This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/BycEiD3wFPFl3Xdep0JY_05KWDk.roa
File: BycEiD3wFPFl3Xdep0JY_05KWDk.roa (raw, json)
Hash identifier: tpuPgPV6Y2CeeRdyVrNdWspiLUUU1noh0+dGxM9q92s=
Subject key identifier: 07:27:04:88:3D:F0:14:F1:65:DD:77:5E:A7:42:58:FF:4E:4A:58:39
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 019AE03B36D6FDDF1FA42401250F5F8D53FA
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/BycEiD3wFPFl3Xdep0JY_05KWDk.roa
Signing time: Tue 02 Dec 2025 18:02:48 +0000
ROA not before: Tue 02 Dec 2025 18:02:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a0a:c380::/29 maxlen: 29
2a0a:f580::/32 maxlen: 32
2a0a:f581::/32 maxlen: 32
2a0e:7f40::/32 maxlen: 32
2a0e:7f41::/32 maxlen: 32
2a0e:7f42::/32 maxlen: 32
2a11:4640::/29 maxlen: 29
2a11:5880::/29 maxlen: 29
2a11:8440::/32 maxlen: 32
2a11:8441::/32 maxlen: 32
2a11:85c0::/29 maxlen: 29
2a11:8f80::/32 maxlen: 32
2a11:8f81::/32 maxlen: 32
2a11:8f82::/32 maxlen: 32
2a11:9fc0::/29 maxlen: 29
2a11:acc0::/29 maxlen: 29
2a11:be80::/29 maxlen: 29
2a11:c100::/32 maxlen: 32
2a11:c101::/32 maxlen: 32
2a11:c440::/29 maxlen: 29
2a11:c540::/29 maxlen: 29
2a11:c700::/29 maxlen: 29
2a11:d081::/32 maxlen: 32
2a11:d082::/32 maxlen: 32
2a11:e540::/29 maxlen: 29
2a11:e7c0::/29 maxlen: 29
2a11:f180::/32 maxlen: 32
2a11:f181::/32 maxlen: 32
2a11:f182::/32 maxlen: 32
2a11:fec0::/29 maxlen: 29
2a12:10c0::/29 maxlen: 29
2a12:1142::/32 maxlen: 32
2a12:1143::/32 maxlen: 32
2a12:1144::/32 maxlen: 32
2a12:1145::/32 maxlen: 32
2a12:15c0::/29 maxlen: 29
2a12:1800::/32 maxlen: 32
2a12:1801::/32 maxlen: 32
2a12:1802::/32 maxlen: 32
2a12:1940::/29 maxlen: 29
2a12:1cc0::/32 maxlen: 32
2a12:1cc1::/32 maxlen: 32
2a12:25c0::/29 maxlen: 29
2a12:2c40::/29 maxlen: 29
2a12:34c0::/29 maxlen: 29
2a12:3ac0::/29 maxlen: 29
2a12:3b40::/32 maxlen: 32
2a12:3b41::/32 maxlen: 32
2a12:3b42::/32 maxlen: 32
2a12:4240::/29 maxlen: 29
2a12:4500::/29 maxlen: 29
2a12:4c00::/29 maxlen: 29
2a12:5580::/29 maxlen: 29
2a12:7980::/29 maxlen: 29
2a12:8800::/29 maxlen: 29
2a12:9700::/29 maxlen: 29
2a12:c180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e0:3b:36:d6:fd:df:1f:a4:24:01:25:0f:5f:8d:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Dec 2 18:02:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=072704883df014f165dd775ea74258ff4e4a5839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:31:7f:a5:79:3b:81:2b:9b:4e:f8:3c:4d:
d8:f7:7e:36:f1:ea:1e:2c:58:e6:40:9f:8f:e5:5f:
3b:ee:c4:51:01:96:55:95:f5:39:db:8e:03:78:f4:
a4:ea:1d:66:65:d4:04:19:6a:7e:f9:75:c8:ce:5d:
ea:99:df:89:df:bb:2f:05:7c:e0:e8:10:ff:78:92:
63:50:c7:29:00:07:c4:ea:98:c6:8a:39:27:02:56:
76:66:ff:41:bd:46:16:60:17:9b:b3:37:4c:f6:d8:
3f:af:0e:e4:12:48:a7:41:e5:88:4f:f6:d7:01:86:
36:28:a8:c3:5e:c5:c9:ff:ed:50:c9:d5:90:3e:b1:
8d:5b:73:d7:f2:c2:e9:7a:98:a6:72:1d:c8:ca:8d:
3a:4e:44:65:75:8d:68:1d:4e:4a:22:cf:ae:79:37:
28:f0:db:82:d2:63:b6:20:93:35:d9:1b:c0:58:23:
bd:e4:5b:8c:c4:9f:9e:6d:da:4d:b6:90:a5:77:af:
90:ac:52:55:c7:e5:b7:b2:6f:b2:38:f9:74:6e:71:
66:88:08:9d:9c:f5:68:31:83:d7:3b:45:bc:1e:c2:
80:55:f3:a4:75:c5:0a:68:90:81:4c:d7:ed:87:3a:
fc:82:03:8b:c1:47:57:03:75:a2:d2:73:b7:df:4f:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:04:88:3D:F0:14:F1:65:DD:77:5E:A7:42:58:FF:4E:4A:58:39
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/BycEiD3wFPFl3Xdep0JY_05KWDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c380::/29
2a0a:f580::/31
2a0e:7f40::-2a0e:7f42:ffff:ffff:ffff:ffff:ffff:ffff
2a11:4640::/29
2a11:5880::/29
2a11:8440::/31
2a11:85c0::/29
2a11:8f80::-2a11:8f82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:9fc0::/29
2a11:acc0::/29
2a11:be80::/29
2a11:c100::/31
2a11:c440::/29
2a11:c540::/29
2a11:c700::/29
2a11:d081::-2a11:d082:ffff:ffff:ffff:ffff:ffff:ffff
2a11:e540::/29
2a11:e7c0::/29
2a11:f180::-2a11:f182:ffff:ffff:ffff:ffff:ffff:ffff
2a11:fec0::/29
2a12:10c0::/29
2a12:1142::-2a12:1145:ffff:ffff:ffff:ffff:ffff:ffff
2a12:15c0::/29
2a12:1800::-2a12:1802:ffff:ffff:ffff:ffff:ffff:ffff
2a12:1940::/29
2a12:1cc0::/31
2a12:25c0::/29
2a12:2c40::/29
2a12:34c0::/29
2a12:3ac0::/29
2a12:3b40::-2a12:3b42:ffff:ffff:ffff:ffff:ffff:ffff
2a12:4240::/29
2a12:4500::/29
2a12:4c00::/29
2a12:5580::/29
2a12:7980::/29
2a12:8800::/29
2a12:9700::/29
2a12:c180::/29
Signature Algorithm: sha256WithRSAEncryption
39:c7:b5:38:b3:df:00:83:6f:18:12:be:cb:d6:99:d8:1d:8e:
65:23:48:35:c5:70:c5:13:05:71:51:1b:8d:68:78:b7:23:d1:
48:54:4f:32:b2:9a:ff:18:8d:ea:c0:38:69:92:31:4f:0a:29:
6a:cb:fe:f5:1e:91:77:de:12:db:9c:88:7b:a8:7b:90:47:73:
8a:a4:23:71:16:26:ae:26:b0:1d:20:b9:b5:36:71:2c:45:01:
3b:a5:9d:1d:46:8b:dc:61:03:80:22:57:6d:03:04:f0:4c:5f:
fb:83:f1:71:1a:ff:c7:12:c1:1f:52:32:54:d4:5e:9b:93:42:
cc:f6:22:aa:4a:fc:fb:43:42:30:95:be:4a:49:b6:8c:4d:6d:
e8:e3:3c:2d:95:4d:44:e6:10:29:d4:72:6e:26:88:a2:73:f8:
a5:88:5f:44:4c:11:01:8e:91:0f:ac:7c:da:39:01:79:79:09:
79:22:52:44:9d:c5:be:97:ce:c1:6b:3e:90:e3:4e:c1:94:b4:
1c:21:25:f1:f6:bc:5b:56:72:69:84:b0:7a:a4:62:cf:74:1f:
a7:d0:dd:92:62:93:e2:06:ab:f1:72:03:88:ab:95:09:29:12:
af:47:76:d4:97:b6:b6:37:a2:58:73:85:0e:52:6b:29:fc:72:
fd:ab:83:07
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgISAZrgOzbW/d8fpCQBJQ9fjVP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2
MDJmYmYwHhcNMjUxMjAyMTgwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzI3MDQ4ODNkZjAxNGYxNjVkZDc3NWVhNzQyNThmZjRlNGE1ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLgxf6V5O4Erm074PE3Y93428eoe
LFjmQJ+P5V877sRRAZZVlfU5244DePSk6h1mZdQEGWp++XXIzl3qmd+J37svBXzg
6BD/eJJjUMcpAAfE6pjGijknAlZ2Zv9BvUYWYBebszdM9tg/rw7kEkinQeWIT/bX
AYY2KKjDXsXJ/+1QydWQPrGNW3PX8sLpepimch3Iyo06TkRldY1oHU5KIs+ueTco
8NuC0mO2IJM12RvAWCO95FuMxJ+ebdpNtpCld6+QrFJVx+W3sm+yOPl0bnFmiAid
nPVoMYPXO0W8HsKAVfOkdcUKaJCBTNfthzr8ggOLwUdXA3Wi0nO330+3SQIDAQAB
o4IDXDCCA1gwHQYDVR0OBBYEFAcnBIg98BTxZd13XqdCWP9OSlg5MB8GA1UdIwQY
MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt
NTUxMDQxNzNiMTgwLzEvQnljRWlEM3dGUEZsM1hkZXAwSllfMDVLV0RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw
LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBcAYIKwYBBQUHAQcBAf8EggFfMIIBWzCCAVcEAgACMIIB
TwMFAyoKw4ADBQEqCvWAMA4DBQYqDn9AAwUAKg5/QgMFAyoRRkADBQMqEViAAwUB
KhGEQAMFAyoRhcAwDgMFByoRj4ADBQAqEY+CAwUDKhGfwAMFAyoRrMADBQMqEb6A
AwUBKhHBAAMFAyoRxEADBQMqEcVAAwUDKhHHADAOAwUAKhHQgQMFACoR0IIDBQMq
EeVAAwUDKhHnwDAOAwUHKhHxgAMFACoR8YIDBQMqEf7AAwUDKhIQwDAOAwUBKhIR
QgMFASoSEUQDBQMqEhXAMA0DBAMqEhgDBQAqEhgCAwUDKhIZQAMFASoSHMADBQMq
EiXAAwUDKhIsQAMFAyoSNMADBQMqEjrAMA4DBQYqEjtAAwUAKhI7QgMFAyoSQkAD
BQMqEkUAAwUDKhJMAAMFAyoSVYADBQMqEnmAAwUDKhKIAAMFAyoSlwADBQMqEsGA
MA0GCSqGSIb3DQEBCwUAA4IBAQA5x7U4s98Ag28YEr7L1pnYHY5lI0g1xXDFEwVx
URuNaHi3I9FIVE8yspr/GI3qwDhpkjFPCilqy/71HpF33hLbnIh7qHuQR3OKpCNx
FiauJrAdILm1NnEsRQE7pZ0dRovcYQOAIldtAwTwTF/7g/FxGv/HEsEfUjJU1F6b
k0LM9iKqSvz7Q0Iwlb5KSbaMTW3o4zwtlU1E5hAp1HJuJoiic/iliF9ETBEBjpEP
rHzaOQF5eQl5IlJEncW+l87Baz6Q407BlLQcISXx9rxbVnJphLB6pGLPdB+n0N2S
YpPiBqvxcgOIq5UJKRKvR3bUl7a2N6JYc4UOUmsp/HL9q4MH
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:55:43 2025 by rpki-client