This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uh14hUq-CErLGlD4gsYcuIV1P0Q.roa File: uh14hUq-CErLGlD4gsYcuIV1P0Q.roa (raw, json) Hash identifier: 3RzMSO8itSCaAm1TiLS+/pix66eXacdo/3pkwvA9/U0= Subject key identifier: BA:1D:78:85:4A:BE:08:4A:CB:1A:50:F8:82:C6:1C:B8:85:75:3F:44 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01917320EA537D1883DB161A2B8E3317864B Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uh14hUq-CErLGlD4gsYcuIV1P0Q.roa Signing time: Wed 21 Aug 2024 04:10:22 +0000 ROA not before: Wed 21 Aug 2024 04:10:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:73:20:ea:53:7d:18:83:db:16:1a:2b:8e:33:17:86:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Aug 21 04:10:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=ba1d78854abe084acb1a50f882c61cb885753f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:63:14:b9:1d:13:28:39:c6:a5:30:d4:68: d6:c9:71:b8:48:c4:3d:79:de:70:72:96:fb:27:27: bc:3c:13:33:9c:ca:55:7b:b2:60:64:f8:05:40:ca: 8a:03:bf:65:f7:6a:11:42:e7:e8:76:22:c7:83:0c: 44:4f:f2:b0:10:86:d4:6b:dc:94:73:5d:4b:ed:33: 9f:45:b9:fb:5f:20:09:51:20:32:33:b4:57:86:86: 0f:5e:2d:fb:14:05:0c:86:bb:71:6c:fb:48:08:17: f4:f5:8f:a0:c5:0c:6d:f2:e0:a6:a1:bc:f8:c7:17: af:0b:3d:03:63:1a:a1:5b:30:82:54:bc:b7:3f:8f: c3:e6:7c:ec:d1:79:2b:83:50:20:37:50:7d:f1:94: 5e:3a:93:ab:bf:b9:f4:b9:01:e1:cc:8d:a5:cf:54: a6:d6:91:0d:4b:03:35:57:a8:8d:06:99:f6:3b:5f: 74:84:47:b9:be:e3:f4:f1:04:bf:08:9f:9c:fc:cc: 5f:52:59:62:0c:96:19:00:ae:87:35:21:34:b9:1b: 85:59:db:71:e4:af:1d:c4:b8:71:dc:80:5e:19:7c: 02:e3:c2:73:e2:92:65:0b:8d:a3:8d:42:4c:2b:2c: a1:ab:b3:ce:e3:04:18:aa:a7:d3:e8:6c:f8:df:a8: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:78:85:4A:BE:08:4A:CB:1A:50:F8:82:C6:1C:B8:85:75:3F:44 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uh14hUq-CErLGlD4gsYcuIV1P0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 Signature Algorithm: sha256WithRSAEncryption 83:a4:76:61:c7:a8:ff:79:c1:24:fc:f3:3d:f7:8d:9b:5a:a8: 1a:03:43:04:0a:9d:fb:ee:a8:4c:e9:89:a3:f8:0e:52:85:5b: 6c:93:0e:06:91:7b:21:29:d1:1e:a4:b0:34:c4:f4:d7:70:29: 6f:fe:90:54:3f:27:de:e4:9a:d9:37:b1:72:00:d3:00:fe:48: ba:ba:29:c7:d3:25:a1:f5:99:29:f1:ad:75:77:cb:36:2a:e4: 49:88:9f:63:fd:3b:12:cb:e7:b0:ed:0b:31:e2:8e:ae:b1:d3: ae:c2:6c:a3:98:05:a8:1f:05:a1:94:73:7e:0b:d5:7d:9e:b3: c3:2e:07:54:ae:6b:62:38:cb:c3:4b:99:a7:62:16:8e:d2:25: 93:df:e5:65:eb:2d:c8:8a:94:ed:97:bd:6b:7a:d0:ed:cd:f9: 76:bc:dd:cd:91:bd:74:7c:3f:56:e5:0c:5b:25:17:fa:8f:7e: 78:f3:c8:db:77:65:09:82:a7:d7:59:81:19:f3:83:e2:c6:b3: e6:e2:05:c8:3d:9e:db:35:ee:c4:2d:52:80:3c:de:f5:29:37: 36:74:79:80:34:90:01:1c:f5:a9:ff:3c:36:dd:eb:d4:38:57: c5:67:9a:d3:37:ce:34:3b:d0:93:31:28:e8:a4:ad:c7:7d:8b: 3d:da:5e:99 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZFzIOpTfRiD2xYaK44zF4ZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwODIxMDQxMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTFkNzg4NTRhYmUwODRhY2IxYTUwZjg4MmM2MWNiODg1NzUzZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJljFLkdEyg5xqUw1GjWyXG4SMQ9 ed5wcpb7Jye8PBMznMpVe7JgZPgFQMqKA79l92oRQufodiLHgwxET/KwEIbUa9yU c11L7TOfRbn7XyAJUSAyM7RXhoYPXi37FAUMhrtxbPtICBf09Y+gxQxt8uCmobz4 xxevCz0DYxqhWzCCVLy3P4/D5nzs0Xkrg1AgN1B98ZReOpOrv7n0uQHhzI2lz1Sm 1pENSwM1V6iNBpn2O190hEe5vuP08QS/CJ+c/MxfUlliDJYZAK6HNSE0uRuFWdtx 5K8dxLhx3IBeGXwC48Jz4pJlC42jjUJMKyyhq7PO4wQYqqfT6Gz436gbVwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFLodeIVKvghKyxpQ+ILGHLiFdT9EMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvdWgxNGhVcS1DRXJMR2xENGdzWWN1SVYxUDBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAg6R2Yceo/3nBJPzzPfeNm1qo GgNDBAqd++6oTOmJo/gOUoVbbJMOBpF7ISnRHqSwNMT013Apb/6QVD8n3uSa2Tex cgDTAP5Iuropx9MlofWZKfGtdXfLNirkSYifY/07EsvnsO0LMeKOrrHTrsJso5gF qB8FoZRzfgvVfZ6zwy4HVK5rYjjLw0uZp2IWjtIlk9/lZestyIqU7Ze9a3rQ7c35 drzdzZG9dHw/VuUMWyUX+o9+ePPI23dlCYKn11mBGfOD4saz5uIFyD2e2zXuxC1S gDze9Sk3NnR5gDSQARz1qf88Nt3r1DhXxWea0zfONDvQkzEo6KStx32LPdpemQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:47:45 2025 by rpki-client