This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-ZSoyrF8RWC21qGlxPQNJG7_Sok.roa
File: 1-ZSoyrF8RWC21qGlxPQNJG7_Sok.roa (raw, json)
Hash identifier: ua1vB3QvTguXGt/fzETDjXhzoqw0nzPUSu0nYefWIV0=
Subject key identifier: F9:94:A8:CA:B1:7C:45:60:B6:D6:A1:A5:C4:F4:0D:24:6E:FF:4A:89
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971F6494FBCDEDD30F16A6717724AB3DF3
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-ZSoyrF8RWC21qGlxPQNJG7_Sok.roa
Signing time: Fri 30 May 2025 04:12:54 +0000
ROA not before: Fri 30 May 2025 04:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1f:64:94:fb:cd:ed:d3:0f:16:a6:71:77:24:ab:3d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 30 04:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f994a8cab17c4560b6d6a1a5c4f40d246eff4a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:92:48:5a:5b:87:33:85:4a:7b:34:1e:53:
2a:65:ee:14:eb:70:49:07:9e:61:16:a9:58:da:a6:
ec:8c:f6:c3:fa:58:e6:a5:a0:0a:ad:df:4e:eb:66:
3f:1f:9d:41:7c:ed:f5:df:97:87:7a:ca:1f:41:28:
6f:f6:4d:e0:fc:e8:b8:6e:4b:6b:45:60:6b:e7:20:
77:c4:79:b4:e6:9a:fe:f9:c3:5e:ec:6f:0b:88:e3:
e0:fe:94:10:1e:c3:81:c9:fa:56:dc:d7:cc:0c:68:
24:0c:85:9d:a7:ef:a2:79:44:28:b0:53:fa:45:fc:
60:4e:85:17:84:e1:9e:e9:d9:74:87:16:23:85:fc:
83:04:df:f4:88:e3:60:5d:a6:e9:d3:d2:b4:31:49:
ad:7c:b3:f8:55:60:e9:59:02:88:43:f3:6f:e8:ca:
1e:46:57:c9:48:4f:f6:d6:73:54:0c:0e:77:c2:af:
08:35:31:5c:83:02:12:a0:f8:66:16:ff:e5:e6:2b:
49:78:b4:51:09:90:92:58:38:43:99:08:f3:91:eb:
74:04:72:43:82:d1:08:fb:3a:25:c6:0c:f7:d6:c0:
f5:5b:ab:40:4d:7b:75:e5:cc:5e:98:e2:f1:96:bb:
45:10:14:ce:c5:0c:f4:3e:f7:9b:79:1a:85:5d:c8:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:A8:CA:B1:7C:45:60:B6:D6:A1:A5:C4:F4:0D:24:6E:FF:4A:89
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-ZSoyrF8RWC21qGlxPQNJG7_Sok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
c2:4b:47:3a:d1:ea:11:b3:f9:2b:ca:77:9a:8c:3b:ea:8f:7f:
b1:df:f2:59:c4:8e:97:e9:7e:0f:53:4f:5b:e6:48:7f:dc:09:
d2:f1:c2:2d:e8:21:10:46:6b:84:2d:14:e6:4b:03:14:86:49:
17:12:3d:c3:4a:4f:d4:2e:66:87:1d:20:77:d4:77:99:f9:7a:
f2:dc:06:e3:01:a5:d1:e5:ef:39:b0:aa:02:09:c9:45:47:49:
46:b3:41:2e:32:22:47:81:6e:eb:2b:9c:cf:4d:ac:2f:4e:be:
95:18:9d:df:da:cc:b4:4f:32:ef:22:ee:9e:2a:b5:3b:9d:8e:
46:41:99:3e:ff:36:41:fe:5b:ac:7e:3d:b0:57:74:16:cf:91:
07:c2:95:91:f2:a3:8e:f5:49:52:e6:a1:aa:f7:b3:9c:ad:6c:
72:5c:95:59:c2:38:67:18:95:8a:49:8e:22:4c:73:cc:60:4a:
e7:c5:24:67:ed:69:2c:61:ca:65:ea:39:23:ac:36:1a:68:1d:
d0:37:12:90:37:cb:09:55:72:b9:27:ed:58:64:98:0b:a4:ac:
4f:c2:4d:2c:3e:5a:8b:da:aa:a3:7e:2f:59:8b:3f:d7:8e:41:
f7:30:7d:d8:e3:51:fa:2b:f7:bf:d3:7c:53:2d:5f:c7:97:83:
04:27:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:52:43 2025 by rpki-client