This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x8SDWtaYypvqJxz1Ck1l2ggCVQI.roa File: x8SDWtaYypvqJxz1Ck1l2ggCVQI.roa (raw, json) Hash identifier: AbqH2iojtEPuvQrZHd27W2o9+b3F/CdbABG/CGXewUo= Subject key identifier: C7:C4:83:5A:D6:98:CA:9B:EA:27:1C:F5:0A:4D:65:DA:08:02:55:02 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01914123B4F92A64708A16FD188AD4BBEC95 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x8SDWtaYypvqJxz1Ck1l2ggCVQI.roa Signing time: Sun 11 Aug 2024 11:12:24 +0000 ROA not before: Sun 11 Aug 2024 11:12:24 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:41:23:b4:f9:2a:64:70:8a:16:fd:18:8a:d4:bb:ec:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Aug 11 11:12:24 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=c7c4835ad698ca9bea271cf50a4d65da08025502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:eb:81:7c:05:ba:98:26:99:25:d2:95:e9:4d: 4f:2e:84:51:7d:b8:72:a2:3b:52:8e:09:f3:b4:10: 19:1d:66:b2:32:8b:b5:32:db:f9:10:f8:6c:e3:54: b4:0b:7a:96:1e:ea:ff:db:40:75:88:32:8a:81:09: a4:b4:a9:16:af:23:fc:ed:fb:5f:80:9f:97:98:9b: 86:95:0e:f4:f4:5c:93:f6:58:29:09:15:e6:7c:bd: b0:2f:a7:dd:44:c6:5c:bf:04:a9:55:1d:eb:83:df: 82:c2:ba:41:6b:d0:eb:78:4f:da:06:06:97:e4:c6: 18:21:dd:be:28:87:00:4c:b6:ab:15:e3:e6:37:9d: bf:7e:24:67:8e:41:bc:a5:2f:35:e9:fa:cd:16:6b: 88:28:aa:16:28:17:f7:c1:a7:5b:9b:9e:80:50:1d: 4f:3b:07:b1:f0:ad:b1:1b:ac:a2:05:37:8e:00:8c: ad:47:2f:38:a7:28:73:02:c0:c6:f9:cd:67:a9:79: b3:d3:a7:31:0c:46:dc:8a:f5:15:49:e6:21:df:03: 63:de:2d:39:33:12:04:a2:74:1d:84:20:f3:f7:6d: d1:78:1f:0d:ab:99:c1:9a:e7:34:86:18:f6:08:a4: 74:f0:5a:b5:51:d6:4b:00:22:d1:a1:3f:56:7e:82: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C4:83:5A:D6:98:CA:9B:EA:27:1C:F5:0A:4D:65:DA:08:02:55:02 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x8SDWtaYypvqJxz1Ck1l2ggCVQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 Signature Algorithm: sha256WithRSAEncryption 7f:a6:3d:3f:32:e5:b6:28:d6:5c:98:83:a4:19:e1:5f:a1:64: 5f:6a:ec:4b:1b:12:92:73:08:c4:f9:a0:f1:e3:ab:a8:b3:f0: 59:7e:5e:9c:04:e4:b2:ec:2d:35:72:8f:7d:4e:ac:1c:99:2d: 42:7c:62:0e:00:40:e2:e6:d9:8e:e6:9b:f2:28:26:41:93:6e: 68:35:55:a2:28:1e:8c:60:99:e1:97:2e:ef:d7:7d:86:75:60: 7f:c3:47:fa:1b:53:fe:24:ab:5c:f8:57:50:16:44:2b:cd:a2: 98:8e:fd:dc:d8:66:95:d6:22:80:cf:46:ab:81:db:8b:7d:11: a3:25:32:13:fe:c2:16:a1:81:22:5c:c2:7b:17:51:7b:bc:13: fa:a7:2f:ba:eb:3c:6a:11:8e:d6:95:75:8d:53:f6:fe:af:65: 6d:18:d3:47:0c:ba:23:d6:d4:f1:2e:d2:9c:77:81:54:57:af: 33:41:8d:72:c0:eb:01:9c:fb:d5:fb:a7:41:bd:7e:56:6f:79: 55:13:f6:b9:56:fb:cd:49:28:d8:99:8e:f8:21:8e:5c:06:9e: ca:8f:c6:a7:4d:14:3a:f1:e9:5f:fe:50:d6:a0:0e:4d:79:1a: b7:dd:67:bb:88:54:b8:b2:1a:be:a0:0b:0b:38:de:ea:a1:4d: 12:53:e3:51 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZFBI7T5KmRwihb9GIrUu+yVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwODExMTExMjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2M0ODM1YWQ2OThjYTliZWEyNzFjZjUwYTRkNjVkYTA4MDI1NTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+uBfAW6mCaZJdKV6U1PLoRRfbhy ojtSjgnztBAZHWayMou1Mtv5EPhs41S0C3qWHur/20B1iDKKgQmktKkWryP87ftf gJ+XmJuGlQ709FyT9lgpCRXmfL2wL6fdRMZcvwSpVR3rg9+CwrpBa9DreE/aBgaX 5MYYId2+KIcATLarFePmN52/fiRnjkG8pS816frNFmuIKKoWKBf3wadbm56AUB1P Owex8K2xG6yiBTeOAIytRy84pyhzAsDG+c1nqXmz06cxDEbcivUVSeYh3wNj3i05 MxIEonQdhCDz923ReB8Nq5nBmuc0hhj2CKR08Fq1UdZLACLRoT9WfoKIUQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFMfEg1rWmMqb6icc9QpNZdoIAlUCMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEveDhTRFd0YVl5cHZxSnh6MUNrMWwyZ2dDVlFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAf6Y9PzLltijWXJiDpBnhX6Fk X2rsSxsSknMIxPmg8eOrqLPwWX5enATksuwtNXKPfU6sHJktQnxiDgBA4ubZjuab 8igmQZNuaDVVoigejGCZ4Zcu79d9hnVgf8NH+htT/iSrXPhXUBZEK82imI793Nhm ldYigM9Gq4Hbi30RoyUyE/7CFqGBIlzCexdRe7wT+qcvuus8ahGO1pV1jVP2/q9l bRjTRwy6I9bU8S7SnHeBVFevM0GNcsDrAZz71funQb1+Vm95VRP2uVb7zUko2JmO +CGOXAaeyo/Gp00UOvHpX/5Q1qAOTXkat91nu4hUuLIavqALCzje6qFNElPjUQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:13 2025 by rpki-client