This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3akAaa1DpLfVsdgFoAA35Wtd1o.roa File: u3akAaa1DpLfVsdgFoAA35Wtd1o.roa (raw, json) Hash identifier: j2DMI1WwImw9F+u4qFgCk8PVUDPrWfQtmlZNYpQrUBU= Subject key identifier: BB:76:A4:01:A6:B5:0E:92:DF:56:C7:60:16:80:00:DF:95:AD:77:5A Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01917208C3DF995DCA0B86F24564553D0D24 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3akAaa1DpLfVsdgFoAA35Wtd1o.roa Signing time: Tue 20 Aug 2024 23:04:22 +0000 ROA not before: Tue 20 Aug 2024 23:04:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 2001:67c:64:ffff:0:191:7208:a926/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:72:08:c3:df:99:5d:ca:0b:86:f2:45:64:55:3d:0d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Aug 20 23:04:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=bb76a401a6b50e92df56c760168000df95ad775a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:8b:8d:80:e9:00:1f:e2:19:7c:94:a1:3d: 4b:0c:f3:a9:7f:d4:b6:a8:63:32:81:69:db:e2:02: 1c:39:52:76:1e:51:80:f9:47:a0:0b:11:ac:b6:f2: 9a:9d:9b:31:16:c7:b2:01:3f:f2:45:fe:8d:2f:f9: 44:48:f1:31:4b:75:15:98:7e:f0:9f:9c:81:d1:b4: fe:05:b4:6b:17:1b:df:6a:f0:81:fc:54:b5:bb:09: c9:e2:87:6b:5a:dd:1d:5c:fc:25:f4:48:5e:4c:a7: 34:96:3a:60:a3:de:08:4d:92:d6:4c:b6:11:49:e0: 9c:51:5f:72:42:40:9b:0b:ed:7d:6a:6a:30:71:59: 5f:f5:6b:8f:b8:2e:7d:6c:96:23:9e:da:a3:96:6d: aa:27:d5:de:4e:07:0a:0c:9c:73:33:30:5d:4f:78: b3:1d:95:00:93:91:16:c1:a7:ef:b1:d3:99:d2:55: a4:b4:19:21:51:92:b2:24:f4:e8:fa:d5:2f:13:55: 94:64:34:dc:c5:a3:cf:4f:48:fc:e8:42:b7:1f:aa: a4:5b:9a:23:c3:27:be:e6:82:7c:66:77:bb:53:09: 00:18:8d:b8:7e:ae:57:76:84:0f:2b:44:fa:5f:7a: 74:e4:db:8d:15:59:06:48:77:18:e6:3f:59:51:8b: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:76:A4:01:A6:B5:0E:92:DF:56:C7:60:16:80:00:DF:95:AD:77:5A X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3akAaa1DpLfVsdgFoAA35Wtd1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 2001:67c:64:ffff:0:191:7208:a926/128 Signature Algorithm: sha256WithRSAEncryption 3f:6d:f6:93:de:6b:ce:82:bb:ce:f7:7b:af:69:90:b8:f8:5c: 5a:43:cb:e8:84:f0:1e:a6:6b:24:3f:e7:54:3a:26:bd:fd:3c: 50:5a:50:8e:b8:d1:77:e8:45:50:96:09:4f:42:c1:79:3b:7d: e3:12:e3:55:ef:f0:b6:ba:91:57:64:28:7a:ba:ce:8c:fe:6c: d5:50:35:1c:c6:19:93:e9:88:06:14:05:3d:bf:5c:89:ed:36: 1b:f0:e5:0d:df:24:22:0b:71:19:b7:18:33:49:46:28:ae:fa: f1:64:69:69:3e:58:f4:70:8d:30:6f:7b:96:e2:29:3d:30:8c: 2d:af:ee:94:e5:be:14:97:c4:e0:d5:a1:a3:d0:69:f9:a6:a5: fa:8b:ef:d6:04:b8:47:83:cd:f2:f3:89:78:b4:63:a2:03:0a: 0a:9b:0d:8b:e8:7e:ac:9f:d7:7a:10:f2:47:5a:88:93:99:de: 69:41:85:e8:6c:7b:9a:cc:26:26:1c:07:e4:b5:3f:17:3c:ea: 17:65:41:99:4d:7f:64:6b:75:10:0d:52:19:43:45:e2:3f:e7: 88:98:87:17:ac:c4:83:00:64:18:cc:4e:28:80:cf:09:2e:5e: 1d:07:0d:7c:e8:a7:f1:ac:7b:fd:f1:33:2e:b5:c2:44:f1:ed: 37:77:ad:fd -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZFyCMPfmV3KC4byRWRVPQ0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwODIwMjMwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjc2YTQwMWE2YjUwZTkyZGY1NmM3NjAxNjgwMDBkZjk1YWQ3NzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfmLjYDpAB/iGXyUoT1LDPOpf9S2 qGMygWnb4gIcOVJ2HlGA+UegCxGstvKanZsxFseyAT/yRf6NL/lESPExS3UVmH7w n5yB0bT+BbRrFxvfavCB/FS1uwnJ4odrWt0dXPwl9EheTKc0ljpgo94ITZLWTLYR SeCcUV9yQkCbC+19amowcVlf9WuPuC59bJYjntqjlm2qJ9XeTgcKDJxzMzBdT3iz HZUAk5EWwafvsdOZ0lWktBkhUZKyJPTo+tUvE1WUZDTcxaPPT0j86EK3H6qkW5oj wye+5oJ8Zne7UwkAGI24fq5XdoQPK0T6X3p05NuNFVkGSHcY5j9ZUYvoPwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFLt2pAGmtQ6S31bHYBaAAN+VrXdaMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvdTNha0FhYTFEcExmVnNkZ0ZvQUEzNVd0ZDFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGQ/fLzAgMRACABBnwAZP//AAABkXIIqSYwDQYJKoZIhvcNAQELBQADggEB AD9t9pPea86Cu873e69pkLj4XFpDy+iE8B6mayQ/51Q6Jr39PFBaUI640XfoRVCW CU9CwXk7feMS41Xv8La6kVdkKHq6zoz+bNVQNRzGGZPpiAYUBT2/XIntNhvw5Q3f JCILcRm3GDNJRiiu+vFkaWk+WPRwjTBve5biKT0wjC2v7pTlvhSXxODVoaPQafmm pfqL79YEuEeDzfLziXi0Y6IDCgqbDYvofqyf13oQ8kdaiJOZ3mlBhehse5rMJiYc B+S1Pxc86hdlQZlNf2RrdRANUhlDReI/54iYhxesxIMAZBjMTiiAzwkuXh0HDXzo p/Gse/3xMy61wkTx7Td3rf0= -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:44 2025 by rpki-client