This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/96e6TQUzqi23mQCpl3vD3vh7ENo.roa File: 96e6TQUzqi23mQCpl3vD3vh7ENo.roa (raw, json) Hash identifier: UMCcFD/y5Z5OOIUhwMLBzwQF90mvDSLp+ofjZ2kkYMM= Subject key identifier: F7:A7:BA:4D:05:33:AA:2D:B7:99:00:A9:97:7B:C3:DE:F8:7B:10:DA Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1 Certificate serial: 0199DADBBE359BF0E19949B1FE80C734692E Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/96e6TQUzqi23mQCpl3vD3vh7ENo.roa Signing time: Sun 12 Oct 2025 23:57:38 +0000 ROA not before: Sun 12 Oct 2025 23:57:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50763 IP address blocks: 185.241.44.0/22 maxlen: 22 185.241.44.0/23 maxlen: 23 185.241.46.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:da:db:be:35:9b:f0:e1:99:49:b1:fe:80:c7:34:69:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1 Validity Not Before: Oct 12 23:57:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f7a7ba4d0533aa2db79900a9977bc3def87b10da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:92:23:78:91:8e:d8:4a:ce:83:49:a9:0f: 8c:e1:00:59:ae:9d:86:d6:85:ab:13:f7:88:4e:63: be:af:80:0e:5c:a3:2a:83:62:00:73:db:cc:f2:d7: 76:28:75:cc:14:31:0f:2d:6d:d8:b4:7f:ee:9b:be: 41:1d:b3:5f:c5:15:01:0c:e5:8b:21:46:12:93:18: 5d:56:55:ca:7e:6b:09:8b:c2:cc:5c:7e:6b:fb:88: 3b:15:bd:45:96:85:8a:46:b9:ea:27:25:98:5f:6c: a3:38:08:cd:e3:2b:8d:a3:5d:8b:f2:55:d0:65:f0: 54:bf:a8:7a:dc:2c:a7:92:ab:b4:28:30:57:df:0a: 75:88:0a:af:e8:69:3f:47:b0:f1:74:bd:e1:f3:1c: 7e:42:94:aa:9b:19:06:fb:b9:0e:a0:56:0f:42:a3: c4:64:47:35:45:d9:0d:01:79:28:0b:0d:83:cd:89: bc:6f:d4:fe:87:e4:26:9d:09:c0:1b:73:c2:77:8a: ff:2a:aa:8d:28:43:91:58:bf:10:fd:08:de:d4:d7: 85:e6:97:f8:19:3e:2d:eb:70:72:5b:20:73:44:fc: ac:86:2a:e3:02:b4:d6:96:fc:de:b4:64:34:68:57: b5:4d:75:48:5e:fb:a2:73:b4:99:ae:4c:64:cc:a8: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A7:BA:4D:05:33:AA:2D:B7:99:00:A9:97:7B:C3:DE:F8:7B:10:DA X509v3 Authority Key Identifier: keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/96e6TQUzqi23mQCpl3vD3vh7ENo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.44.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:8c:c1:95:08:68:ab:ce:d7:92:30:73:62:75:78:68:b3:70: c5:7c:85:c9:bb:ac:ac:7b:83:59:18:b4:06:7d:6c:e5:e3:fd: d6:5a:f9:a8:4c:63:62:bc:09:15:28:e0:b5:04:ca:cb:6b:27: 5f:5f:fc:1a:78:c7:52:01:aa:e5:a2:90:97:34:20:30:12:47: 65:22:c8:e8:dd:e0:40:01:29:af:1d:c0:b8:26:0d:ae:b9:78: 71:68:09:c8:85:2f:eb:9c:ce:ec:b1:c6:f3:46:a3:fe:5d:cc: 40:91:fe:34:be:47:05:81:f4:80:aa:fb:5e:b3:30:9d:2f:db: 26:25:60:4a:69:fb:7b:5e:33:f7:6c:45:ba:94:e3:75:12:52: 5e:51:1e:e4:4f:af:1e:ca:b4:cd:43:25:2c:e7:f7:e1:64:36: dd:b7:4f:04:85:6d:00:b0:5f:75:7f:6d:f2:c4:7c:43:10:dd: 78:fc:2d:43:8c:cb:97:41:41:77:fc:d9:81:c2:3f:e6:24:1d: 26:30:af:e1:34:5e:71:03:7f:4f:9a:c8:9a:04:fd:ff:8c:ca: 49:28:7e:89:2e:2c:d0:1d:cf:f9:d1:3b:09:b8:fc:e0:fd:e6: 32:ce:c3:04:20:b9:6c:31:f0:c3:2b:d4:ee:5e:97:3d:7f:d2: 4b:8c:d5:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZna2741m/DhmUmx/oDHNGkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYTFmZTlhNGMwM2QwMTVhZWM5NzRlMmQyOTcwOWE5Nzll YjgyZjEwHhcNMjUxMDEyMjM1NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2E3YmE0ZDA1MzNhYTJkYjc5OTAwYTk5NzdiYzNkZWY4N2IxMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGmSI3iRjthKzoNJqQ+M4QBZrp2G 1oWrE/eITmO+r4AOXKMqg2IAc9vM8td2KHXMFDEPLW3YtH/um75BHbNfxRUBDOWL IUYSkxhdVlXKfmsJi8LMXH5r+4g7Fb1FloWKRrnqJyWYX2yjOAjN4yuNo12L8lXQ ZfBUv6h63Cynkqu0KDBX3wp1iAqv6Gk/R7DxdL3h8xx+QpSqmxkG+7kOoFYPQqPE ZEc1RdkNAXkoCw2DzYm8b9T+h+QmnQnAG3PCd4r/KqqNKEORWL8Q/Qje1NeF5pf4 GT4t63ByWyBzRPyshirjArTWlvzetGQ0aFe1TXVIXvuic7SZrkxkzKih1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPenuk0FM6ott5kAqZd7w974exDaMB8GA1UdIwQY MBaAFIqh/ppMA9AVrsl04tKXCal564LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXFILW1rd0QwQld1eVhUaTBwY0pxWG5yZ3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80MWU5YjAtNjJlNy00NzE4LWI5NjYt MWY5YWUwNTU2NDZmLzEvOTZlNlRRVXpxaTIzbVFDcGwzdkQzdmg3RU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi80MWU5YjAtNjJlNy00NzE4LWI5NjYtMWY5YWUwNTU2NDZm LzEvaXFILW1rd0QwQld1eVhUaTBwY0pxWG5yZ3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufEsMA0G CSqGSIb3DQEBCwUAA4IBAQA6jMGVCGirzteSMHNidXhos3DFfIXJu6yse4NZGLQG fWzl4/3WWvmoTGNivAkVKOC1BMrLaydfX/waeMdSAarlopCXNCAwEkdlIsjo3eBA ASmvHcC4Jg2uuXhxaAnIhS/rnM7sscbzRqP+XcxAkf40vkcFgfSAqvteszCdL9sm JWBKaft7XjP3bEW6lON1ElJeUR7kT68eyrTNQyUs5/fhZDbdt08EhW0AsF91f23y xHxDEN14/C1DjMuXQUF3/NmBwj/mJB0mMK/hNF5xA39PmsiaBP3/jMpJKH6JLizQ Hc/50TsJuPzg/eYyzsMEILlsMfDDK9TuXpc9f9JLjNWx -----END CERTIFICATE-----Generated at Sun Dec 14 19:11:16 2025 by rpki-client