This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/plCCiJv7EwuYY3WvPYFXgu2S4y4.roa File: plCCiJv7EwuYY3WvPYFXgu2S4y4.roa (raw, json) Hash identifier: 90RDlYth3mMRrS/YOLuJ1e0IS2bMcBg9b0jfa1Xa54o= Subject key identifier: A6:50:82:88:9B:FB:13:0B:98:63:75:AF:3D:81:57:82:ED:92:E3:2E Certificate issuer: /CN=a2451025c6339a611711effc2cf83e3d79f26ee8 Certificate serial: 01942368CE667860F7F372A86F3E3CF81595 Authority key identifier: A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/plCCiJv7EwuYY3WvPYFXgu2S4y4.roa Signing time: Wed 01 Jan 2025 19:47:38 +0000 ROA not before: Wed 01 Jan 2025 19:47:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48955 IP address blocks: 185.98.158.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:23:68:ce:66:78:60:f7:f3:72:a8:6f:3e:3c:f8:15:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2451025c6339a611711effc2cf83e3d79f26ee8 Validity Not Before: Jan 1 19:47:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a65082889bfb130b986375af3d815782ed92e32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:9e:cf:96:7e:88:d4:1e:7e:46:f4:c1:dc: 8a:14:e4:4d:55:54:66:30:fb:ef:68:c5:d6:37:88: f2:9a:ff:7d:2b:d0:5a:2e:e9:86:c7:47:ac:fa:4f: a3:00:6a:8b:8c:34:06:f1:cf:ac:69:0e:30:91:58: f0:0b:aa:3e:9a:54:db:09:d3:58:49:f9:77:b1:e7: 68:27:5e:82:b2:83:7b:6e:2d:dd:f3:cf:09:04:18: 58:c7:ca:ee:86:78:90:35:f2:18:75:c9:c6:5e:41: 5b:b1:cc:54:99:23:75:6d:ce:ab:78:2d:16:79:97: 5b:e5:86:c9:b5:60:15:a3:56:42:11:75:ab:32:5a: df:3c:86:1e:87:bd:ff:ad:5d:bd:6a:f6:02:0c:e4: 73:e2:71:b7:49:32:2e:0d:5c:95:29:42:7a:92:c9: 37:6f:a1:71:17:29:31:65:59:20:d5:13:2b:fa:0b: f1:22:ee:15:93:8f:5b:4c:4c:8a:e7:6a:24:c5:f3: 53:a5:ee:17:e0:55:2f:3d:2f:e2:54:21:6c:20:06: 34:5e:e9:98:99:d4:4a:cf:85:b7:fd:7e:a3:d5:9c: 88:f6:f2:08:83:56:d5:1b:47:a2:48:97:48:14:1a: 5e:22:03:3b:6f:5f:e5:f7:41:65:4e:30:ee:e0:29: ea:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:50:82:88:9B:FB:13:0B:98:63:75:AF:3D:81:57:82:ED:92:E3:2E X509v3 Authority Key Identifier: keyid:A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/plCCiJv7EwuYY3WvPYFXgu2S4y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.158.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ba:55:e7:9b:8e:40:dd:f6:6f:1e:1c:69:ad:d0:44:fa:d1: dc:6b:a9:37:3d:14:03:7c:f7:95:61:c4:e0:c1:b3:5d:8a:29: 35:23:d9:b2:8a:80:7a:4b:9b:b6:18:3f:ee:95:ac:fb:07:0d: cc:ca:33:15:59:12:a0:f0:7a:c4:b3:35:35:59:3a:57:e3:5e: 95:cb:3a:53:7b:03:1c:80:6e:f8:9b:02:be:6e:81:ca:d8:af: 69:3d:ad:27:5b:ca:9e:cd:9f:75:bd:4b:77:9e:9a:8a:ee:b8: f6:80:bb:21:f4:79:33:a4:98:2e:8c:ad:a9:87:70:7d:60:16: de:28:d3:0d:eb:4c:3d:a7:25:48:c6:d2:c9:6a:17:a0:d3:89: 78:1e:66:60:00:e2:5e:13:50:c3:6d:bd:d8:0f:82:b8:b2:80: c7:b0:fb:de:46:5c:13:01:14:a0:ce:6c:30:2b:14:ef:08:c4: ff:b8:f3:7b:c9:00:5b:d5:af:ab:58:f6:6d:8a:68:96:7b:70: 92:b3:be:2c:85:a6:b8:bc:f7:9a:73:88:43:45:5a:1d:c8:86: 39:c3:aa:83:72:fa:f8:94:d6:0a:c9:e3:bf:72:61:47:6e:fa: 3e:f0:c8:8a:ac:a5:9c:de:7d:24:8b:49:62:67:12:23:52:00: 69:9d:03:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZQjaM5meGD383Kobz48+BWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNDUxMDI1YzYzMzlhNjExNzExZWZmYzJjZjgzZTNkNzlm MjZlZTgwHhcNMjUwMTAxMTk0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjUwODI4ODliZmIxMzBiOTg2Mzc1YWYzZDgxNTc4MmVkOTJlMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygqez5Z+iNQefkb0wdyKFORNVVRm MPvvaMXWN4jymv99K9BaLumGx0es+k+jAGqLjDQG8c+saQ4wkVjwC6o+mlTbCdNY Sfl3sedoJ16CsoN7bi3d888JBBhYx8ruhniQNfIYdcnGXkFbscxUmSN1bc6reC0W eZdb5YbJtWAVo1ZCEXWrMlrfPIYeh73/rV29avYCDORz4nG3STIuDVyVKUJ6ksk3 b6FxFykxZVkg1RMr+gvxIu4Vk49bTEyK52okxfNTpe4X4FUvPS/iVCFsIAY0XumY mdRKz4W3/X6j1ZyI9vIIg1bVG0eiSJdIFBpeIgM7b1/l90FlTjDu4CnqTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZQgoib+xMLmGN1rz2BV4LtkuMuMB8GA1UdIwQY MBaAFKJFECXGM5phFxHv/Cz4Pj158m7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2tVUUpjWXptbUVYRWVfOExQZy1QWG55YnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZWVkMGYtMzc5My00MmZhLTk1MzYt NTEzODk1NDY4ZGQ3LzEvcGxDQ2lKdjdFd3VZWTNXdlBZRlhndTJTNHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZWVkMGYtMzc5My00MmZhLTk1MzYtNTEzODk1NDY4ZGQ3 LzEvb2tVUUpjWXptbUVYRWVfOExQZy1QWG55YnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWKeMA0G CSqGSIb3DQEBCwUAA4IBAQBBulXnm45A3fZvHhxprdBE+tHca6k3PRQDfPeVYcTg wbNdiik1I9myioB6S5u2GD/ulaz7Bw3MyjMVWRKg8HrEszU1WTpX416VyzpTewMc gG74mwK+boHK2K9pPa0nW8qezZ91vUt3npqK7rj2gLsh9HkzpJgujK2ph3B9YBbe KNMN60w9pyVIxtLJaheg04l4HmZgAOJeE1DDbb3YD4K4soDHsPveRlwTARSgzmww KxTvCMT/uPN7yQBb1a+rWPZtimiWe3CSs74shaa4vPeac4hDRVodyIY5w6qDcvr4 lNYKyeO/cmFHbvo+8MiKrKWc3n0ki0liZxIjUgBpnQM2 -----END CERTIFICATE-----Generated at Wed Dec 24 15:12:11 2025 by rpki-client