This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/2gymNpfgfHWOCzLwCPpiY9gsVmc.roa File: 2gymNpfgfHWOCzLwCPpiY9gsVmc.roa (raw, json) Hash identifier: fVqq4rKmIHpnTXgZRA5TQFNRox2y2jJvjY29QnbUpo0= Subject key identifier: DA:0C:A6:36:97:E0:7C:75:8E:0B:32:F0:08:FA:62:63:D8:2C:56:67 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A8E30DA7384C8D1690791489EC504BE46 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/2gymNpfgfHWOCzLwCPpiY9gsVmc.roa Signing time: Sun 16 Nov 2025 19:42:37 +0000 ROA not before: Sun 16 Nov 2025 19:42:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 45.149.60.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:30:da:73:84:c8:d1:69:07:91:48:9e:c5:04:be:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Nov 16 19:42:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da0ca63697e07c758e0b32f008fa6263d82c5667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:d5:db:f7:50:d0:83:9a:9b:b8:44:43:76: d0:3f:eb:32:3a:33:28:69:a2:dd:34:f3:03:13:06: de:c1:88:53:46:ae:f9:7e:c5:40:1f:86:04:65:57: a7:10:5b:9e:79:91:d2:dc:ff:3e:e1:f5:a3:8c:bc: aa:0b:5d:9a:b1:09:a8:fd:a5:9a:89:e0:43:07:db: 1b:68:46:6c:0f:b4:44:8f:8e:36:94:ff:f7:9c:ab: a2:f4:50:71:a5:e6:ad:fa:0f:87:a1:10:63:c3:21: 46:7e:93:c7:04:9f:74:2d:07:4b:25:3f:e5:8a:bd: a2:2a:da:94:06:06:d8:a8:d8:72:4d:00:fb:ea:2b: e9:e8:d6:59:e0:6f:af:e9:83:1a:48:a2:6e:97:f5: 2d:43:98:c6:78:23:5b:85:84:06:24:0a:41:65:a0: 32:01:90:49:93:a4:6e:93:12:c6:74:df:fc:ee:a1: 35:64:c3:b5:55:8c:5e:d3:3d:cb:79:3a:b5:92:3a: f4:c5:5a:8a:74:e2:37:57:89:0a:0e:78:21:74:8a: 0c:78:75:4a:fc:77:a3:a9:5b:49:dc:49:1f:f0:52: 7a:08:3e:35:12:2f:2a:a9:d6:e0:ba:e5:1b:84:a9: d0:41:1b:17:13:9c:a6:5c:e0:46:df:7b:15:95:a0: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0C:A6:36:97:E0:7C:75:8E:0B:32:F0:08:FA:62:63:D8:2C:56:67 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/2gymNpfgfHWOCzLwCPpiY9gsVmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.60.0/24 Signature Algorithm: sha256WithRSAEncryption 45:13:1e:a0:64:7e:47:ca:14:13:37:a3:79:e1:1a:79:9e:cc: c2:97:1e:46:43:d4:a3:96:df:d5:96:49:fb:a8:cc:9c:51:25: 26:8d:fb:97:42:98:3b:5d:2f:b8:dd:ef:49:d1:43:2d:f3:7f: b7:2b:21:90:f9:c4:5a:8c:87:0f:07:94:a4:94:dc:a8:b2:20: 20:7e:77:d0:1a:5d:61:84:73:96:c2:79:96:d5:6e:71:66:c0: 24:e4:04:1a:7c:c9:50:6a:16:63:8a:49:50:3e:33:b1:cd:31: 72:5c:50:8e:d5:52:d1:ce:83:6f:36:ef:6b:27:71:1d:94:f0: 40:f9:12:6c:1f:35:1a:00:d4:cf:41:90:f1:af:c9:6a:b9:9a: a9:30:11:c2:c1:da:ba:28:51:e9:b3:a4:a7:bc:13:31:d5:93: eb:7f:b5:ae:7d:05:4f:5e:22:d8:c0:f8:d2:e8:68:b6:89:60: de:48:3b:44:47:e2:2c:0c:32:16:38:b2:99:ce:c6:df:21:8f: 44:ab:c6:70:b4:c7:88:5e:d4:e7:6f:aa:34:72:39:e2:81:d8: 8b:27:f7:3d:f6:54:c7:17:5b:3c:70:f3:43:31:e0:b9:5b:2d: 5f:55:56:7b:d0:4d:a4:f9:dc:ce:04:f1:00:3c:cf:49:eb:8c: 5b:ff:6d:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqOMNpzhMjRaQeRSJ7FBL5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMTE2MTk0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTBjYTYzNjk3ZTA3Yzc1OGUwYjMyZjAwOGZhNjI2M2Q4MmM1NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUzV2/dQ0IOam7hEQ3bQP+syOjMo aaLdNPMDEwbewYhTRq75fsVAH4YEZVenEFueeZHS3P8+4fWjjLyqC12asQmo/aWa ieBDB9sbaEZsD7REj442lP/3nKui9FBxpeat+g+HoRBjwyFGfpPHBJ90LQdLJT/l ir2iKtqUBgbYqNhyTQD76ivp6NZZ4G+v6YMaSKJul/UtQ5jGeCNbhYQGJApBZaAy AZBJk6RukxLGdN/87qE1ZMO1VYxe0z3LeTq1kjr0xVqKdOI3V4kKDnghdIoMeHVK /HejqVtJ3Ekf8FJ6CD41Ei8qqdbguuUbhKnQQRsXE5ymXOBG33sVlaC1KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoMpjaX4Hx1jgsy8Aj6YmPYLFZnMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvMmd5bU5wZmdmSFdPQ3pMd0NQcGlZOWdzVm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU8MA0G CSqGSIb3DQEBCwUAA4IBAQBFEx6gZH5HyhQTN6N54Rp5nszClx5GQ9Sjlt/Vlkn7 qMycUSUmjfuXQpg7XS+43e9J0UMt83+3KyGQ+cRajIcPB5SklNyosiAgfnfQGl1h hHOWwnmW1W5xZsAk5AQafMlQahZjiklQPjOxzTFyXFCO1VLRzoNvNu9rJ3EdlPBA +RJsHzUaANTPQZDxr8lquZqpMBHCwdq6KFHps6SnvBMx1ZPrf7WufQVPXiLYwPjS 6Gi2iWDeSDtER+IsDDIWOLKZzsbfIY9Eq8ZwtMeIXtTnb6o0cjnigdiLJ/c99lTH F1s8cPNDMeC5Wy1fVVZ70E2k+dzOBPEAPM9J64xb/23H -----END CERTIFICATE-----Generated at Sat Nov 22 21:46:57 2025 by rpki-client