This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xxjbYDFVMfpGPkMnSSkxd44QB9o.roa File: xxjbYDFVMfpGPkMnSSkxd44QB9o.roa (raw, json) Hash identifier: I9512hczmZ1tsz5SSzt3BWZ65og/r84Erb31Z0Bdr9I= Subject key identifier: C7:18:DB:60:31:55:31:FA:46:3E:43:27:49:29:31:77:8E:10:07:DA Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191CBF11F39D71D483C0F3E8906D4FAEAB3 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xxjbYDFVMfpGPkMnSSkxd44QB9o.roa Signing time: Sat 07 Sep 2024 10:04:22 +0000 ROA not before: Sat 07 Sep 2024 10:04:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 2001:67c:64:ffff:0:191:cbf0:f741/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:cb:f1:1f:39:d7:1d:48:3c:0f:3e:89:06:d4:fa:ea:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Sep 7 10:04:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=c718db60315531fa463e4327492931778e1007da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:d8:fc:c9:95:1c:c7:0c:43:a7:dc:43:ff: c2:ab:b9:97:64:55:7f:40:2a:66:62:54:55:75:7f: dc:38:54:34:2e:82:5c:44:63:8c:5f:f6:28:42:5e: 18:b3:91:39:08:f1:69:3c:99:b3:a2:a3:d1:64:8e: ad:07:45:b5:d9:d0:5d:f4:d5:0a:df:ba:f1:91:75: fc:ed:78:b1:93:4e:11:75:ec:a8:07:a2:c8:d7:33: 73:85:e7:5a:88:bc:15:f1:1b:52:b9:db:ba:81:a2: ab:2c:6b:c1:5d:28:f9:a6:15:c6:43:5f:9b:1e:7a: f5:14:0a:a0:2e:4e:b6:11:b3:2d:ef:ba:01:80:94: 6f:79:26:9c:0f:e9:29:10:54:95:d1:8b:5f:98:eb: 62:5b:0f:db:3e:7a:dd:e7:78:3f:a5:49:bd:e5:70: 50:7f:a9:6e:81:ab:e6:f0:fc:be:23:fe:1d:3e:54: 7e:e9:2a:5f:1e:1c:54:24:0e:19:4c:35:7c:9c:3c: 76:09:d0:fd:b0:84:06:f1:d8:d6:67:73:fb:8e:9f: 79:00:73:26:22:ae:b7:82:2d:ea:0f:2a:38:b7:b0: 8e:03:99:2f:43:61:53:c5:cc:05:13:fe:24:4e:55: fa:9b:d7:d2:ea:6a:fc:f1:b6:ab:01:b4:d3:ec:be: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:18:DB:60:31:55:31:FA:46:3E:43:27:49:29:31:77:8E:10:07:DA X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xxjbYDFVMfpGPkMnSSkxd44QB9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 2001:67c:64:ffff:0:191:cbf0:f741/128 Signature Algorithm: sha256WithRSAEncryption 47:23:9e:0c:1f:02:61:99:ff:6e:de:75:97:10:fb:ec:70:4b: 9d:04:c5:e9:2c:5c:00:cf:d3:b1:c2:ac:c3:f0:ac:bc:43:21: ea:86:e7:7f:a5:0e:40:4e:f3:ac:90:49:96:7d:3f:5c:0e:0a: 11:66:b2:5a:38:60:07:39:4b:89:14:c6:48:7c:d6:85:dd:58: 5e:77:f6:17:df:74:e4:d4:eb:fc:04:9d:66:79:2d:5a:dc:7c: 07:8d:e6:d5:79:ae:d6:b9:cb:63:77:bf:8e:1e:84:b9:72:32: 28:dc:ba:41:98:44:a7:03:ba:b2:e0:4a:52:0f:54:7a:25:e8: f7:08:b6:0d:e4:ee:98:73:89:ae:37:e0:7e:e5:41:25:63:45: 6b:64:8f:a4:79:50:62:16:87:d1:44:ff:9d:63:37:c3:69:3a: d1:53:67:1c:15:4f:bb:bd:92:07:1f:6f:cf:42:fa:2c:a0:1a: 08:18:89:03:ea:df:19:88:e0:cf:18:19:e2:62:23:b2:96:e6: 0e:71:5d:ad:7d:02:50:2c:c5:2e:71:e0:03:66:6f:2c:f5:6d: 0f:4b:ba:c0:5c:ce:6f:6a:62:90:c3:6d:7f:b7:32:55:16:a4: 93:33:02:5f:3c:e9:67:99:3e:a1:94:dc:b1:fc:c2:3c:d0:b9: 8d:1d:78:5a -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZHL8R851x1IPA8+iQbU+uqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwOTA3MTAwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzE4ZGI2MDMxNTUzMWZhNDYzZTQzMjc0OTI5MzE3NzhlMTAwN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCrY/MmVHMcMQ6fcQ//Cq7mXZFV/ QCpmYlRVdX/cOFQ0LoJcRGOMX/YoQl4Ys5E5CPFpPJmzoqPRZI6tB0W12dBd9NUK 37rxkXX87Xixk04RdeyoB6LI1zNzhedaiLwV8RtSudu6gaKrLGvBXSj5phXGQ1+b Hnr1FAqgLk62EbMt77oBgJRveSacD+kpEFSV0YtfmOtiWw/bPnrd53g/pUm95XBQ f6lugavm8Py+I/4dPlR+6SpfHhxUJA4ZTDV8nDx2CdD9sIQG8djWZ3P7jp95AHMm Iq63gi3qDyo4t7COA5kvQ2FTxcwFE/4kTlX6m9fS6mr88barAbTT7L4qDQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFMcY22AxVTH6Rj5DJ0kpMXeOEAfaMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEveHhqYllERlZNZnBHUGtNblNTa3hkNDRRQjlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGQ/fLzAgMRACABBnwAZP//AAABkcvw90EwDQYJKoZIhvcNAQELBQADggEB AEcjngwfAmGZ/27edZcQ++xwS50ExeksXADP07HCrMPwrLxDIeqG53+lDkBO86yQ SZZ9P1wOChFmslo4YAc5S4kUxkh81oXdWF539hffdOTU6/wEnWZ5LVrcfAeN5tV5 rta5y2N3v44ehLlyMijcukGYRKcDurLgSlIPVHol6PcItg3k7phzia434H7lQSVj RWtkj6R5UGIWh9FE/51jN8NpOtFTZxwVT7u9kgcfb89C+iygGggYiQPq3xmI4M8Y GeJiI7KW5g5xXa19AlAsxS5x4ANmbyz1bQ9LusBczm9qYpDDbX+3MlUWpJMzAl88 6WeZPqGU3LH8wjzQuY0deFo= -----END CERTIFICATE-----Generated at Sun Dec 14 03:35:04 2025 by rpki-client