This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZ5Wacs0Tbejw_ZnlgXQb4h4KOA.roa
File: vZ5Wacs0Tbejw_ZnlgXQb4h4KOA.roa (raw, json)
Hash identifier: aMg+GEbZaC4BKbpicQdcTIWaAfNLU8yTzEc04+p5yr4=
Subject key identifier: BD:9E:56:69:CB:34:4D:B7:A3:C3:F6:67:96:05:D0:6F:88:78:28:E0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193D18126F0E44725DD272D5DA4596E79C9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZ5Wacs0Tbejw_ZnlgXQb4h4KOA.roa
Signing time: Mon 16 Dec 2024 22:05:22 +0000
ROA not before: Mon 16 Dec 2024 22:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:d180:441a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d1:81:26:f0:e4:47:25:dd:27:2d:5d:a4:59:6e:79:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 16 22:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd9e5669cb344db7a3c3f6679605d06f887828e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:ff:f9:9a:ab:bb:ea:f3:a6:7e:ce:2f:79:
d9:0d:e4:74:72:0b:3c:0c:80:b8:08:d2:81:72:8f:
66:3e:20:4d:73:25:55:98:ad:b1:14:a7:52:6c:b8:
2e:84:3a:29:02:50:e4:ac:db:e6:d8:9d:f9:29:53:
e8:12:48:1b:e4:bb:2c:74:c9:8a:56:23:3a:4f:5f:
56:20:0b:65:74:9d:d7:b2:1e:6b:f4:fa:53:69:fe:
3d:4f:5e:fd:de:dc:54:b7:0d:0f:10:54:56:49:29:
e8:a6:ef:29:8b:2b:a4:9f:80:b4:ee:97:ad:63:20:
ab:97:c2:99:47:7c:33:60:26:81:12:e6:c6:af:20:
82:9e:4c:81:1e:0f:80:b5:f8:ba:c0:f2:18:29:2c:
ad:32:a7:53:7e:31:af:db:c3:64:7d:9b:4b:2f:1b:
a5:9d:0d:0b:8f:18:56:98:8c:c5:2f:04:33:16:22:
52:d5:fd:20:be:4d:e8:1a:b4:47:46:49:3e:b8:5a:
96:3c:10:17:75:cf:6f:1e:35:ae:d5:37:d8:3e:df:
19:eb:6f:fb:cc:2f:61:3a:48:69:8b:55:5e:e7:f7:
65:18:f4:f4:13:c5:2f:6b:c0:2d:13:7f:e8:e7:a3:
28:00:28:35:3f:16:8b:0a:5b:27:cc:0e:83:5f:89:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:56:69:CB:34:4D:B7:A3:C3:F6:67:96:05:D0:6F:88:78:28:E0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZ5Wacs0Tbejw_ZnlgXQb4h4KOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:d180:441a/128
Signature Algorithm: sha256WithRSAEncryption
0b:00:2e:10:15:22:50:72:30:df:5d:57:17:d7:48:50:df:f4:
a6:1f:a6:f4:a2:c1:ca:5c:a4:35:63:16:b0:a0:8f:92:fc:85:
7a:ff:70:42:5b:1b:07:ee:6c:83:b6:6d:e0:81:3f:2e:ca:9c:
d6:1b:e3:dd:cf:e7:9a:7c:e1:0f:db:64:f6:2b:03:64:ae:3a:
ad:ee:cd:62:bb:15:56:ba:cd:39:e3:b8:d0:77:07:c1:af:da:
9e:7f:b3:08:59:02:a6:c1:5f:59:2b:3a:ef:02:b5:a5:5f:ab:
58:05:44:68:9d:e0:87:36:cb:d5:81:51:e0:86:58:55:1b:c7:
41:f5:2a:04:48:3b:d9:82:d0:1a:64:94:4d:10:52:af:9a:9d:
53:43:a0:8d:40:4d:2a:cf:cf:ae:70:2e:0d:aa:6c:f7:e4:67:
17:61:21:d0:cc:8d:be:5c:ea:aa:5e:e9:a7:59:22:47:cc:ba:
97:e9:75:ed:20:57:b0:f0:c6:a5:97:3a:7b:92:92:b0:80:18:
17:90:a2:a3:c4:fa:30:57:5b:14:6f:f0:97:22:fd:cf:52:09:
7e:5d:c1:f8:07:44:27:ce:80:8e:c5:9c:7f:d8:42:29:3d:59:
4d:ca:1e:84:d7:44:5a:f3:7b:0b:40:c5:0f:51:38:17:87:ae:
7e:04:ec:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Dec 15 04:55:28 2025 by rpki-client