This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tmD-ZX7_aPduRxDalsWwc_ZoPCA.roa File: tmD-ZX7_aPduRxDalsWwc_ZoPCA.roa (raw, json) Hash identifier: rgNhxlZEJBtaG7MNb9hxzImN7LWCWo3DRKArHOh5+sQ= Subject key identifier: B6:60:FE:65:7E:FF:68:F7:6E:47:10:DA:96:C5:B0:73:F6:68:3C:20 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019447F35D2371B4C93F597967DAA596C23C Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tmD-ZX7_aPduRxDalsWwc_ZoPCA.roa Signing time: Wed 08 Jan 2025 22:05:18 +0000 ROA not before: Wed 08 Jan 2025 22:05:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 2001:67c:64:ffff:0:194:47f2:a5bb/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:47:f3:5d:23:71:b4:c9:3f:59:79:67:da:a5:96:c2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 8 22:05:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b660fe657eff68f76e4710da96c5b073f6683c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:18:5b:b3:5c:76:2f:7a:ee:d4:b1:fc:4c: 11:cb:d0:6b:d8:2e:6f:8e:2d:ca:54:d5:ee:a7:83: 38:4d:47:3d:e9:73:fa:74:bf:84:97:a3:bf:2f:33: 15:74:55:36:20:cc:48:52:6f:77:00:d4:ea:06:3f: ae:5b:02:6d:64:a2:f3:59:42:99:ee:b2:8d:e0:d6: 05:25:c1:79:49:c9:c8:3a:96:f4:bd:69:6f:5c:1a: ed:ab:0b:1e:ed:9f:a2:81:ce:2a:9b:3d:25:73:03: 37:b1:cd:09:ef:e2:93:f2:52:46:38:74:4d:64:a4: 80:56:fc:0d:cb:e1:dc:67:01:47:7a:d1:53:bd:11: 54:ef:0c:63:ad:ec:6b:24:4c:25:99:52:f3:5c:d0: a7:b9:48:61:c7:f6:db:ab:b6:da:46:00:fc:93:29: d1:99:ad:af:69:d8:be:22:87:5e:df:f8:ab:6f:5e: 30:78:3f:4c:95:9d:93:d1:15:68:b5:2b:87:22:21: 2e:10:07:1f:85:d1:74:2f:1b:b2:46:14:58:67:35: 2f:81:b3:cf:d3:98:c7:f8:ee:8e:70:f7:d2:ea:3d: df:06:76:0f:31:19:48:7a:99:98:c4:26:44:a0:9c: 7b:dd:ae:88:fe:f0:15:9c:c0:95:ae:8b:dc:d4:f7: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:FE:65:7E:FF:68:F7:6E:47:10:DA:96:C5:B0:73:F6:68:3C:20 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tmD-ZX7_aPduRxDalsWwc_ZoPCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 2001:67c:64:ffff:0:194:47f2:a5bb/128 Signature Algorithm: sha256WithRSAEncryption 78:5d:31:da:e0:78:61:84:7b:e6:08:55:b4:32:b1:31:08:24: 20:c3:d4:0e:48:85:83:61:8a:8c:7e:66:0b:3b:e2:96:c6:28: 96:73:48:b9:65:02:5f:2a:b6:16:cd:2e:16:1b:39:81:d4:1a: 9c:a6:bf:4f:39:d9:e1:93:55:5f:61:34:b3:36:b6:47:b9:21: 6e:5f:4a:81:d1:f7:e8:15:99:aa:1f:75:f3:0b:b3:2c:6b:ab: b7:5a:dd:ba:b8:0d:ad:07:db:0b:20:2f:85:7c:ef:ec:d2:64: 43:fc:eb:f0:55:a0:39:76:19:7a:e7:ca:97:2c:cf:40:c1:9b: 97:03:c2:d2:fc:74:66:4b:39:53:4f:56:25:34:a6:4d:46:79: 74:e6:43:de:f2:61:6b:6a:c8:f2:12:d2:c8:46:51:ae:65:10: b4:85:87:7c:ca:b3:5e:d0:44:c4:3f:b6:60:30:bd:fe:3b:79: 8a:6a:45:44:83:93:61:e3:82:86:b0:c7:72:6e:ac:d8:b7:1a: 5e:c2:a3:0d:0d:e2:a1:86:62:09:c9:e8:1d:4e:3a:c7:00:fe: a1:54:f0:00:84:fe:ea:b2:b3:83:8e:17:f4:ec:63:3c:7a:25: b8:c7:52:d0:6c:7c:7b:df:17:fb:70:15:b2:a3:b6:f7:43:f8: 63:fb:e7:f9 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZRH810jcbTJP1l5Z9qllsI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTA4MjIwNTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjYwZmU2NTdlZmY2OGY3NmU0NzEwZGE5NmM1YjA3M2Y2NjgzYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+4YW7Ncdi967tSx/EwRy9Br2C5v ji3KVNXup4M4TUc96XP6dL+El6O/LzMVdFU2IMxIUm93ANTqBj+uWwJtZKLzWUKZ 7rKN4NYFJcF5ScnIOpb0vWlvXBrtqwse7Z+igc4qmz0lcwM3sc0J7+KT8lJGOHRN ZKSAVvwNy+HcZwFHetFTvRFU7wxjrexrJEwlmVLzXNCnuUhhx/bbq7baRgD8kynR ma2vadi+Iode3/irb14weD9MlZ2T0RVotSuHIiEuEAcfhdF0LxuyRhRYZzUvgbPP 05jH+O6OcPfS6j3fBnYPMRlIepmYxCZEoJx73a6I/vAVnMCVrovc1PcnjwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFLZg/mV+/2j3bkcQ2pbFsHP2aDwgMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvdG1ELVpYN19hUGR1UnhEYWxzV3djX1pvUENBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGULA1mgAMRACABBnwAZP//AAABlEfypbswDQYJKoZIhvcNAQELBQADggEB AHhdMdrgeGGEe+YIVbQysTEIJCDD1A5IhYNhiox+Zgs74pbGKJZzSLllAl8qthbN LhYbOYHUGpymv0852eGTVV9hNLM2tke5IW5fSoHR9+gVmaofdfMLsyxrq7da3bq4 Da0H2wsgL4V87+zSZEP86/BVoDl2GXrnypcsz0DBm5cDwtL8dGZLOVNPViU0pk1G eXTmQ97yYWtqyPIS0shGUa5lELSFh3zKs17QRMQ/tmAwvf47eYpqRUSDk2Hjgoaw x3JurNi3Gl7Cow0N4qGGYgnJ6B1OOscA/qFU8ACE/uqys4OOF/TsYzx6JbjHUtBs fHvfF/twFbKjtvdD+GP75/k= -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:36 2025 by rpki-client