This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Xa-7QHehrbT2iaeayccwxLFw7ZA.roa File: Xa-7QHehrbT2iaeayccwxLFw7ZA.roa (raw, json) Hash identifier: im0dMTvuUJj6uHQAqDmwLTb/65Lujmc6iM7uDMzhrm4= Subject key identifier: 5D:AF:BB:40:77:A1:AD:B4:F6:89:A7:9A:C9:C7:30:C4:B1:70:ED:90 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 019666666C33D57BF05EA0646FC29EBE4D4B Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Xa-7QHehrbT2iaeayccwxLFw7ZA.roa Signing time: Thu 24 Apr 2025 06:05:10 +0000 ROA not before: Thu 24 Apr 2025 06:05:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:6666:5f2/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:66:66:6c:33:d5:7b:f0:5e:a0:64:6f:c2:9e:be:4d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Apr 24 06:05:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5dafbb4077a1adb4f689a79ac9c730c4b170ed90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:48:e1:36:51:5e:87:91:80:4e:98:92:32:77: 7e:10:70:53:f5:2c:f9:95:35:74:d3:c5:40:d9:b0: ca:9d:77:db:db:37:51:59:29:68:d3:15:6c:3f:0f: 6c:b2:69:5e:68:9a:43:a2:f4:16:34:26:e1:3d:f6: d2:90:51:19:c5:d4:dc:58:da:d3:2c:65:b4:e9:f8: b8:a8:d3:f2:b9:37:45:75:0b:b5:ec:59:9a:3c:77: f8:26:f6:b7:0a:87:da:43:25:69:98:e5:1f:56:de: 87:31:2f:68:1a:8d:ff:5a:a2:50:af:b9:b9:6d:a4: 44:1f:52:f6:84:c1:54:17:bf:c5:02:5e:07:4c:f6: 4c:ae:65:31:7c:f8:73:5c:a1:ba:1b:cc:8b:76:8f: 65:bd:6f:a3:30:47:2f:33:d0:b2:20:41:be:58:83: 78:53:26:ef:f4:53:b1:c1:9d:94:a4:62:44:ee:83: fd:ad:f6:f1:b2:78:b1:70:0f:37:fd:b4:eb:a5:b1: a1:0a:6c:d7:cd:62:87:b6:16:22:ef:be:ce:7c:96: 60:ef:27:bf:44:70:5e:61:24:b2:c5:10:85:fd:ec: 34:33:f6:49:ed:20:ed:36:5f:bb:3b:2e:28:10:27: 34:63:18:ed:40:bb:ed:95:a7:58:23:30:bd:6c:63: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:BB:40:77:A1:AD:B4:F6:89:A7:9A:C9:C7:30:C4:B1:70:ED:90 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Xa-7QHehrbT2iaeayccwxLFw7ZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:6666:5f2/128 Signature Algorithm: sha256WithRSAEncryption 7c:38:d5:47:59:08:91:81:9c:51:59:33:23:7c:48:0d:af:75: 99:32:cf:95:96:3b:38:5f:ad:14:53:d6:84:dd:3f:d4:b5:75: 43:94:2b:56:f1:45:92:3a:a8:2d:d1:69:00:a8:0b:48:3e:c3: ba:45:11:e1:cd:3f:b9:95:f8:a8:15:f6:6e:52:03:59:07:74: 1f:e6:52:8b:27:e6:2a:8d:18:e7:35:b3:c2:80:ff:ef:f8:d9: 75:74:d3:00:2b:d5:14:69:1d:49:5f:b9:ea:8e:1b:77:30:98: ce:a0:bf:37:dc:66:90:98:ee:0a:d8:54:69:05:d7:37:f3:19: fd:40:b3:e2:8c:b6:fd:cf:70:25:c4:b6:1c:05:9c:c3:2c:63: ea:7e:7a:86:02:d5:cd:1c:4a:f2:1b:4a:e0:1b:f8:b7:51:a4: 26:76:a8:be:d7:13:8e:d7:6b:66:6f:c3:77:a2:bf:96:19:16: a5:6d:51:e4:36:5a:d8:c4:68:52:c3:0a:75:ba:f2:9d:85:54: f5:b0:82:5a:9f:7d:6c:0e:7d:15:bb:77:b9:c0:b9:eb:ea:84: 63:f4:2c:c5:20:45:55:64:85:24:14:c0:01:66:44:3a:aa:90: 25:bb:54:41:29:26:c6:6d:9e:4f:80:8d:e2:31:06:65:de:24: 97:c3:66:d5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZZmZmwz1XvwXqBkb8Kevk1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNDI0MDYwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGFmYmI0MDc3YTFhZGI0ZjY4OWE3OWFjOWM3MzBjNGIxNzBlZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80jhNlFeh5GATpiSMnd+EHBT9Sz5 lTV008VA2bDKnXfb2zdRWSlo0xVsPw9ssmleaJpDovQWNCbhPfbSkFEZxdTcWNrT LGW06fi4qNPyuTdFdQu17FmaPHf4Jva3CofaQyVpmOUfVt6HMS9oGo3/WqJQr7m5 baREH1L2hMFUF7/FAl4HTPZMrmUxfPhzXKG6G8yLdo9lvW+jMEcvM9CyIEG+WIN4 Uybv9FOxwZ2UpGJE7oP9rfbxsnixcA83/bTrpbGhCmzXzWKHthYi777OfJZg7ye/ RHBeYSSyxRCF/ew0M/ZJ7SDtNl+7Oy4oECc0YxjtQLvtladYIzC9bGM1wwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFF2vu0B3oa209omnmsnHMMSxcO2QMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvWGEtN1FIZWhyYlQyaWFlYXljY3d4TEZ3N1pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGWZmYF8jANBgkqhkiG9w0BAQsFAAOCAQEAfDjVR1kIkYGcUVkzI3xIDa91 mTLPlZY7OF+tFFPWhN0/1LV1Q5QrVvFFkjqoLdFpAKgLSD7DukUR4c0/uZX4qBX2 blIDWQd0H+ZSiyfmKo0Y5zWzwoD/7/jZdXTTACvVFGkdSV+56o4bdzCYzqC/N9xm kJjuCthUaQXXN/MZ/UCz4oy2/c9wJcS2HAWcwyxj6n56hgLVzRxK8htK4Bv4t1Gk JnaovtcTjtdrZm/Dd6K/lhkWpW1R5DZa2MRoUsMKdbrynYVU9bCCWp99bA59Fbt3 ucC56+qEY/QsxSBFVWSFJBTAAWZEOqqQJbtUQSkmxm2eT4CN4jEGZd4kl8Nm1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:08 2025 by rpki-client