This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MuS9TlfVvWQNtL0wUppy35G0ndM.roa File: MuS9TlfVvWQNtL0wUppy35G0ndM.roa (raw, json) Hash identifier: Zzz1O28Qp569XEPOgnSv6QHfH/LckdMaddfBV5Mxrj0= Subject key identifier: 32:E4:BD:4E:57:D5:BD:64:0D:B4:BD:30:52:9A:72:DF:91:B4:9D:D3 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A8E2F05FD193134ED805A77C265C63103 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MuS9TlfVvWQNtL0wUppy35G0ndM.roa Signing time: Sun 16 Nov 2025 19:40:37 +0000 ROA not before: Sun 16 Nov 2025 19:40:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397630 IP address blocks: 194.50.1.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:2f:05:fd:19:31:34:ed:80:5a:77:c2:65:c6:31:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Nov 16 19:40:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=32e4bd4e57d5bd640db4bd30529a72df91b49dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f9:6e:d3:9c:1f:fd:92:69:42:0e:11:b7:29: 2b:6b:bb:95:08:0c:71:e1:12:35:a2:65:3f:31:a3: 44:89:d1:46:b0:11:a4:60:14:1d:6f:5d:d6:09:01: 33:a4:96:c3:af:45:73:38:06:4a:dc:26:5f:ef:a6: 72:4f:50:35:e0:bf:5d:61:c7:a1:e3:24:ff:c8:7c: c1:4b:a4:71:b6:61:cb:14:89:ec:6b:88:e3:c5:68: 30:47:19:85:f4:44:43:1e:9a:7d:16:a6:72:b9:b7: 5d:a3:34:74:79:29:0b:a3:0f:c8:6b:0a:3f:ef:03: 0f:4f:c6:ba:40:f1:a2:bd:c7:0b:df:6c:f7:12:b7: bf:d8:1f:c8:03:a5:e2:2c:74:a0:09:a5:38:fe:8f: 82:f5:c0:09:0b:cb:c0:d5:cb:9b:9f:c7:0f:b0:0f: fb:9a:e0:85:6a:e4:76:15:7c:77:11:1f:07:ab:53: 61:18:5d:5a:c8:5f:b3:68:92:b8:33:71:0f:ad:02: 01:87:c3:1e:cd:4b:43:81:e5:c0:32:bb:52:ad:22: 37:b4:b7:79:f1:3a:f7:d4:2d:e9:90:db:dd:72:8b: c3:95:ce:da:f5:d5:fe:39:8f:e7:07:3b:f5:62:5d: 08:7b:e2:c0:bb:9a:82:22:e9:1f:68:19:28:9f:83: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E4:BD:4E:57:D5:BD:64:0D:B4:BD:30:52:9A:72:DF:91:B4:9D:D3 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MuS9TlfVvWQNtL0wUppy35G0ndM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.1.0/24 Signature Algorithm: sha256WithRSAEncryption 13:f6:11:20:9d:67:f1:77:76:ad:61:0a:a7:35:bc:43:92:57: f9:ac:10:fa:29:48:58:e7:a9:fe:72:a7:57:c8:1e:0f:10:6c: 9f:08:51:30:fe:52:27:7b:9e:f3:2b:a1:28:ae:82:9e:59:9e: c1:77:53:9d:4d:47:c7:d2:00:b5:c0:42:f5:3a:f3:14:d6:ee: ab:a2:a1:02:70:af:8f:97:64:e2:7a:4f:92:85:b5:68:24:7c: 3b:ef:b3:73:31:e9:53:6a:59:66:56:e1:d1:18:31:76:db:47: b6:37:d3:ee:57:10:f9:96:34:c4:77:f2:03:b7:6d:a0:3d:48: 29:1c:35:aa:89:b8:9a:b3:46:1d:00:4d:10:4f:3b:fe:ab:1d: 9c:7f:6b:12:4e:fa:81:d9:f3:72:46:73:c7:8b:81:7a:fa:cd: 27:5b:5e:a6:8b:cb:fd:e8:bb:61:59:3f:df:d0:c2:b8:1e:76: 8d:9e:3f:cf:40:16:8f:87:d5:fb:bf:e3:23:2d:0d:54:d7:9a: 68:87:ee:7c:2a:96:f3:28:2d:58:00:ab:7e:ec:57:01:cf:2c: 52:47:c9:ab:fe:c5:f9:41:be:18:c1:39:d8:24:83:a2:8b:10: 9f:4d:44:78:95:3d:2d:a0:46:4c:08:18:bd:89:52:f0:4d:d2: 2e:01:96:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqOLwX9GTE07YBad8JlxjEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMTE2MTk0MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmU0YmQ0ZTU3ZDViZDY0MGRiNGJkMzA1MjlhNzJkZjkxYjQ5ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vlu05wf/ZJpQg4Rtykra7uVCAxx 4RI1omU/MaNEidFGsBGkYBQdb13WCQEzpJbDr0VzOAZK3CZf76ZyT1A14L9dYceh 4yT/yHzBS6RxtmHLFInsa4jjxWgwRxmF9ERDHpp9FqZyubddozR0eSkLow/Iawo/ 7wMPT8a6QPGivccL32z3Ere/2B/IA6XiLHSgCaU4/o+C9cAJC8vA1cubn8cPsA/7 muCFauR2FXx3ER8Hq1NhGF1ayF+zaJK4M3EPrQIBh8MezUtDgeXAMrtSrSI3tLd5 8Tr31C3pkNvdcovDlc7a9dX+OY/nBzv1Yl0Ie+LAu5qCIukfaBkon4PJDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDLkvU5X1b1kDbS9MFKact+RtJ3TMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvTXVTOVRsZlZ2V1FOdEwwd1VwcHkzNUcwbmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIBMA0G CSqGSIb3DQEBCwUAA4IBAQAT9hEgnWfxd3atYQqnNbxDklf5rBD6KUhY56n+cqdX yB4PEGyfCFEw/lIne57zK6EoroKeWZ7Bd1OdTUfH0gC1wEL1OvMU1u6roqECcK+P l2Tiek+ShbVoJHw777NzMelTallmVuHRGDF220e2N9PuVxD5ljTEd/IDt22gPUgp HDWqibias0YdAE0QTzv+qx2cf2sSTvqB2fNyRnPHi4F6+s0nW16mi8v96LthWT/f 0MK4HnaNnj/PQBaPh9X7v+MjLQ1U15poh+58KpbzKC1YAKt+7FcBzyxSR8mr/sX5 Qb4YwTnYJIOiixCfTUR4lT0toEZMCBi9iVLwTdIuAZay -----END CERTIFICATE-----Generated at Sat Nov 22 21:46:57 2025 by rpki-client