This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/QclECTske84HbDu8sJlJGiIrVIk.roa File: QclECTske84HbDu8sJlJGiIrVIk.roa (raw, json) Hash identifier: H972iLF1Nd+ljQ1m6BW4FM8zRE4gRbRog3eJT/mGTe0= Subject key identifier: 41:C9:44:09:3B:24:7B:CE:07:6C:3B:BC:B0:99:49:1A:22:2B:54:89 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A915EC1E4757E2E96EB2CCDCCD5EB7F2D Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/QclECTske84HbDu8sJlJGiIrVIk.roa Signing time: Mon 17 Nov 2025 10:31:37 +0000 ROA not before: Mon 17 Nov 2025 10:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 45.149.62.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:5e:c1:e4:75:7e:2e:96:eb:2c:cd:cc:d5:eb:7f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Nov 17 10:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41c944093b247bce076c3bbcb099491a222b5489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:e1:0c:6b:c0:f9:99:36:37:1f:16:15:e6: 64:dd:97:06:81:a4:b6:d3:24:6f:26:7e:87:65:07: ef:bc:ef:b2:00:f2:d5:4d:a8:57:09:c1:bc:f2:8c: 87:67:51:39:ea:16:fe:08:cc:82:d7:2a:c0:9f:7d: 00:79:fe:9a:29:7c:5d:16:9c:e4:e8:6d:2e:61:77: ce:43:e0:3c:54:92:3e:ea:52:cd:73:5f:73:25:3d: 08:63:2c:a2:61:09:43:ff:d9:0b:ba:3f:aa:81:a1: bb:df:4a:46:8a:82:22:d9:6d:3e:48:ab:e7:fd:f2: ae:81:19:17:4f:34:3c:a5:14:1c:ed:58:79:bf:1f: 96:64:28:5a:9e:28:e2:6d:22:62:54:1f:4b:66:aa: 75:8f:a9:49:2b:37:4c:64:05:5a:6d:67:da:e3:7c: 8e:17:35:22:ca:0c:e7:df:d0:a0:35:20:e0:b0:4e: 91:bf:8e:23:70:f5:e3:83:35:d3:94:85:bc:bd:c6: f2:d6:f4:49:13:c1:4d:51:f6:61:e2:a5:1c:1f:07: c9:45:d8:26:88:1c:32:10:a5:23:07:dc:21:9f:31: 88:70:fe:b7:31:a3:6b:2b:78:88:00:a5:1e:aa:22: 16:0c:83:72:90:69:aa:9f:ba:5f:e2:dd:c2:fe:26: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C9:44:09:3B:24:7B:CE:07:6C:3B:BC:B0:99:49:1A:22:2B:54:89 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/QclECTske84HbDu8sJlJGiIrVIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.62.0/24 Signature Algorithm: sha256WithRSAEncryption 68:9d:22:ee:45:5b:fd:c5:d8:05:1f:d3:c8:d3:1d:16:28:69: 60:a6:67:b8:13:73:71:60:52:b1:04:01:5a:d7:90:fd:7b:f2: 54:ab:3b:a9:09:10:d4:4d:89:1c:bd:03:09:d7:ed:ac:e1:09: 9f:47:f4:10:6e:3d:1c:34:c9:bd:9b:e7:1c:0f:e3:a2:70:4b: 80:67:56:ad:fb:98:3f:c1:3e:94:34:c9:f1:a0:34:0e:0c:c0: 00:d1:11:ca:c8:9c:44:a3:22:68:94:fd:22:9e:9b:0f:5f:76: bf:1b:a4:a3:56:34:24:41:79:9c:9a:5d:ea:4e:d2:41:f5:4e: 43:9d:d0:2f:b8:e4:5e:c8:5f:fe:27:4e:7d:31:f1:70:4d:05: 45:d6:89:de:2b:7b:a9:02:f1:f3:51:f6:b9:ba:87:58:2b:c6: 2c:c4:d4:01:98:39:fb:67:e6:43:6d:0b:0a:e7:78:87:58:bf: ff:ba:1e:d6:eb:15:70:1a:05:2f:aa:8e:65:b5:25:8e:e5:34: 9c:04:54:42:cf:16:6d:85:1a:2a:e5:d7:29:2a:ad:80:a5:34: 40:70:ab:c6:4d:ea:0d:67:27:96:e6:36:ac:93:e2:b8:c4:68: 22:3a:6a:3d:d8:1e:55:79:28:11:7d:66:7d:64:72:30:01:76: eb:fe:e1:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqRXsHkdX4ulusszczV638tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMTE3MTAzMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWM5NDQwOTNiMjQ3YmNlMDc2YzNiYmNiMDk5NDkxYTIyMmI1NDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIHhDGvA+Zk2Nx8WFeZk3ZcGgaS2 0yRvJn6HZQfvvO+yAPLVTahXCcG88oyHZ1E56hb+CMyC1yrAn30Aef6aKXxdFpzk 6G0uYXfOQ+A8VJI+6lLNc19zJT0IYyyiYQlD/9kLuj+qgaG730pGioIi2W0+SKvn /fKugRkXTzQ8pRQc7Vh5vx+WZChanijibSJiVB9LZqp1j6lJKzdMZAVabWfa43yO FzUiygzn39CgNSDgsE6Rv44jcPXjgzXTlIW8vcby1vRJE8FNUfZh4qUcHwfJRdgm iBwyEKUjB9whnzGIcP63MaNrK3iIAKUeqiIWDINykGmqn7pf4t3C/iZRnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEHJRAk7JHvOB2w7vLCZSRoiK1SJMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvUWNsRUNUc2tlODRIYkR1OHNKbEpHaUlyVklrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU+MA0G CSqGSIb3DQEBCwUAA4IBAQBonSLuRVv9xdgFH9PI0x0WKGlgpme4E3NxYFKxBAFa 15D9e/JUqzupCRDUTYkcvQMJ1+2s4QmfR/QQbj0cNMm9m+ccD+OicEuAZ1at+5g/ wT6UNMnxoDQODMAA0RHKyJxEoyJolP0inpsPX3a/G6SjVjQkQXmcml3qTtJB9U5D ndAvuOReyF/+J059MfFwTQVF1oneK3upAvHzUfa5uodYK8YsxNQBmDn7Z+ZDbQsK 53iHWL//uh7W6xVwGgUvqo5ltSWO5TScBFRCzxZthRoq5dcpKq2ApTRAcKvGTeoN ZyeW5jask+K4xGgiOmo92B5VeSgRfWZ9ZHIwAXbr/uFp -----END CERTIFICATE-----Generated at Sat Nov 22 21:46:57 2025 by rpki-client