This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/2NK_hC-yA2a7hoMUbjMUrg1FQmA.roa File: 2NK_hC-yA2a7hoMUbjMUrg1FQmA.roa (raw, json) Hash identifier: iRqCm/za+mEZ991l22CDRq2t7HjjxFYdskNUTkGOxQ4= Subject key identifier: D8:D2:BF:84:2F:B2:03:66:BB:86:83:14:6E:33:14:AE:0D:45:42:60 Certificate issuer: /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e Certificate serial: 018C698002EBE3E293F32F2232AC562310A5 Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/2NK_hC-yA2a7hoMUbjMUrg1FQmA.roa Signing time: Thu 14 Dec 2023 18:04:06 +0000 ROA not before: Thu 14 Dec 2023 18:04:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 215838 IP address blocks: 185.186.26.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:69:80:02:eb:e3:e2:93:f3:2f:22:32:ac:56:23:10:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e Validity Not Before: Dec 14 18:04:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d8d2bf842fb20366bb8683146e3314ae0d454260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:27:f2:38:48:62:0a:d4:c6:2a:de:4b:ae: 88:20:b2:1e:cd:77:89:87:d9:76:2f:b1:7c:ac:11: 9b:57:a0:74:1f:4b:90:3d:1a:b7:b5:20:60:91:32: 3e:24:da:eb:ed:a1:7d:88:35:e4:0b:ba:c5:57:77: 49:47:45:aa:39:20:f7:92:78:05:c5:c8:cc:b6:e3: 0c:82:aa:a4:8c:d5:a7:5e:63:f4:81:2a:65:5e:b7: cd:8a:4e:e1:c9:b3:1e:a5:e9:9b:03:91:77:74:49: 28:76:2b:05:b8:17:f1:34:bd:3c:88:65:90:44:46: 7f:14:d1:87:26:2a:c6:bc:76:a6:c6:d7:de:f1:38: a6:77:23:b6:18:91:eb:87:80:50:6a:56:b7:2f:7c: 76:30:b2:ad:c8:91:3b:be:fa:4e:eb:58:14:a8:87: c0:7d:00:ea:10:40:db:32:75:99:ad:09:77:cb:c7: 42:87:09:7b:b7:d8:a7:cc:19:f9:ff:69:3a:72:1f: 97:c9:9c:fc:45:09:30:cd:f7:9c:21:7d:92:80:14: 8f:cd:68:7e:8e:42:6e:14:91:1b:9f:7e:71:5a:21: 56:32:c0:ab:71:25:9c:23:97:77:87:a0:84:6e:bb: 70:b7:bb:c1:9d:fd:37:22:d3:d7:92:32:25:3e:66: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D2:BF:84:2F:B2:03:66:BB:86:83:14:6E:33:14:AE:0D:45:42:60 X509v3 Authority Key Identifier: keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/2NK_hC-yA2a7hoMUbjMUrg1FQmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.26.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:7c:08:98:80:95:c2:fe:f4:18:c9:5a:cf:dc:f8:ef:03:95: 1a:dc:21:a1:26:e1:e9:5c:85:32:1e:19:47:95:62:01:5d:18: 8b:bb:4a:bb:96:2a:60:52:d1:1b:ab:4f:d8:3c:5d:d1:72:13: a0:11:07:4c:fa:92:40:82:0b:3f:9f:b4:ac:de:6d:93:54:a8: 25:25:f3:1e:6e:9a:c4:f7:6f:9d:78:fe:49:bb:3f:d0:eb:54: d6:55:5c:f3:97:d4:34:c6:cd:43:83:c3:e2:8c:60:7c:57:7a: 3b:7b:3a:88:42:6e:5b:78:ec:1c:0e:de:4b:7a:39:2d:e5:b5: 8c:e4:45:21:e6:32:e8:e2:0c:47:07:9b:c4:c7:97:da:d2:60: c4:16:2f:d3:f0:b6:4c:3d:69:10:75:36:64:6f:78:d5:b4:14: 57:ca:93:2f:7f:ab:76:b9:4a:9e:08:60:7a:a7:fc:6f:f8:58: fc:a8:60:af:09:31:ac:66:c7:25:59:a9:27:f3:ed:79:16:90: da:f1:8e:75:c4:76:c0:2b:d7:f0:69:e4:dc:56:07:f8:a9:1e: 84:7f:b3:fd:81:32:3b:bf:4e:5f:35:14:5e:af:94:8d:fa:9b: e9:d1:14:e4:30:fc:d3:79:fe:e2:7f:6a:d5:e5:89:7f:0f:d4: 87:57:5b:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAYxpgALr4+KT8y8iMqxWIxClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTBhZGIxYThiNzk3MDIwZjBlYzdhMjlhOWI1YWJhZDQw YjY1M2UwHhcNMjMxMjE0MTgwNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGQyYmY4NDJmYjIwMzY2YmI4NjgzMTQ2ZTMzMTRhZTBkNDU0MjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQgn8jhIYgrUxireS66IILIezXeJ h9l2L7F8rBGbV6B0H0uQPRq3tSBgkTI+JNrr7aF9iDXkC7rFV3dJR0WqOSD3kngF xcjMtuMMgqqkjNWnXmP0gSplXrfNik7hybMepembA5F3dEkodisFuBfxNL08iGWQ REZ/FNGHJirGvHamxtfe8TimdyO2GJHrh4BQala3L3x2MLKtyJE7vvpO61gUqIfA fQDqEEDbMnWZrQl3y8dChwl7t9inzBn5/2k6ch+XyZz8RQkwzfecIX2SgBSPzWh+ jkJuFJEbn35xWiFWMsCrcSWcI5d3h6CEbrtwt7vBnf03ItPXkjIlPmaygQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjSv4QvsgNmu4aDFG4zFK4NRUJgMB8GA1UdIwQY MBaAFNygrbGot5cCDw7HopqbWrrUC2U+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYt M2UzNmNhOWEyZDY5LzEvMk5LX2hDLXlBMmE3aG9NVWJqTVVyZzFGUW1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYtM2UzNmNhOWEyZDY5 LzEvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuboaMA0G CSqGSIb3DQEBCwUAA4IBAQAcfAiYgJXC/vQYyVrP3PjvA5Ua3CGhJuHpXIUyHhlH lWIBXRiLu0q7lipgUtEbq0/YPF3RchOgEQdM+pJAggs/n7Ss3m2TVKglJfMebprE 92+deP5Juz/Q61TWVVzzl9Q0xs1Dg8PijGB8V3o7ezqIQm5beOwcDt5Lejkt5bWM 5EUh5jLo4gxHB5vEx5fa0mDEFi/T8LZMPWkQdTZkb3jVtBRXypMvf6t2uUqeCGB6 p/xv+Fj8qGCvCTGsZsclWakn8+15FpDa8Y51xHbAK9fwaeTcVgf4qR6Ef7P9gTI7 v05fNRRer5SN+pvp0RTkMPzTef7if2rV5Yl/D9SHV1t6 -----END CERTIFICATE-----Generated at Sun Dec 14 09:17:59 2025 by rpki-client