This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/1XQIOk5iQIPgMiozJSaViVf5CBg.roa File: 1XQIOk5iQIPgMiozJSaViVf5CBg.roa (raw, json) Hash identifier: lzNV0P1UA6kV1BLZvWozzybFV/JV08hxKVCFVRcrT5M= Subject key identifier: D5:74:08:3A:4E:62:40:83:E0:32:2A:33:25:26:95:89:57:F9:08:18 Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 019ADABDE0DCE2AC0B9E8E34563CF7F0F50F Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/1XQIOk5iQIPgMiozJSaViVf5CBg.roa Signing time: Mon 01 Dec 2025 16:27:48 +0000 ROA not before: Mon 01 Dec 2025 16:27:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206174 IP address blocks: 2a11:1640::/29 maxlen: 29 2a11:3340::/29 maxlen: 29 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:bd:e0:dc:e2:ac:0b:9e:8e:34:56:3c:f7:f0:f5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Dec 1 16:27:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d574083a4e624083e0322a332526958957f90818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:08:35:c1:7b:cc:e7:07:77:67:6e:4a:5e: 80:92:c4:3f:cb:b5:4c:f8:78:4a:00:bd:53:d4:5a: fe:66:c1:3b:4f:ed:89:36:2e:f6:ac:8d:ec:ae:07: 61:23:61:82:6a:72:a1:ce:00:5a:bb:86:fe:cc:df: 41:5c:a6:bf:1c:16:b4:d9:74:10:25:aa:1e:27:78: 06:4d:b7:e4:e2:3c:2f:bb:55:e4:1d:9c:c1:6b:75: d6:ad:84:cb:fe:bd:1c:2c:b6:9f:4e:ef:36:99:e0: 15:00:85:76:f7:19:a9:66:ac:51:24:84:db:2c:c9: a3:5f:5b:dc:af:e9:8a:ea:84:87:ec:50:07:03:0d: 7c:75:0c:89:e7:83:37:e1:0a:9b:12:dc:4d:d9:d9: df:9d:fc:f7:d6:70:b3:7d:52:a5:68:9e:c3:f5:77: 99:d5:0a:28:95:cf:08:e8:7f:84:15:bd:75:a4:b2: 50:76:fa:1e:c2:2b:a3:9a:f2:ee:e8:30:cd:bc:ef: 0b:73:c1:6e:a9:d4:d7:3f:79:46:d5:f5:bf:4b:c9: 4c:73:7b:51:a7:18:97:b2:54:68:af:a7:e9:23:83: 56:a8:0d:81:56:08:0a:2c:5e:08:73:a7:bf:a1:90: 0e:b9:31:12:c7:e7:14:6f:76:16:e1:81:38:f7:ea: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:08:3A:4E:62:40:83:E0:32:2A:33:25:26:95:89:57:F9:08:18 X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/1XQIOk5iQIPgMiozJSaViVf5CBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:1640::/29 2a11:3340::/29 Signature Algorithm: sha256WithRSAEncryption a1:64:0a:8a:ba:09:c3:5b:98:77:71:0d:3b:d4:7e:bd:4a:8a: 13:c7:e1:80:b0:95:27:9b:23:24:bc:0d:eb:42:f2:09:d7:01: 98:c5:00:94:92:91:ec:35:3e:31:12:d6:27:36:db:6c:0c:ca: 57:11:e0:14:6e:42:61:5e:5b:a2:6b:aa:57:d5:ba:05:74:c7: 15:ed:4d:45:c4:1d:3f:49:35:0b:98:b9:10:d4:36:7d:43:64: 58:fe:76:61:93:e1:94:d6:bc:20:4b:83:d3:f1:10:48:94:52: 11:dd:f6:26:74:ee:e2:7b:d6:1a:2a:ec:33:bf:6c:a6:80:a9: 6e:a5:0a:03:13:b0:b4:f4:90:0c:67:4d:32:82:51:6f:6f:60: 0e:eb:2b:6c:64:1b:23:d7:c0:66:ac:a8:01:c2:11:b8:ef:3a: 3a:0e:82:c3:d4:17:39:9e:80:c1:9d:0b:12:cc:9e:9f:f2:d7: 64:e7:7b:e7:09:f9:df:61:4c:ba:4b:ae:eb:d3:e5:36:3d:05: dd:d1:ce:3f:cb:4f:02:e5:60:8e:69:81:16:de:3f:52:a9:4f: fc:f0:5c:89:50:00:e0:95:15:a8:c8:91:c3:2b:1d:0e:6e:bc: c1:27:a4:95:76:e0:f0:8a:4e:50:f7:7c:f4:50:93:af:a4:e2: f1:c8:87:da -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZraveDc4qwLno40Vjz38PUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUxMjAxMTYyNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTc0MDgzYTRlNjI0MDgzZTAzMjJhMzMyNTI2OTU4OTU3ZjkwODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx08INcF7zOcHd2duSl6AksQ/y7VM +HhKAL1T1Fr+ZsE7T+2JNi72rI3srgdhI2GCanKhzgBau4b+zN9BXKa/HBa02XQQ JaoeJ3gGTbfk4jwvu1XkHZzBa3XWrYTL/r0cLLafTu82meAVAIV29xmpZqxRJITb LMmjX1vcr+mK6oSH7FAHAw18dQyJ54M34QqbEtxN2dnfnfz31nCzfVKlaJ7D9XeZ 1Qoolc8I6H+EFb11pLJQdvoewiujmvLu6DDNvO8Lc8FuqdTXP3lG1fW/S8lMc3tR pxiXslRor6fpI4NWqA2BVggKLF4Ic6e/oZAOuTESx+cUb3YW4YE49+onhQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNV0CDpOYkCD4DIqMyUmlYlX+QgYMB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvMVhRSU9rNWlRSVBnTWlvekpTYVZpVmY1Q0JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhEWQAMF AyoRM0AwDQYJKoZIhvcNAQELBQADggEBAKFkCoq6CcNbmHdxDTvUfr1KihPH4YCw lSebIyS8DetC8gnXAZjFAJSSkew1PjES1ic222wMylcR4BRuQmFeW6JrqlfVugV0 xxXtTUXEHT9JNQuYuRDUNn1DZFj+dmGT4ZTWvCBLg9PxEEiUUhHd9iZ07uJ71hoq 7DO/bKaAqW6lCgMTsLT0kAxnTTKCUW9vYA7rK2xkGyPXwGasqAHCEbjvOjoOgsPU FzmegMGdCxLMnp/y12Tne+cJ+d9hTLpLruvT5TY9Bd3Rzj/LTwLlYI5pgRbeP1Kp T/zwXIlQAOCVFajIkcMrHQ5uvMEnpJV24PCKTlD3fPRQk6+k4vHIh9o= -----END CERTIFICATE-----Generated at Sun Dec 21 02:55:44 2025 by rpki-client