb6aa4981dbeba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:bf:ca:df:8d:ea:12:7c:e1:ee:79:93:9e: 3a:6a:f3:0e:10:88:a7:9d:5c:5f:67:aa:59:f5:14: 26:b3:8b:59:ea:4c:3f:35:ee:63:de:f3:70:d3:ad: a6:49:73:d0:1c:71:47:d9:15:3d:f4:02:c1:2c:24: 93:9a:52:fa:ab:eb:b1:5d:7a:f1:80:fe:cb:a1:dc: 48:6d:b2:ee:d2:57:f3:a7:79:5c:1e:6a:30:96:2a: 9d:74:cd:00:aa:04:8d:55:17:dc:ab:3c:a5:9a:87: 6d:b9:44:75:43:f5:df:54:7b:b4:86:1a:52:a5:cb: 30:f8:44:82:1a:3b:44:e7:34:99:27:81:dc:4e:66: 38:d1:7f:76:ca:55:ed:98:32:88:2d:34:ec:5e:db: a1:0f:f9:41:01:f1:89:fe:d6:67:ef:34:c4:b0:6d: 18:41:0a:4b:7e:f9:3a:cf:60:80:a1:1b:40:26:d5: 24:7a:75:fb:b7:d4:6e:05:f7:25:dd:8c:3b:f9:ff: ac:7d:39:c3:8d:f6:a6:e1:b2:9b:10:7f:3e:68:42: 69:36:b9:4d:ce:c1:3e:f2:85:de:8f:ff:8f:c2:79: 9d:d1:35:af:88:ea:1f:77:cd:dc:25:61:e4:25:4d: a0:50:b0:88:21:fc:36:03:6f:6f:af:23:f6:24:05: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:52:CB:DC:18:3C:75:B6:10:4F:70:DC:B6:AA:49:81:DB:EB:A6 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/o_pSy9wYPHW2EE9w3LaqSYHb66Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 3e:ac:69:ea:6c:d0:c5:e0:67:4d:6a:9e:d0:64:3c:7c:2a:c7: ca:7d:4e:82:ac:77:f5:57:4a:71:c3:ae:4f:f8:68:b6:3e:d9: 7b:cf:de:29:37:1b:1d:64:a3:51:c2:f4:eb:b6:53:b9:b2:ff: e1:05:bd:90:ac:36:96:96:bc:c3:28:86:73:c8:0f:b2:c9:bb: 5b:1b:89:fa:81:d5:e3:94:75:c9:24:29:5e:28:14:8c:46:ee: c4:3f:25:11:d0:2a:4b:98:92:01:2d:e4:f7:cf:4d:20:13:72: 3e:72:89:6c:83:9a:76:b5:2f:e8:43:1e:7e:cf:83:6b:a0:22: ae:d5:a8:29:dd:a1:90:42:fb:71:e6:64:92:46:1b:47:3c:fd: 5e:9c:20:a9:21:a1:e7:77:86:5f:03:ed:97:35:09:a1:4a:a1: a5:5a:6f:44:da:6e:f1:f8:7c:53:6a:cc:da:14:4e:01:a9:fa: 94:9e:fd:c6:6e:ca:2f:68:38:19:e1:cb:c4:4f:cd:c2:02:de: 9b:fd:f4:91:2b:f4:3f:09:87:04:aa:b3:62:65:c3:c3:38:8c: e8:d8:31:9c:19:16:67:34:13:fd:97:8f:b0:70:d2:27:29:39: 92:99:ae:de:a3:6a:f7:77:b7:85:a5:9c:93:69:a0:cb:04:3c: f7:f3:cf:0d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZRv5Z6ZXepKkmJqwKS9N0rcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTE2MTYxNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2ZhNTJjYmRjMTgzYzc1YjYxMDRmNzBkY2I2YWE0OTgxZGJlYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq52/yt+N6hJ84e55k546avMOEIin nVxfZ6pZ9RQms4tZ6kw/Ne5j3vNw062mSXPQHHFH2RU99ALBLCSTmlL6q+uxXXrx gP7LodxIbbLu0lfzp3lcHmowliqddM0AqgSNVRfcqzylmodtuUR1Q/XfVHu0hhpS pcsw+ESCGjtE5zSZJ4HcTmY40X92ylXtmDKILTTsXtuhD/lBAfGJ/tZn7zTEsG0Y QQpLfvk6z2CAoRtAJtUkenX7t9RuBfcl3Yw7+f+sfTnDjfam4bKbEH8+aEJpNrlN zsE+8oXej/+Pwnmd0TWviOofd83cJWHkJU2gULCIIfw2A29vryP2JAXddQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFKP6UsvcGDx1thBPcNy2qkmB2+umMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvb19wU3k5d1lQSFcyRUU5dzNMYXFTWUhiNjZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAPqxp6mzQxeBnTWqe0GQ8fCrH yn1Ogqx39VdKccOuT/hotj7Ze8/eKTcbHWSjUcL067ZTubL/4QW9kKw2lpa8wyiG c8gPssm7WxuJ+oHV45R1ySQpXigUjEbuxD8lEdAqS5iSAS3k989NIBNyPnKJbIOa drUv6EMefs+Da6AirtWoKd2hkEL7ceZkkkYbRzz9XpwgqSGh53eGXwPtlzUJoUqh pVpvRNpu8fh8U2rM2hROAan6lJ79xm7KL2g4GeHLxE/NwgLem/30kSv0PwmHBKqz YmXDwziM6NgxnBkWZzQT/ZePsHDSJyk5kpmu3qNq93e3haWck2mgywQ89/PPDQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:48 2025 by rpki-client