This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x2l1QZdSYuQZbiIzpKfL0vH6l0A.roa
File: x2l1QZdSYuQZbiIzpKfL0vH6l0A.roa (raw, json)
Hash identifier: qCfSqDRrr9J+A9Gt+5Gcw5iRIKMcKfr1eg3j5KB+xPM=
Subject key identifier: C7:69:75:41:97:52:62:E4:19:6E:22:33:A4:A7:CB:D2:F1:FA:97:40
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019140EAF0AF2B91E67610B4A5E1430B46C0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x2l1QZdSYuQZbiIzpKfL0vH6l0A.roa
Signing time: Sun 11 Aug 2024 10:10:24 +0000
ROA not before: Sun 11 Aug 2024 10:10:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:40:ea:f0:af:2b:91:e6:76:10:b4:a5:e1:43:0b:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 11 10:10:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7697541975262e4196e2233a4a7cbd2f1fa9740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:1f:d9:27:c4:41:9d:00:e0:b4:fc:15:2a:
8f:99:9b:a3:39:28:d6:11:c3:8d:61:6c:37:91:c0:
d7:c1:af:a9:ee:44:86:68:f5:0c:f8:13:10:76:06:
36:d9:a4:fb:93:e4:28:89:91:80:5e:e6:dc:01:25:
b7:b6:dd:d2:72:cf:57:e4:aa:09:ec:d2:4b:36:ae:
f1:ef:6c:03:13:8a:ce:81:41:72:bc:4d:a7:c6:3b:
eb:5d:c3:3e:62:95:eb:ae:13:cd:83:da:bb:d6:c1:
f9:67:26:5d:e1:e4:e9:ce:d5:b6:c0:5a:3f:ca:67:
f2:cb:14:39:7c:04:70:db:57:e8:82:d2:b4:09:6c:
03:dd:82:5d:ea:89:36:ee:a8:f8:13:90:67:50:75:
ce:81:a4:44:bd:c2:a4:e2:c7:9e:ad:41:83:07:99:
97:f4:7a:94:a1:d5:9f:39:84:3f:85:11:08:a8:1c:
e5:eb:03:94:b5:60:5d:a9:d7:ad:7b:fb:cd:17:3d:
f5:42:ba:6e:e7:96:57:32:a7:98:f5:9b:e1:f9:1b:
a0:54:f0:2d:49:8a:b6:41:3c:51:2b:69:c0:5f:b9:
06:a3:cd:49:d6:34:00:c5:2a:1f:52:78:81:3a:c0:
be:f4:19:41:94:e2:64:27:0c:bb:8e:40:86:cc:ae:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:75:41:97:52:62:E4:19:6E:22:33:A4:A7:CB:D2:F1:FA:97:40
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x2l1QZdSYuQZbiIzpKfL0vH6l0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3a:b1:6c:fd:7c:9b:52:1a:d9:2d:c1:cc:e5:1f:58:09:43:bf:
83:20:a6:51:b1:60:7c:b9:04:d1:08:39:ed:53:25:41:df:5c:
49:58:d7:40:b7:31:5b:c5:c4:94:4b:72:c0:6b:4f:02:38:14:
32:e7:30:49:d2:81:1b:01:ba:66:5f:b1:16:67:76:c6:c5:64:
b8:7f:db:e4:f6:89:98:85:22:54:c2:c2:28:84:82:c0:c1:88:
89:4a:1f:60:4e:c0:35:c1:1f:2e:e0:01:dc:60:a8:91:f2:c7:
40:95:a0:d9:93:9a:c6:20:c6:09:58:be:f2:08:13:cb:c3:77:
b4:8c:cf:41:09:0f:67:53:ae:e3:8a:02:2d:92:ab:76:2d:39:
9f:d8:bb:b8:2f:40:f0:3c:f6:c8:a9:72:1b:46:8c:79:3d:76:
38:4f:eb:e4:f1:ec:a6:39:17:2e:ec:d3:90:e9:b8:4c:75:d9:
6c:d2:5e:c8:a6:f9:72:85:fb:e0:ca:fb:5e:5b:d5:7a:8a:7b:
de:aa:93:2f:c8:e3:ab:af:f5:e6:82:5f:35:7f:8a:d5:75:d8:
10:7b:ee:6b:4d:66:cc:04:5b:62:84:6b:72:ee:29:a2:a2:b4:
69:51:95:18:0d:eb:f4:e7:84:55:91:78:e1:19:1a:4f:a8:5e:
ac:18:0a:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 01:54:46 2025 by rpki-client