This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uR_DKYXK1Kl_LvopwWqz5_tMtEg.roa File: uR_DKYXK1Kl_LvopwWqz5_tMtEg.roa (raw, json) Hash identifier: 5t7uKxLlCIszrSgQKU9Fu8oldmJDZ80R/lNjFKGdE1k= Subject key identifier: B9:1F:C3:29:85:CA:D4:A9:7F:2E:FA:29:C1:6A:B3:E7:FB:4C:B4:48 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 0196F8C7A1D06AA12340CBBBC5FE759ED23B Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uR_DKYXK1Kl_LvopwWqz5_tMtEg.roa Signing time: Thu 22 May 2025 16:15:54 +0000 ROA not before: Thu 22 May 2025 16:15:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:f8:c7:a1:d0:6a:a1:23:40:cb:bb:c5:fe:75:9e:d2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: May 22 16:15:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b91fc32985cad4a97f2efa29c16ab3e7fb4cb448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:5a:98:fd:27:0f:b4:73:89:6e:e8:71:5a: ec:6a:83:9c:95:50:d7:65:c5:54:8c:43:77:ae:09: 81:b9:9e:9a:c2:c8:ab:35:4d:df:fb:cb:5b:71:3b: eb:57:2e:4d:6a:71:e1:f9:e0:76:69:8e:74:95:7d: 46:c7:60:ba:4c:d3:93:bd:21:00:55:a2:b4:82:49: 84:01:48:9a:f2:00:16:40:50:aa:7a:70:37:6e:72: 31:5e:2e:fe:f7:5d:0d:21:e5:d7:ae:b4:35:fc:14: 41:ef:5a:5f:54:ad:27:33:d3:06:6a:e4:77:71:29: 29:a5:b9:98:1b:fb:a0:c8:7b:43:5f:5b:8a:08:56: 6e:b7:07:bc:2f:18:49:75:b0:f0:b3:29:a3:78:93: 79:54:31:09:fc:07:4f:a0:80:c3:c3:5b:ae:05:64: 14:67:ed:00:3a:ae:19:3a:74:ae:ac:18:5e:cb:31: c7:a7:fa:e7:21:47:19:db:c6:23:2c:89:b5:0d:c6: d8:6d:29:a0:c2:95:90:6e:eb:04:de:79:45:58:78: 8c:17:42:4b:16:b9:f6:3f:f2:27:15:ae:90:4d:75: ec:d8:da:49:51:b2:42:92:13:23:34:c0:19:51:68: b7:c7:c3:96:a0:11:89:39:f6:8c:95:40:70:6d:88: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:C3:29:85:CA:D4:A9:7F:2E:FA:29:C1:6A:B3:E7:FB:4C:B4:48 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uR_DKYXK1Kl_LvopwWqz5_tMtEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 Signature Algorithm: sha256WithRSAEncryption 36:97:60:22:ea:ca:18:1e:76:ac:2b:db:52:79:f0:5e:73:00: bd:8c:08:56:26:7b:bd:51:5b:07:ff:98:7e:a9:57:4f:8d:43: 02:14:a4:fc:61:2a:a7:83:dd:ad:ac:b7:94:4c:e3:e9:53:01: b3:fd:64:0d:81:15:49:67:18:9e:d9:c0:48:07:f9:79:fa:55: 5b:0c:d4:e3:fe:e6:40:dd:df:92:6a:d3:97:d9:b7:54:a0:e0: d6:e1:55:82:fd:ea:69:be:1e:c8:ff:f3:05:07:89:7d:88:df: 87:9e:e7:13:35:13:ac:17:e3:a1:e8:64:92:d4:bd:fb:f7:dc: c0:65:97:e4:5e:20:01:aa:56:b6:4d:91:14:04:3d:71:5b:b0: 4c:1d:dc:c3:bd:b3:a1:fe:e5:68:6a:0c:5c:b1:9d:07:1c:3d: f2:c6:8e:5b:d5:91:b9:8f:1c:a5:07:36:c4:b6:5b:0d:78:2d: 0c:a4:b8:d5:4f:8f:34:a3:0e:39:46:57:e5:ac:67:15:51:fc: 2a:22:16:4c:4d:86:fb:cb:6b:5f:14:1d:e2:74:c1:86:7a:d0: a3:97:dd:f8:19:ab:b8:cc:e3:d4:d6:fc:70:98:a4:37:2f:5e: 92:51:c5:6a:71:2c:f3:b9:9d:aa:e3:80:a8:9f:08:0e:3f:c6: eb:87:0a:7c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZb4x6HQaqEjQMu7xf51ntI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNTIyMTYxNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTFmYzMyOTg1Y2FkNGE5N2YyZWZhMjljMTZhYjNlN2ZiNGNiNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sJamP0nD7RziW7ocVrsaoOclVDX ZcVUjEN3rgmBuZ6awsirNU3f+8tbcTvrVy5NanHh+eB2aY50lX1Gx2C6TNOTvSEA VaK0gkmEAUia8gAWQFCqenA3bnIxXi7+910NIeXXrrQ1/BRB71pfVK0nM9MGauR3 cSkppbmYG/ugyHtDX1uKCFZutwe8LxhJdbDwsymjeJN5VDEJ/AdPoIDDw1uuBWQU Z+0AOq4ZOnSurBheyzHHp/rnIUcZ28YjLIm1DcbYbSmgwpWQbusE3nlFWHiMF0JL Frn2P/InFa6QTXXs2NpJUbJCkhMjNMAZUWi3x8OWoBGJOfaMlUBwbYhMdQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFLkfwymFytSpfy76KcFqs+f7TLRIMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvdVJfREtZWEsxS2xfTHZvcHdXcXo1X3RNdEVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEANpdgIurKGB52rCvbUnnwXnMA vYwIViZ7vVFbB/+YfqlXT41DAhSk/GEqp4Pdray3lEzj6VMBs/1kDYEVSWcYntnA SAf5efpVWwzU4/7mQN3fkmrTl9m3VKDg1uFVgv3qab4eyP/zBQeJfYjfh57nEzUT rBfjoehkktS9+/fcwGWX5F4gAapWtk2RFAQ9cVuwTB3cw72zof7laGoMXLGdBxw9 8saOW9WRuY8cpQc2xLZbDXgtDKS41U+PNKMOOUZX5axnFVH8KiIWTE2G+8trXxQd 4nTBhnrQo5fd+BmruMzj1Nb8cJikNy9eklHFanEs87mdquOAqJ8IDj/G64cKfA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:01 2025 by rpki-client