This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vX3eqXaqrKV0iqLfQ1_WvpYkAEk.roa
File: vX3eqXaqrKV0iqLfQ1_WvpYkAEk.roa (raw, json)
Hash identifier: 8XpgCnTMjry+LwQkHC3e9DPO2ZT3TRBCXwdvo5xFsq8=
Subject key identifier: BD:7D:DE:A9:76:AA:AC:A5:74:8A:A2:DF:43:5F:D6:BE:96:24:00:49
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01972C7B6A18DEB466E1C1EEAA4B11844936
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vX3eqXaqrKV0iqLfQ1_WvpYkAEk.roa
Signing time: Sun 01 Jun 2025 17:12:54 +0000
ROA not before: Sun 01 Jun 2025 17:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:7b:6a:18:de:b4:66:e1:c1:ee:aa:4b:11:84:49:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 17:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd7ddea976aaaca5748aa2df435fd6be96240049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:59:92:9f:8d:b7:4a:dd:2f:c2:0f:d9:6e:
9c:f5:72:5a:5d:86:f6:db:68:a3:5b:ad:f3:9f:f8:
24:ca:2f:25:b7:81:a4:45:96:5f:30:ac:7d:5c:1a:
cc:f8:10:28:97:cf:9b:36:8b:ad:92:8a:1d:8a:86:
18:c8:ff:88:5b:40:c6:33:a1:ed:11:5a:1c:12:3d:
49:6f:7b:10:e6:fa:33:c3:7d:2a:2a:68:a9:fe:d6:
0a:4d:67:5b:7c:96:ed:e6:ad:69:be:a8:61:1f:3e:
00:f4:f6:8a:ac:5d:86:7d:8c:5c:43:9a:d0:91:dc:
7e:ac:b7:0e:41:c0:40:51:2a:a4:e6:22:d4:b5:f0:
ea:3e:be:67:e2:fe:dd:0f:4f:15:ec:fa:fe:00:b9:
ec:84:f7:b1:c6:85:72:8a:9b:33:83:28:07:3f:b2:
be:d2:ab:b8:b0:68:3a:26:c4:9d:c2:47:96:2f:3b:
fa:dc:29:b2:bf:c4:fd:0b:e4:65:44:27:77:51:b5:
ce:5a:e9:b3:2b:c6:9a:ef:4d:ca:66:1a:41:e5:55:
6c:10:67:b7:43:7c:df:63:a0:d8:86:34:09:a8:18:
30:88:fb:b4:b6:b7:d6:3d:a1:67:7c:39:62:26:9a:
d1:eb:c6:87:cd:31:42:ab:50:23:4d:77:8e:f3:3f:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:DE:A9:76:AA:AC:A5:74:8A:A2:DF:43:5F:D6:BE:96:24:00:49
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vX3eqXaqrKV0iqLfQ1_WvpYkAEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
9c:4e:6d:fd:8d:fb:34:7f:e4:e9:be:b8:48:d8:2e:35:2a:59:
5f:8f:38:e7:b8:97:bc:7a:24:a5:08:e3:f6:a1:8f:9f:86:51:
d5:a8:82:6c:a2:ba:7a:bf:0a:08:bf:9b:e9:32:23:3d:2d:ca:
a5:2a:1e:44:29:c0:25:3d:bb:29:e3:b2:c3:00:6e:40:a0:bf:
e6:1b:53:72:19:98:98:65:2f:5c:7c:c9:d6:f0:9e:ce:6f:b3:
b0:54:d6:7b:c8:70:4c:14:7a:83:5c:c4:67:8b:a5:ef:51:1f:
61:46:13:a4:5e:1a:8a:2d:30:2c:34:e6:f7:ce:b5:9c:7b:d6:
86:0c:e7:30:c3:d7:86:38:0a:0c:d2:e2:48:8b:51:82:88:9c:
e0:92:62:cd:5b:a1:7a:52:96:67:a1:7c:d9:79:dd:2b:f7:ef:
29:0b:bc:30:a9:e2:d7:e1:37:e6:8f:1d:f7:7d:b5:08:08:8a:
ef:e6:a6:ea:3f:0b:32:b1:62:c3:3c:cc:87:ff:cc:d2:65:49:
92:aa:36:f9:c0:ab:e5:0f:80:be:32:5f:7e:c6:ce:1a:d8:ac:
2b:a5:96:93:ce:08:58:cb:39:09:96:e4:6d:99:d5:c9:02:c7:
21:5c:c5:62:78:c7:f7:76:97:9f:9e:ee:c0:ea:0a:9e:bf:2b:
66:3b:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:06:13 2025 by rpki-client