This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/emXCf-FzC7zuhmlwYG0DcvLriRU.roa File: emXCf-FzC7zuhmlwYG0DcvLriRU.roa (raw, json) Hash identifier: EFnC6bKfSRtRiQnUF8ELAMN9ixeu5rkT4KhPnbAz87U= Subject key identifier: 7A:65:C2:7F:E1:73:0B:BC:EE:86:69:70:60:6D:03:72:F2:EB:89:15 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 01971FD5313150266E8318484DD5E380E46E Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/emXCf-FzC7zuhmlwYG0DcvLriRU.roa Signing time: Fri 30 May 2025 06:15:54 +0000 ROA not before: Fri 30 May 2025 06:15:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:1f:d5:31:31:50:26:6e:83:18:48:4d:d5:e3:80:e4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: May 30 06:15:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a65c27fe1730bbcee866970606d0372f2eb8915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:77:0a:9c:c1:3c:7e:15:47:ea:9e:35:33: b3:db:54:bc:6f:6a:69:0a:37:4e:33:cf:16:72:0f: 5c:8d:d8:ef:f1:31:da:7e:b5:fb:16:0c:80:34:f9: 6b:5d:ec:6e:8c:52:59:b2:ba:72:86:9e:c9:07:71: bd:56:af:e8:20:89:68:21:81:f8:5c:45:0d:35:17: f2:9f:70:e1:47:f9:a6:cc:9b:a8:04:7c:64:aa:c3: fd:52:80:c1:0c:7a:e9:8c:d2:93:bf:a2:a1:f3:e5: c3:a6:31:16:b6:88:63:7d:e9:71:03:8e:25:39:98: a3:3c:20:ec:ce:e9:df:3d:5e:cf:90:1b:f7:c3:b8: 15:a4:e2:7a:d5:b3:df:ce:23:37:94:78:23:e7:db: 3c:08:10:44:6d:a5:77:44:66:96:e6:d2:a5:ee:7d: d1:86:b7:88:ed:04:8b:2f:ae:e1:a4:89:c2:f4:a9: 99:b9:87:f3:7a:59:29:71:18:d6:00:86:9e:16:de: 7b:7d:69:54:5f:0a:33:80:29:87:44:a2:88:e7:ed: a9:85:86:88:d1:3f:ac:9e:92:b4:72:e9:73:08:1e: b2:56:00:94:3f:7c:b6:01:10:72:0a:52:e6:ca:71: c1:c0:2b:bb:30:88:eb:4a:83:4c:e9:3d:b7:cf:68: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:C2:7F:E1:73:0B:BC:EE:86:69:70:60:6D:03:72:F2:EB:89:15 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/emXCf-FzC7zuhmlwYG0DcvLriRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 Signature Algorithm: sha256WithRSAEncryption 5a:c5:95:fb:9c:22:df:ed:32:07:01:49:c2:72:88:d8:e6:8d: c5:3f:a4:7c:ea:8a:34:a7:dc:74:29:67:19:80:56:83:4e:87: b8:6f:e4:ab:6e:4c:04:51:e8:d3:02:fd:cc:73:7c:b4:40:3e: 7e:6d:5a:89:d7:17:bc:f6:f8:d3:22:e9:bc:73:7c:aa:3b:94: 3d:95:d0:e9:8d:32:a9:69:36:88:99:56:4e:27:fc:11:ac:5c: 84:f4:6f:25:40:9f:4a:a5:4b:37:9f:86:3b:00:bf:74:5f:63: f2:fc:62:33:ef:df:60:cb:c8:da:4a:48:b7:87:9a:db:57:d8: a0:a3:85:d6:3e:f6:4e:c8:2f:5a:1c:ac:dc:a3:d7:49:ac:38: 4b:14:ef:7a:80:68:62:0d:da:76:f9:41:10:67:d3:f0:48:56: 39:d7:ad:60:df:e2:dc:06:3a:f7:39:98:43:42:79:25:f0:b9: d0:10:42:4a:0f:72:db:59:c5:19:22:a1:9a:9b:cd:e5:5f:3a: f5:ea:3b:f5:d3:c2:95:ec:b1:a0:77:12:b4:63:df:28:4a:da: c6:bf:44:4b:0b:b7:34:fe:e4:0a:03:4d:8d:52:17:de:96:58: c8:ba:39:6f:e0:e5:78:20:15:93:79:1b:ea:90:55:f0:92:cb: cc:dc:30:a5 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZcf1TExUCZugxhITdXjgORuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNTMwMDYxNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTY1YzI3ZmUxNzMwYmJjZWU4NjY5NzA2MDZkMDM3MmYyZWI4OTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/13CpzBPH4VR+qeNTOz21S8b2pp CjdOM88Wcg9cjdjv8THafrX7FgyANPlrXexujFJZsrpyhp7JB3G9Vq/oIIloIYH4 XEUNNRfyn3DhR/mmzJuoBHxkqsP9UoDBDHrpjNKTv6Kh8+XDpjEWtohjfelxA44l OZijPCDszunfPV7PkBv3w7gVpOJ61bPfziM3lHgj59s8CBBEbaV3RGaW5tKl7n3R hreI7QSLL67hpInC9KmZuYfzelkpcRjWAIaeFt57fWlUXwozgCmHRKKI5+2phYaI 0T+snpK0culzCB6yVgCUP3y2ARByClLmynHBwCu7MIjrSoNM6T23z2hgXwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFHplwn/hcwu87oZpcGBtA3Ly64kVMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvZW1YQ2YtRnpDN3p1aG1sd1lHMERjdkxyaVJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im MA0GCSqGSIb3DQEBCwUAA4IBAQBaxZX7nCLf7TIHAUnCcojY5o3FP6R86oo0p9x0 KWcZgFaDToe4b+SrbkwEUejTAv3Mc3y0QD5+bVqJ1xe89vjTIum8c3yqO5Q9ldDp jTKpaTaImVZOJ/wRrFyE9G8lQJ9KpUs3n4Y7AL90X2Py/GIz799gy8jaSki3h5rb V9igo4XWPvZOyC9aHKzco9dJrDhLFO96gGhiDdp2+UEQZ9PwSFY5161g3+LcBjr3 OZhDQnkl8LnQEEJKD3LbWcUZIqGam83lXzr16jv108KV7LGgdxK0Y98oStrGv0RL C7c0/uQKA02NUhfelljIujlv4OV4IBWTeRvqkFXwksvM3DCl -----END CERTIFICATE-----Generated at Thu Dec 18 09:31:35 2025 by rpki-client