This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/U3eF3sYWG_d9mxQMWpNX5t_FsKc.roa File: U3eF3sYWG_d9mxQMWpNX5t_FsKc.roa (raw, json) Hash identifier: Sj2IU5gcQ1HoYUysOjNVu4lM/JRHq/G8psvZiC+P+l8= Subject key identifier: 53:77:85:DE:C6:16:1B:F7:7D:9B:14:0C:5A:93:57:E6:DF:C5:B0:A7 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A8E33992D3113E320BB44232FF954FB1B Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/U3eF3sYWG_d9mxQMWpNX5t_FsKc.roa Signing time: Sun 16 Nov 2025 19:45:37 +0000 ROA not before: Sun 16 Nov 2025 19:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400039 IP address blocks: 194.50.4.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:33:99:2d:31:13:e3:20:bb:44:23:2f:f9:54:fb:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Nov 16 19:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=537785dec6161bf77d9b140c5a9357e6dfc5b0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dd:fe:e2:8e:76:78:da:c9:72:8e:df:76:b1: 26:82:30:a9:78:12:d6:08:d7:b9:ea:05:c7:0f:13: 92:ba:50:64:68:0c:05:cd:b2:1c:74:0d:2e:45:e1: 28:cb:66:8e:90:c5:0a:97:88:8e:42:2e:b6:23:69: bf:69:42:9c:46:b0:60:b0:61:d4:65:08:c4:3f:65: fd:f5:30:31:0e:98:4f:5f:06:9d:bf:db:04:85:bf: a8:85:48:9b:46:12:86:59:a9:8e:59:fc:a6:2e:2d: 12:b0:df:53:bd:1a:ac:9d:30:74:a0:a2:e8:a5:a1: ae:fb:05:6a:10:9f:51:06:1c:11:bd:71:fc:2d:d4: 61:0a:b3:f8:73:ff:98:d0:8d:85:a4:c1:1c:b0:4f: db:ba:09:2d:d4:f3:49:38:48:47:1d:d5:5c:f1:dd: c1:4a:54:f1:ea:99:58:ec:53:27:14:b6:26:76:98: 97:64:22:42:33:11:43:bf:eb:94:4a:7b:e5:d9:99: 81:d0:e5:4b:06:50:49:89:3e:be:20:52:a0:61:bb: 7e:7d:63:e4:00:c0:97:f2:1e:f3:91:b9:6d:ad:3d: 67:fb:2f:f3:63:a0:7f:39:48:5b:37:f9:91:e8:27: 29:78:57:6c:94:59:61:f4:a3:d3:78:35:f5:22:e6: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:77:85:DE:C6:16:1B:F7:7D:9B:14:0C:5A:93:57:E6:DF:C5:B0:A7 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/U3eF3sYWG_d9mxQMWpNX5t_FsKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.4.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:3e:53:9f:c4:7b:65:78:40:2a:bb:4d:f6:04:24:b8:4d:3f: 29:c3:ec:a2:74:69:e1:ae:fe:ad:41:f0:c2:a6:8b:a3:72:d3: 39:8f:e5:29:e5:b5:5c:eb:29:df:37:ca:36:f5:d0:38:99:4b: bd:2f:ea:83:31:8f:5c:f7:11:d1:26:c7:ca:66:de:97:12:01: f7:cd:50:20:58:2c:75:88:56:7d:fe:5c:e5:fd:2e:c2:6a:b8: 93:f8:8c:c2:b6:b2:8b:9e:14:51:48:08:b7:32:3e:ff:56:7f: 7d:ef:70:29:53:49:89:77:9e:72:7c:00:4e:90:ec:26:d7:81: 02:69:f6:21:b0:fe:c4:ea:ed:05:c8:ab:aa:e6:33:ef:58:da: 6c:06:f0:86:18:c8:a6:dd:77:1d:a3:e2:2d:44:18:45:17:ec: 61:0f:67:eb:35:04:d5:70:ed:1b:ef:66:28:84:81:32:40:43: 7f:df:84:20:71:57:37:52:4d:9a:a4:87:1e:85:3d:b5:13:aa: 62:5c:88:a3:60:f4:96:05:25:1a:f2:ba:8c:4c:24:03:22:c5: 9d:5a:80:6d:11:0e:10:39:4d:51:54:24:51:4b:02:a0:86:e2: db:16:8f:01:df:97:29:1b:34:40:21:6a:7d:a5:d9:73:44:ca: 54:9d:c7:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqOM5ktMRPjILtEIy/5VPsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMTE2MTk0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mzc3ODVkZWM2MTYxYmY3N2Q5YjE0MGM1YTkzNTdlNmRmYzViMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t3+4o52eNrJco7fdrEmgjCpeBLW CNe56gXHDxOSulBkaAwFzbIcdA0uReEoy2aOkMUKl4iOQi62I2m/aUKcRrBgsGHU ZQjEP2X99TAxDphPXwadv9sEhb+ohUibRhKGWamOWfymLi0SsN9TvRqsnTB0oKLo paGu+wVqEJ9RBhwRvXH8LdRhCrP4c/+Y0I2FpMEcsE/bugkt1PNJOEhHHdVc8d3B SlTx6plY7FMnFLYmdpiXZCJCMxFDv+uUSnvl2ZmB0OVLBlBJiT6+IFKgYbt+fWPk AMCX8h7zkbltrT1n+y/zY6B/OUhbN/mR6CcpeFdslFlh9KPTeDX1IubLkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFN3hd7GFhv3fZsUDFqTV+bfxbCnMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvVTNlRjNzWVdHX2Q5bXhRTVdwTlg1dF9Gc0tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIEMA0G CSqGSIb3DQEBCwUAA4IBAQALPlOfxHtleEAqu032BCS4TT8pw+yidGnhrv6tQfDC poujctM5j+Up5bVc6ynfN8o29dA4mUu9L+qDMY9c9xHRJsfKZt6XEgH3zVAgWCx1 iFZ9/lzl/S7CariT+IzCtrKLnhRRSAi3Mj7/Vn9973ApU0mJd55yfABOkOwm14EC afYhsP7E6u0FyKuq5jPvWNpsBvCGGMim3Xcdo+ItRBhFF+xhD2frNQTVcO0b72Yo hIEyQEN/34QgcVc3Uk2apIcehT21E6piXIijYPSWBSUa8rqMTCQDIsWdWoBtEQ4Q OU1RVCRRSwKghuLbFo8B35cpGzRAIWp9pdlzRMpUnccf -----END CERTIFICATE-----Generated at Sat Nov 22 21:46:57 2025 by rpki-client