This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uoebQ8o3jmapMhzCQXRSV9fpthQ.roa File: uoebQ8o3jmapMhzCQXRSV9fpthQ.roa (raw, json) Hash identifier: o0wvUDFCo9q7T/xnoiEokCDrC2hBZZ/rt9kYaZino6E= Subject key identifier: BA:87:9B:43:CA:37:8E:66:A9:32:1C:C2:41:74:52:57:D7:E9:B6:14 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A8E31C46ED0D0492213CEF849FDC40EB9 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uoebQ8o3jmapMhzCQXRSV9fpthQ.roa Signing time: Sun 16 Nov 2025 19:43:37 +0000 ROA not before: Sun 16 Nov 2025 19:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135391 IP address blocks: 45.149.61.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:31:c4:6e:d0:d0:49:22:13:ce:f8:49:fd:c4:0e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Nov 16 19:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba879b43ca378e66a9321cc241745257d7e9b614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3e:bd:8f:c2:7d:0d:0e:ac:d0:09:2d:f7:94: 73:a9:c5:50:11:99:2d:5b:82:14:2e:3c:d5:96:31: 13:50:c8:7a:6c:e0:12:f2:64:cc:c3:ff:38:9d:d9: 74:f4:8b:5f:39:b6:31:93:e6:4b:0a:e8:c8:dc:80: 4b:3f:93:fd:0c:89:04:6e:b0:63:fb:61:a4:d7:f3: 37:be:55:24:f3:90:f3:42:ac:61:de:87:da:c2:24: 05:64:58:28:2e:5b:c4:2f:67:99:14:d7:9f:73:00: 39:bc:35:42:4e:0b:d1:7f:59:35:39:34:66:f1:51: 8e:c0:89:90:b9:8d:f7:dd:c3:41:de:3c:84:e8:dd: 91:39:7d:9b:b6:40:6c:0a:7a:e3:8c:3f:59:bb:3a: ca:54:2d:80:0e:1f:b5:98:e0:df:a0:6f:d3:9d:8d: 50:ef:75:82:ad:81:87:9b:6c:4f:89:f6:51:80:b4: 98:ce:2e:5f:b2:15:fa:2e:80:e9:04:8d:ad:59:22: bf:32:82:c7:12:ee:91:05:53:05:c1:4f:af:76:9a: f2:e4:aa:21:04:7d:df:bf:7e:90:43:96:19:2c:95: 16:cc:55:55:37:6a:96:64:90:74:f6:d4:bb:a1:5b: f9:b4:22:87:7d:a4:9f:4e:77:b2:6a:ec:63:1f:68: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:87:9B:43:CA:37:8E:66:A9:32:1C:C2:41:74:52:57:D7:E9:B6:14 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uoebQ8o3jmapMhzCQXRSV9fpthQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.61.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:42:0d:be:7a:d9:27:5c:98:c2:3d:22:bc:55:0f:57:19:5e: 55:ef:57:ca:64:f9:1c:15:4f:ba:cf:ff:80:72:12:21:df:00: a6:be:dc:60:1d:63:09:ac:d3:39:1e:ab:c6:46:8b:b9:d2:01: f7:a2:11:29:d7:54:e7:80:4e:5a:14:af:9c:61:85:d0:88:f1: cb:b8:9b:0d:99:fa:e6:4d:d9:3f:96:e7:3a:c7:70:e2:d2:f1: 41:31:7b:e3:1f:9b:e6:6c:c9:27:b1:e4:65:cb:63:a0:67:16: 89:a1:4d:1b:c1:8a:d6:f3:4b:a1:2e:c4:96:30:b7:22:1d:9d: 79:ac:05:4a:03:e5:c8:88:37:a8:a5:2e:54:a8:03:d7:bd:02: 88:c2:50:d1:34:db:09:02:96:36:85:8d:50:28:5f:38:39:b8: 17:76:40:63:b6:cf:67:ad:b0:5a:d2:10:19:af:d5:4c:b2:a5: 38:58:4e:2d:29:ae:41:cf:c6:57:b3:51:7e:1a:04:92:3e:7c: 78:c7:2d:ee:42:7f:dd:9a:f3:27:17:42:75:3e:b0:f5:70:6c: b9:57:db:f3:46:fd:29:05:d7:df:61:98:b0:8c:35:73:4f:a4: 2d:ea:05:4e:06:a4:2b:fa:f2:4d:3a:ad:9d:2f:7d:28:95:f6: a9:20:4c:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqOMcRu0NBJIhPO+En9xA65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMTE2MTk0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTg3OWI0M2NhMzc4ZTY2YTkzMjFjYzI0MTc0NTI1N2Q3ZTliNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9D69j8J9DQ6s0Akt95RzqcVQEZkt W4IULjzVljETUMh6bOAS8mTMw/84ndl09ItfObYxk+ZLCujI3IBLP5P9DIkEbrBj +2Gk1/M3vlUk85DzQqxh3ofawiQFZFgoLlvEL2eZFNefcwA5vDVCTgvRf1k1OTRm 8VGOwImQuY333cNB3jyE6N2ROX2btkBsCnrjjD9ZuzrKVC2ADh+1mODfoG/TnY1Q 73WCrYGHm2xPifZRgLSYzi5fshX6LoDpBI2tWSK/MoLHEu6RBVMFwU+vdpry5Koh BH3fv36QQ5YZLJUWzFVVN2qWZJB09tS7oVv5tCKHfaSfTneyauxjH2ijpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLqHm0PKN45mqTIcwkF0UlfX6bYUMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdW9lYlE4bzNqbWFwTWh6Q1FYUlNWOWZwdGhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU9MA0G CSqGSIb3DQEBCwUAA4IBAQBMQg2+etknXJjCPSK8VQ9XGV5V71fKZPkcFU+6z/+A chIh3wCmvtxgHWMJrNM5HqvGRou50gH3ohEp11TngE5aFK+cYYXQiPHLuJsNmfrm Tdk/luc6x3Di0vFBMXvjH5vmbMknseRly2OgZxaJoU0bwYrW80uhLsSWMLciHZ15 rAVKA+XIiDeopS5UqAPXvQKIwlDRNNsJApY2hY1QKF84ObgXdkBjts9nrbBa0hAZ r9VMsqU4WE4tKa5Bz8ZXs1F+GgSSPnx4xy3uQn/dmvMnF0J1PrD1cGy5V9vzRv0p BdffYZiwjDVzT6Qt6gVOBqQr+vJNOq2dL30olfapIEza -----END CERTIFICATE-----Generated at Sat Nov 22 21:46:57 2025 by rpki-client