This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Zg8K0XVZGKtCPCr1SJriRh0P9s0.roa File: Zg8K0XVZGKtCPCr1SJriRh0P9s0.roa (raw, json) Hash identifier: t8YhujSUgO9MLGXpkBg/AXZeZkp9JxFrPKYcU9Z4TfE= Subject key identifier: 66:0F:0A:D1:75:59:18:AB:42:3C:2A:F5:48:9A:E2:46:1D:0F:F6:CD Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A8E2E1B0F618BD4794FD12391F4139730 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Zg8K0XVZGKtCPCr1SJriRh0P9s0.roa Signing time: Sun 16 Nov 2025 19:39:37 +0000 ROA not before: Sun 16 Nov 2025 19:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64267 IP address blocks: 194.50.1.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:2e:1b:0f:61:8b:d4:79:4f:d1:23:91:f4:13:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Nov 16 19:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=660f0ad1755918ab423c2af5489ae2461d0ff6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:88:55:e6:fd:f0:9f:7f:1f:1d:e4:68:21: d4:32:44:81:1f:31:6e:34:1c:ad:14:62:06:4c:89: 0a:64:21:98:fc:53:45:e2:f8:d1:1c:65:19:e7:ef: 99:5f:49:b9:0b:c9:82:1f:7f:dd:65:59:fa:a6:4e: 8d:49:1f:b3:78:3e:fc:d7:b0:88:21:06:6b:49:77: 1f:48:8e:f0:ef:e1:02:48:aa:e5:f9:7a:6e:32:ca: a5:12:ca:b6:5f:80:b0:35:f5:cc:ab:e4:16:60:85: c7:36:75:f3:b5:78:27:58:4d:7b:7f:13:59:80:a0: 81:7e:f0:75:b0:71:dd:3c:99:99:64:5c:63:96:e2: b4:aa:1c:ef:ff:59:96:c0:f6:4a:91:ac:31:1c:3a: bf:eb:86:21:23:b0:d5:35:1e:bf:8a:26:6d:b1:fa: b8:8a:2f:18:6f:f2:2c:50:84:68:30:1c:4e:9d:9d: fc:76:7f:1f:32:c5:6e:1b:0c:f6:fa:8f:12:db:5e: 6b:b0:0b:13:d0:70:f4:e0:1a:71:fd:ed:84:3e:be: d8:93:c8:63:13:75:7e:26:cd:79:01:aa:94:c1:2f: a9:bd:e6:3c:00:51:30:8c:9f:5a:19:41:79:43:2c: 3e:b7:1f:d4:c1:54:8c:0e:46:60:18:20:80:c3:06: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0F:0A:D1:75:59:18:AB:42:3C:2A:F5:48:9A:E2:46:1D:0F:F6:CD X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Zg8K0XVZGKtCPCr1SJriRh0P9s0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:e5:93:b8:d1:29:6c:e3:fc:dd:47:46:b7:68:11:11:9f:4c: 26:a2:80:61:67:8c:fa:0d:cf:7a:67:cd:37:e7:33:8b:1e:e7: 7e:db:33:ed:cd:ad:c8:5d:cc:ac:50:97:28:b8:1a:4e:cf:03: 5f:f9:b9:25:de:4b:22:0b:e4:17:ce:29:5c:4e:f0:2f:32:ef: 13:7f:15:b7:cc:f3:de:60:9d:0a:77:0d:ea:d1:03:3d:69:b0: aa:81:a6:e3:87:26:68:dd:a0:b3:92:2c:e1:ad:c7:ec:11:6d: 9a:ae:e2:24:0b:6c:d9:7e:25:2a:08:e4:90:9b:af:53:0e:54: cd:dc:a7:2e:fa:12:8d:77:fb:14:21:cb:49:79:15:bb:fe:1e: b6:93:c9:8e:e4:3a:2e:7d:7e:37:3d:b4:2a:ef:fe:61:d0:13: 6a:d2:40:bd:e6:68:42:e5:f6:e9:bf:83:02:fd:b5:f7:87:14: 22:77:b9:3c:ca:7c:49:a7:8e:b7:a8:ad:c9:4a:48:91:05:c2: f1:8c:86:0a:89:fe:c7:78:48:16:c6:a9:1a:a4:a3:2f:b1:96: fd:c4:f9:bc:9d:78:ff:0c:39:a8:13:6e:9e:52:e7:9b:9b:02: de:6c:11:76:00:25:a2:13:fa:45:e0:92:c7:11:6b:b3:95:c0: 12:65:9e:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqOLhsPYYvUeU/RI5H0E5cwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMTE2MTkzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjBmMGFkMTc1NTkxOGFiNDIzYzJhZjU0ODlhZTI0NjFkMGZmNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+iIVeb98J9/Hx3kaCHUMkSBHzFu NBytFGIGTIkKZCGY/FNF4vjRHGUZ5++ZX0m5C8mCH3/dZVn6pk6NSR+zeD7817CI IQZrSXcfSI7w7+ECSKrl+XpuMsqlEsq2X4CwNfXMq+QWYIXHNnXztXgnWE17fxNZ gKCBfvB1sHHdPJmZZFxjluK0qhzv/1mWwPZKkawxHDq/64YhI7DVNR6/iiZtsfq4 ii8Yb/IsUIRoMBxOnZ38dn8fMsVuGwz2+o8S215rsAsT0HD04Bpx/e2EPr7Yk8hj E3V+Js15AaqUwS+pveY8AFEwjJ9aGUF5Qyw+tx/UwVSMDkZgGCCAwwaoRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYPCtF1WRirQjwq9Uia4kYdD/bNMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvWmc4SzBYVlpHS3RDUENyMVNKcmlSaDBQOXMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIBMA0G CSqGSIb3DQEBCwUAA4IBAQA85ZO40Sls4/zdR0a3aBERn0wmooBhZ4z6Dc96Z803 5zOLHud+2zPtza3IXcysUJcouBpOzwNf+bkl3ksiC+QXzilcTvAvMu8TfxW3zPPe YJ0Kdw3q0QM9abCqgabjhyZo3aCzkizhrcfsEW2aruIkC2zZfiUqCOSQm69TDlTN 3Kcu+hKNd/sUIctJeRW7/h62k8mO5DoufX43PbQq7/5h0BNq0kC95mhC5fbpv4MC /bX3hxQid7k8ynxJp463qK3JSkiRBcLxjIYKif7HeEgWxqkapKMvsZb9xPm8nXj/ DDmoE26eUuebmwLebBF2ACWiE/pF4JLHEWuzlcASZZ4n -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:02 2025 by rpki-client