This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vm61yrdPZTqRcNMEkibmNbcWvbc.roa
File: vm61yrdPZTqRcNMEkibmNbcWvbc.roa (raw, json)
Hash identifier: 40lSX6ItJ/M3w/HamtOB469jeISApIZaNPoMYl4C7y8=
Subject key identifier: BE:6E:B5:CA:B7:4F:65:3A:91:70:D3:04:92:26:E6:35:B7:16:BD:B7
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019703B83B009C0CE755A7B0BD5D946E4939
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vm61yrdPZTqRcNMEkibmNbcWvbc.roa
Signing time: Sat 24 May 2025 19:14:54 +0000
ROA not before: Sat 24 May 2025 19:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:03:b8:3b:00:9c:0c:e7:55:a7:b0:bd:5d:94:6e:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 19:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be6eb5cab74f653a9170d3049226e635b716bdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:8e:94:b7:a2:16:73:d5:0d:a7:32:db:9f:
72:16:0d:78:d6:af:9b:e3:26:85:24:8e:e0:4d:85:
2e:c6:53:df:3e:6a:f8:4b:ec:cc:e8:86:af:5b:d2:
3e:f1:b2:de:04:26:cf:55:a9:d7:5a:13:c8:a9:cd:
6c:1d:3c:99:6b:b9:f4:e5:98:2e:f5:1f:b5:3d:f1:
0a:11:cc:46:30:99:0b:42:af:eb:3b:26:7f:3d:05:
0c:0f:9b:5c:e9:c1:5f:4f:34:75:31:74:a2:db:1a:
b6:fe:fe:a1:59:85:a9:2c:06:43:5d:ca:fb:32:ae:
b7:39:6e:a1:71:5d:9c:50:dd:06:b9:0a:1a:3e:d8:
73:34:e1:9d:0b:90:44:df:e0:43:ac:6c:30:d4:22:
d5:11:d0:4a:5f:6b:95:ff:ec:f8:82:5b:a4:66:6c:
d2:45:cc:84:99:ef:50:b3:38:e7:c7:4a:e6:b6:dd:
22:58:f7:3f:13:b2:46:a2:0f:28:77:53:11:ee:1c:
ed:3e:4b:20:81:01:28:2f:b4:21:4d:67:3f:27:c2:
8a:10:0d:82:71:28:36:52:b5:90:ee:cc:f7:ff:12:
3a:cc:3e:7e:a0:eb:e2:b0:0a:af:85:d9:be:c9:61:
b3:50:05:e7:56:e0:f1:e8:47:46:03:9e:c8:73:41:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6E:B5:CA:B7:4F:65:3A:91:70:D3:04:92:26:E6:35:B7:16:BD:B7
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vm61yrdPZTqRcNMEkibmNbcWvbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
63:b2:ac:a7:cc:33:fa:9e:82:61:c9:29:d7:12:25:d7:81:c7:
98:86:d5:77:d8:c9:9a:57:8d:97:3f:30:2e:48:c1:4f:64:4e:
2e:d4:04:1f:49:02:63:3d:30:54:76:a9:7c:bb:6d:e6:f7:12:
d4:89:38:c9:10:ff:97:ff:29:91:21:79:dd:ff:5e:4e:34:8a:
d8:3c:93:d6:84:73:5b:6c:1f:61:5e:87:0d:3e:ff:e0:10:80:
d8:99:f5:7a:88:57:2e:19:4c:28:0d:cb:d3:e8:e7:cf:49:35:
19:1b:45:1b:9c:55:da:be:8c:47:e2:91:0d:c7:43:f0:cf:d4:
cb:cd:4d:62:99:96:de:fb:9b:20:19:d1:72:3c:33:a3:9b:a7:
4b:78:43:9a:64:61:24:6a:9a:04:bc:fa:1c:55:2f:01:4f:c4:
7e:08:1b:37:26:fe:71:64:a9:d7:65:b0:22:1a:9d:95:2e:49:
0e:e4:4a:d8:0e:7d:1d:d1:2a:0b:cf:1e:ae:a0:4b:5c:55:0e:
a5:57:af:17:56:ad:1d:ea:fe:09:cd:49:96:da:88:59:34:7d:
bf:45:1c:66:22:fb:cb:a9:01:3e:36:8b:2a:bd:c0:8a:ed:c5:
68:55:ed:42:e9:00:d6:bf:9e:c6:d6:8c:ba:61:19:84:cf:b9:
8d:b5:cf:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:58:38 2025 by rpki-client