This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/y4nA6buIPTK_i4tzlQk0pMMSNds.roa File: y4nA6buIPTK_i4tzlQk0pMMSNds.roa (raw, json) Hash identifier: fDID0Q4wpHn0IOZuQMO1mObFv8DjjJs6nprQbct0RcU= Subject key identifier: CB:89:C0:E9:BB:88:3D:32:BF:8B:8B:73:95:09:34:A4:C3:12:35:DB Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0195761320777823C5633FA6E0CD0505D51C Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/y4nA6buIPTK_i4tzlQk0pMMSNds.roa Signing time: Sat 08 Mar 2025 14:05:19 +0000 ROA not before: Sat 08 Mar 2025 14:05:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:7612:3824/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:76:13:20:77:78:23:c5:63:3f:a6:e0:cd:05:05:d5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 8 14:05:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cb89c0e9bb883d32bf8b8b73950934a4c31235db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:7b:6a:0f:44:fb:1a:ce:92:20:93:bc:3c: 23:0c:ce:c3:61:a2:5b:37:3c:fc:e2:71:54:cd:46: 37:45:58:0d:d2:c5:c0:ba:ab:ab:9c:40:69:70:04: 9f:6f:3f:62:e1:b7:31:af:06:ad:ce:f2:6c:66:f7: b9:b0:0d:0d:96:40:c1:a0:6d:32:21:da:d9:ed:49: f8:5b:fa:50:06:66:bc:e4:16:f0:7a:a4:0f:37:cf: 35:30:41:f1:48:6d:39:a0:1b:e6:c5:d6:41:e3:f1: 13:97:e7:63:d6:0b:f2:ab:ee:b1:3e:6c:29:fe:87: 97:fd:a9:46:22:ec:1a:8e:35:c8:9f:6e:b3:62:d6: a0:72:bc:af:bc:e7:54:dd:ec:cd:5a:bc:45:35:05: d9:4e:ae:2f:66:43:70:09:b4:b2:56:ad:ed:ab:28: fd:9b:60:86:50:81:e8:ca:2b:23:54:d3:45:e9:83: 8a:1f:7d:e3:09:ef:b1:f9:f3:bd:71:95:08:91:3e: c1:df:36:97:97:a8:35:b7:e1:29:52:e2:fe:e0:11: 77:a2:85:91:e9:c4:2f:d0:ac:df:19:eb:93:83:ed: f9:62:3f:62:eb:fa:cf:c1:d4:00:fa:0f:e3:95:7f: 9a:30:ed:7d:5e:b3:8b:39:7c:d0:d7:21:ea:b2:9b: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:89:C0:E9:BB:88:3D:32:BF:8B:8B:73:95:09:34:A4:C3:12:35:DB X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/y4nA6buIPTK_i4tzlQk0pMMSNds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:7612:3824/128 Signature Algorithm: sha256WithRSAEncryption 3b:ad:f7:cb:22:be:99:0b:d4:66:f9:24:97:9b:f9:2b:b5:b5: 6a:77:fc:cb:04:d0:00:0c:94:ae:39:dd:49:0e:e5:e2:35:a1: 0c:43:84:5d:8e:fa:ef:36:09:4e:1c:d9:e7:27:74:1d:15:90: 16:6a:d5:68:c6:c0:b2:2b:b1:18:db:be:24:47:b2:dc:43:2e: 56:6a:8b:59:66:3f:23:41:e5:03:87:43:4b:ab:b6:43:28:c3: af:0d:53:44:68:c6:be:70:ab:ce:8d:4c:31:50:8b:e7:09:e4: 60:e8:3c:2b:a2:4b:00:ab:7e:f2:31:2c:22:41:c1:ae:14:cf: 58:27:4f:f3:76:f2:ef:39:bf:c4:b8:ea:a3:9a:d9:54:45:e2: 04:c3:09:e3:47:d2:f9:a9:65:09:f8:87:3c:10:72:47:91:e1: 30:fd:0a:cd:e6:0c:84:ca:8e:16:b0:4c:35:6d:90:97:9e:ab: c5:24:c7:2c:d5:94:ed:22:77:87:23:03:a8:fc:79:44:98:a2: aa:01:93:df:cb:8b:a1:5c:0a:43:1f:17:81:16:09:9c:98:76: ba:4c:30:d4:92:4d:5c:b4:94:75:55:13:3f:9f:94:53:1d:cb: 08:ac:45:10:5c:e1:1e:84:7a:c4:b8:c5:8c:ab:f0:22:59:cd: a1:d6:6a:78 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZV2EyB3eCPFYz+m4M0FBdUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzA4MTQwNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjg5YzBlOWJiODgzZDMyYmY4YjhiNzM5NTA5MzRhNGMzMTIzNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqZ7ag9E+xrOkiCTvDwjDM7DYaJb Nzz84nFUzUY3RVgN0sXAuqurnEBpcASfbz9i4bcxrwatzvJsZve5sA0NlkDBoG0y IdrZ7Un4W/pQBma85BbweqQPN881MEHxSG05oBvmxdZB4/ETl+dj1gvyq+6xPmwp /oeX/alGIuwajjXIn26zYtagcryvvOdU3ezNWrxFNQXZTq4vZkNwCbSyVq3tqyj9 m2CGUIHoyisjVNNF6YOKH33jCe+x+fO9cZUIkT7B3zaXl6g1t+EpUuL+4BF3ooWR 6cQv0KzfGeuTg+35Yj9i6/rPwdQA+g/jlX+aMO19XrOLOXzQ1yHqspv/cwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFMuJwOm7iD0yv4uLc5UJNKTDEjXbMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEveTRuQTZidUlQVEtfaTR0emxRazBwTU1TTmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVdhI4JDANBgkqhkiG9w0BAQsFAAOCAQEAO633yyK+mQvUZvkkl5v5K7W1 anf8ywTQAAyUrjndSQ7l4jWhDEOEXY767zYJThzZ5yd0HRWQFmrVaMbAsiuxGNu+ JEey3EMuVmqLWWY/I0HlA4dDS6u2QyjDrw1TRGjGvnCrzo1MMVCL5wnkYOg8K6JL AKt+8jEsIkHBrhTPWCdP83by7zm/xLjqo5rZVEXiBMMJ40fS+allCfiHPBByR5Hh MP0KzeYMhMqOFrBMNW2Ql56rxSTHLNWU7SJ3hyMDqPx5RJiiqgGT38uLoVwKQx8X gRYJnJh2ukww1JJNXLSUdVUTP5+UUx3LCKxFEFzhHoR6xLjFjKvwIlnNodZqeA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:04:16 2025 by rpki-client