This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5CmwmzdcT_QNnH4hQgXEq2AQ8fI.roa File: 5CmwmzdcT_QNnH4hQgXEq2AQ8fI.roa (raw, json) Hash identifier: lLeY/03qF2PROQs8B4h4rV4vaGFeLE9e1co5xorpfgw= Subject key identifier: E4:29:B0:9B:37:5C:4F:F4:0D:9C:7E:21:42:05:C4:AB:60:10:F1:F2 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 0196A320133B0A19C3860A0C4872BCC8F412 Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5CmwmzdcT_QNnH4hQgXEq2AQ8fI.roa Signing time: Tue 06 May 2025 01:05:10 +0000 ROA not before: Tue 06 May 2025 01:05:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:a31f:7621/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a3:20:13:3b:0a:19:c3:86:0a:0c:48:72:bc:c8:f4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: May 6 01:05:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e429b09b375c4ff40d9c7e214205c4ab6010f1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:7e:85:fe:d5:17:ab:5e:f0:e0:51:5e:a4: 7b:ec:e2:82:e2:f2:90:35:36:80:f6:cb:07:a8:53: ca:8d:59:69:20:a2:ef:5a:1d:e4:e5:26:14:54:a0: 9c:82:f0:73:ed:89:fc:4a:a3:cc:4a:8f:2f:96:73: bc:27:08:9a:d7:bb:d2:dc:c2:e4:21:14:0a:0d:25: 12:e7:25:82:1b:e3:1e:7c:09:85:d3:c9:02:ac:cb: 34:f6:bc:ca:be:19:18:4f:a7:9d:3f:c7:0e:22:98: 0f:3a:3d:00:6b:6c:9d:76:cd:da:41:48:f2:9b:a1: b0:fe:bb:ca:32:9a:06:59:e2:cf:7a:dc:90:f3:7f: 5c:fd:bb:01:be:1b:86:55:30:8a:3b:7e:c8:8e:87: 78:cd:ee:0c:f6:f5:d1:bf:68:c3:42:a8:9e:fa:51: 43:2a:0b:02:b6:60:6f:b5:d3:2f:81:ad:df:08:60: 19:fc:4b:f7:49:cf:f6:bf:6e:81:7e:2a:de:5d:61: 63:6e:2f:a6:ad:1f:b9:95:f6:c6:9c:90:6e:2c:80: 84:58:0a:9f:fc:58:b3:52:a0:0b:39:1e:0b:55:6d: c6:ad:4d:33:8a:b5:21:9a:a9:14:78:69:6b:0c:1b: 12:4a:ba:ae:3e:13:b4:30:4c:46:62:74:8b:80:70: fa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:29:B0:9B:37:5C:4F:F4:0D:9C:7E:21:42:05:C4:AB:60:10:F1:F2 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5CmwmzdcT_QNnH4hQgXEq2AQ8fI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:a31f:7621/128 Signature Algorithm: sha256WithRSAEncryption c2:b2:b3:20:b1:61:d2:7a:b0:ec:de:6c:3a:fd:94:15:18:cc: b5:0f:bc:cb:6f:79:81:de:4c:62:71:15:77:bd:6d:7d:67:12: 47:aa:4d:66:24:2f:6f:1c:05:58:2e:53:91:bf:ad:ba:2e:a9: 4a:5c:c2:be:f2:93:5a:e1:9b:70:f6:4c:c0:01:90:16:51:ea: 33:81:c7:bf:f2:4d:be:cb:ef:cf:43:a8:d0:64:65:19:ae:85: 9f:84:3a:cd:76:c6:b4:26:cc:21:f5:c0:97:01:20:e4:6d:78: 81:ba:5f:9e:d8:f3:80:5b:7f:cd:53:0e:18:80:a2:47:24:e7: 9a:04:38:67:2b:89:56:13:9d:20:8d:45:dd:bf:6d:b0:80:96: 9e:50:b8:2c:4d:cd:54:97:25:dd:69:53:58:b2:07:84:64:f3: c3:fc:66:74:df:9e:5d:27:c0:6c:b1:26:ce:ff:9f:3c:07:17: f7:34:78:49:cb:1f:06:bd:a8:07:81:d6:e9:55:9e:24:d3:7f: 19:da:05:72:e8:b4:dd:c7:8a:99:5b:15:41:d7:30:90:9e:1a: 54:24:62:d2:54:91:76:18:59:25:6b:29:c2:ea:95:3b:80:6b: 2c:2b:1b:28:5e:2c:c5:1f:6c:b4:f9:41:da:f7:69:d5:76:79: 12:e0:55:d9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZajIBM7ChnDhgoMSHK8yPQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNTA2MDEwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDI5YjA5YjM3NWM0ZmY0MGQ5YzdlMjE0MjA1YzRhYjYwMTBmMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3t+hf7VF6te8OBRXqR77OKC4vKQ NTaA9ssHqFPKjVlpIKLvWh3k5SYUVKCcgvBz7Yn8SqPMSo8vlnO8Jwia17vS3MLk IRQKDSUS5yWCG+MefAmF08kCrMs09rzKvhkYT6edP8cOIpgPOj0Aa2ydds3aQUjy m6Gw/rvKMpoGWeLPetyQ839c/bsBvhuGVTCKO37Ijod4ze4M9vXRv2jDQqie+lFD KgsCtmBvtdMvga3fCGAZ/Ev3Sc/2v26BfireXWFjbi+mrR+5lfbGnJBuLICEWAqf /FizUqALOR4LVW3GrU0zirUhmqkUeGlrDBsSSrquPhO0MExGYnSLgHD6/QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFOQpsJs3XE/0DZx+IUIFxKtgEPHyMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvNUNtd216ZGNUX1FObkg0aFFnWEVxMkFROGZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGWox92ITANBgkqhkiG9w0BAQsFAAOCAQEAwrKzILFh0nqw7N5sOv2UFRjM tQ+8y295gd5MYnEVd71tfWcSR6pNZiQvbxwFWC5Tkb+tui6pSlzCvvKTWuGbcPZM wAGQFlHqM4HHv/JNvsvvz0Oo0GRlGa6Fn4Q6zXbGtCbMIfXAlwEg5G14gbpfntjz gFt/zVMOGICiRyTnmgQ4ZyuJVhOdII1F3b9tsICWnlC4LE3NVJcl3WlTWLIHhGTz w/xmdN+eXSfAbLEmzv+fPAcX9zR4ScsfBr2oB4HW6VWeJNN/GdoFcui03ceKmVsV QdcwkJ4aVCRi0lSRdhhZJWspwuqVO4BrLCsbKF4sxR9stPlB2vdp1XZ5EuBV2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 00:21:49 2025 by rpki-client