This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/qvUI8juoNfgXkonuCjmOJVeAm5U.roa File: qvUI8juoNfgXkonuCjmOJVeAm5U.roa (raw, json) Hash identifier: M6FgxfBFeIgMRwbot3Jo3V4Q9gPy3NLzRk6QJTebnbg= Subject key identifier: AA:F5:08:F2:3B:A8:35:F8:17:92:89:EE:0A:39:8E:25:57:80:9B:95 Certificate issuer: /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3 Certificate serial: 0197EF15206399CEB6BA5903CE4D14C8F32E Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/qvUI8juoNfgXkonuCjmOJVeAm5U.roa Signing time: Wed 09 Jul 2025 12:07:08 +0000 ROA not before: Wed 09 Jul 2025 12:07:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197698 IP address blocks: 193.8.86.0/23 maxlen: 23 2001:67c:650::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ef:15:20:63:99:ce:b6:ba:59:03:ce:4d:14:c8:f3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3 Validity Not Before: Jul 9 12:07:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aaf508f23ba835f8179289ee0a398e2557809b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a1:fb:39:23:3c:2a:42:7b:a4:0e:97:02:9e: 54:43:b4:4c:32:4b:1a:56:90:cb:5c:bb:2e:d4:2e: 91:70:7c:0d:84:8b:1b:9f:6b:f2:b6:83:cc:bf:a7: 63:9b:be:c2:de:53:3e:fe:a1:a9:2a:b0:be:fc:82: c0:37:c0:31:9c:ec:1e:6e:25:b6:95:18:ed:16:e2: 5c:6e:19:7e:ce:58:85:53:85:ab:69:d5:db:bb:cf: e8:0f:6d:3e:ef:a9:ea:f6:0a:7d:ff:a5:5b:f5:d7: 75:23:99:87:43:ef:ad:7a:15:ef:44:8b:01:14:e0: 5c:47:59:6a:01:cd:6e:87:09:7d:6f:12:cc:7a:f8: b3:6f:8c:90:9e:79:fa:64:35:5c:81:0e:a1:0d:3b: 66:f3:78:f1:03:bf:a1:d4:79:17:a5:4a:a7:57:fb: 7d:8d:f7:fd:cf:70:19:9f:cf:6d:ff:9b:75:d9:26: 4f:e1:41:77:71:bc:f4:15:c7:33:61:a1:f9:08:44: 44:38:77:46:05:80:b7:1c:ca:2d:ed:45:01:ae:59: f0:5a:e4:a8:e5:d9:a6:17:6f:56:4b:c1:1f:61:33: a5:8c:9e:44:53:54:be:aa:84:f3:f3:3c:13:24:9c: 97:7e:b0:19:bc:1c:ca:03:e3:fb:87:22:3d:c0:cb: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F5:08:F2:3B:A8:35:F8:17:92:89:EE:0A:39:8E:25:57:80:9B:95 X509v3 Authority Key Identifier: keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/qvUI8juoNfgXkonuCjmOJVeAm5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.86.0/23 IPv6: 2001:67c:650::/48 Signature Algorithm: sha256WithRSAEncryption 71:0f:8b:67:e1:1f:d8:d9:ca:a9:4e:31:17:fe:bf:a4:98:e5: ad:a1:d9:83:95:4d:7c:1a:81:ab:17:b7:57:24:b2:9f:3a:5d: de:b0:54:1f:97:c0:71:f8:13:3b:69:fa:01:6d:d9:5c:5f:a0: b0:94:8e:f9:91:4d:4c:5e:b5:97:39:a5:48:c4:f0:3f:0d:fa: 57:5a:3a:22:f5:f9:86:b7:07:23:58:a4:ee:ef:08:34:eb:3f: 78:0d:44:9d:76:f8:44:fa:06:d6:14:8f:3b:d8:27:2c:0d:5a: 45:78:e8:52:97:f1:cf:9b:f7:e8:07:94:2d:35:5a:27:c6:e5: 81:9e:52:5c:60:ca:d2:f5:7e:18:f0:e8:3e:6e:92:e9:87:34: f6:2b:22:e8:27:3f:fd:b0:67:44:18:2a:35:31:14:02:a6:25: 6a:21:d2:5c:12:ba:bd:27:4b:35:c1:2c:4e:18:e6:db:c4:6e: 0b:3f:bb:53:88:ac:93:40:e4:f1:40:94:55:c4:45:06:a1:ab: 79:13:1b:86:12:c8:cd:18:27:76:d9:c5:2b:bc:28:b8:11:5b: 8f:15:e5:7f:95:60:ae:6e:f5:74:7f:7c:9d:83:d8:57:2b:0c: 32:87:4d:b9:32:72:2b:85:ad:8a:4e:0c:57:91:85:a1:1b:b9: 26:c2:06:31 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZfvFSBjmc62ulkDzk0UyPMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzY2ZmJmZTZkOTU3MTAwMDIxMzgwYmIwNTU1ZTBhM2Jh NmQ4ZTMwHhcNMjUwNzA5MTIwNzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWY1MDhmMjNiYTgzNWY4MTc5Mjg5ZWUwYTM5OGUyNTU3ODA5Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqH7OSM8KkJ7pA6XAp5UQ7RMMksa VpDLXLsu1C6RcHwNhIsbn2vytoPMv6djm77C3lM+/qGpKrC+/ILAN8AxnOwebiW2 lRjtFuJcbhl+zliFU4WradXbu8/oD20+76nq9gp9/6Vb9dd1I5mHQ++tehXvRIsB FOBcR1lqAc1uhwl9bxLMevizb4yQnnn6ZDVcgQ6hDTtm83jxA7+h1HkXpUqnV/t9 jff9z3AZn89t/5t12SZP4UF3cbz0FcczYaH5CEREOHdGBYC3HMot7UUBrlnwWuSo 5dmmF29WS8EfYTOljJ5EU1S+qoTz8zwTJJyXfrAZvBzKA+P7hyI9wMsrxwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKr1CPI7qDX4F5KJ7go5jiVXgJuVMB8GA1UdIwQY MBaAFJ92b7/m2VcQACE4C7BVXgo7ptjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNadnYtYlpWeEFBSVRnTHNGVmVDanVtMk9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYWYyODYtYWU5NC00YzQ2LWEwYTct NGRmZDI0NjA3ZGJiLzEvcXZVSThqdW9OZmdYa29udUNqbU9KVmVBbTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lYWYyODYtYWU5NC00YzQ2LWEwYTctNGRmZDI0NjA3ZGJi LzEvbjNadnYtYlpWeEFBSVRnTHNGVmVDanVtMk9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwQhWMA8E AgACMAkDBwAgAQZ8BlAwDQYJKoZIhvcNAQELBQADggEBAHEPi2fhH9jZyqlOMRf+ v6SY5a2h2YOVTXwagasXt1cksp86Xd6wVB+XwHH4Eztp+gFt2VxfoLCUjvmRTUxe tZc5pUjE8D8N+ldaOiL1+Ya3ByNYpO7vCDTrP3gNRJ12+ET6BtYUjzvYJywNWkV4 6FKX8c+b9+gHlC01WifG5YGeUlxgytL1fhjw6D5ukumHNPYrIugnP/2wZ0QYKjUx FAKmJWoh0lwSur0nSzXBLE4Y5tvEbgs/u1OIrJNA5PFAlFXERQahq3kTG4YSyM0Y J3bZxSu8KLgRW48V5X+VYK5u9XR/fJ2D2FcrDDKHTbkyciuFrYpODFeRhaEbuSbC BjE= -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:32 2025 by rpki-client