This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uq7kYbCknIdMZdLmSkbh5mbgjqk.roa
File: uq7kYbCknIdMZdLmSkbh5mbgjqk.roa (raw, json)
Hash identifier: HlYd+3Zej9Grj+g/8VtQEUuVKyGZyjzMUbpjb5T8wtY=
Subject key identifier: BA:AE:E4:61:B0:A4:9C:87:4C:65:D2:E6:4A:46:E1:E6:66:E0:8E:A9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194791CED94FF00ABE454A7233BC6C58130
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uq7kYbCknIdMZdLmSkbh5mbgjqk.roa
Signing time: Sat 18 Jan 2025 11:12:06 +0000
ROA not before: Sat 18 Jan 2025 11:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:1c:ed:94:ff:00:ab:e4:54:a7:23:3b:c6:c5:81:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 18 11:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baaee461b0a49c874c65d2e64a46e1e666e08ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:39:d0:4e:20:cf:0e:13:34:4f:b8:6a:5e:e5:
67:85:b4:2e:1a:fe:a6:cd:96:d4:8b:61:62:ed:7f:
61:0d:f0:05:f2:c9:95:7d:e7:87:b1:ef:70:52:96:
4d:94:85:cb:89:4e:d0:21:70:63:73:90:42:2b:6d:
7b:7b:8f:50:12:22:2d:78:35:6a:4d:28:70:08:61:
8a:0f:9c:93:56:30:65:92:52:17:65:22:ad:33:98:
b2:cc:20:a8:af:7c:3d:53:6f:13:c0:68:0f:e1:a0:
f6:3c:e6:63:a0:16:fe:c1:09:c7:54:d4:2d:56:21:
d0:fc:bd:ec:46:40:77:85:3c:95:62:3a:10:17:7d:
e5:19:f5:97:e5:b0:bf:4a:74:f6:4d:bc:a0:b0:35:
7b:ed:86:63:69:85:20:9e:1c:a3:a4:2e:28:6c:1c:
13:9e:5a:32:a5:6e:c7:b2:c7:9b:e8:b2:dc:f7:c6:
71:44:e2:93:d5:ae:6e:1c:2a:b2:ec:ec:41:2d:5e:
66:78:c9:50:94:54:a6:24:8a:af:92:61:bd:2e:41:
63:b1:c4:03:c0:bb:4c:8f:91:65:72:97:7d:b7:85:
10:f5:65:47:5d:f1:e9:c9:14:ff:c0:b5:41:8c:a4:
de:b3:ed:42:36:f2:f3:b4:28:ae:94:8c:90:9b:35:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:E4:61:B0:A4:9C:87:4C:65:D2:E6:4A:46:E1:E6:66:E0:8E:A9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uq7kYbCknIdMZdLmSkbh5mbgjqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
62:22:65:5f:a0:bf:94:f8:a7:aa:55:66:70:04:d5:d3:c0:45:
2c:83:cb:7a:74:f2:de:7a:60:91:1c:2d:74:09:e7:d7:51:61:
d2:f5:a7:bd:80:ca:5b:80:b8:87:ef:87:af:12:03:cd:eb:73:
6d:ac:2d:5f:9c:fc:61:f5:12:9a:5b:5c:19:8b:a1:02:ee:e8:
c3:73:c7:6b:00:b4:06:f7:53:c4:42:93:e9:97:b5:39:e5:57:
74:27:6f:1e:a3:77:9d:32:ae:ba:18:3c:b4:fd:32:d1:0a:b9:
62:17:07:d0:a2:0b:ff:80:46:2a:de:b9:18:dd:1d:2e:b2:a5:
fb:61:65:f4:72:50:c7:00:96:4e:f3:40:8a:ca:3d:e9:80:21:
12:0b:d0:c2:ef:9d:62:99:6e:ab:b8:81:97:2c:a2:2d:3e:fe:
af:c8:86:79:b3:9d:aa:3b:d5:a7:2a:70:33:d6:7b:ee:82:24:
b8:0f:0d:49:fe:1b:73:ec:95:a8:0e:30:6c:c0:33:0d:ce:20:
f9:a4:e4:16:74:17:db:d3:87:e4:ba:31:13:5b:ca:5c:a2:4d:
b3:d4:87:18:6e:95:12:05:91:87:8e:06:d7:91:93:ec:6c:60:
12:39:36:1d:d0:52:34:50:9e:f9:f3:8c:56:39:ca:e5:33:b4:
01:0a:ba:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 09:30:26 2025 by rpki-client