This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/fbxiLqC9u6GPnCX55z_nk8kAC_0.roa File: fbxiLqC9u6GPnCX55z_nk8kAC_0.roa (raw, json) Hash identifier: +zK9lZ5mE/OR0q3eLIL2l12vVLaOOogeu/1os4/yE/s= Subject key identifier: 7D:BC:62:2E:A0:BD:BB:A1:8F:9C:25:F9:E7:3F:E7:93:C9:00:0B:FD Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93 Certificate serial: 019B3230EEF9572CE029DDDCADB78F035EF6 Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/fbxiLqC9u6GPnCX55z_nk8kAC_0.roa Signing time: Thu 18 Dec 2025 16:00:26 +0000 ROA not before: Thu 18 Dec 2025 16:00:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207881 IP address blocks: 2a0f:6940::/32 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:30:ee:f9:57:2c:e0:29:dd:dc:ad:b7:8f:03:5e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93 Validity Not Before: Dec 18 16:00:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7dbc622ea0bdbba18f9c25f9e73fe793c9000bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:32:fa:2c:b2:a0:38:65:ae:d7:4a:3e:be: b7:58:83:48:bc:d9:54:9f:5a:74:38:ae:51:fa:d9: e4:cf:f6:e0:58:50:5a:84:f1:b9:f5:68:d3:a8:70: b8:9f:4d:8c:0c:ef:cd:81:70:e6:03:0a:75:39:f8: 17:19:de:c8:3d:3d:77:a6:1e:f2:87:59:0f:b0:f3: ba:d5:72:cb:4f:65:d5:97:1c:15:b0:b9:e1:e2:6a: 92:a0:b8:4b:01:d5:c6:fc:51:27:44:d2:fc:4a:8f: 60:87:31:3b:41:98:a5:7b:b3:f9:64:f4:df:dc:24: 6f:f0:2b:60:af:17:41:f6:84:e7:73:b1:7a:5e:00: 44:8a:35:c2:3e:9c:8f:f1:65:5f:36:2c:03:d1:8a: 07:a4:65:7a:bd:39:7c:b3:50:a5:48:a2:ec:85:e0: 20:0e:4c:ae:f1:be:3c:4b:f6:bc:90:03:e9:f3:a7: 09:e2:84:8e:62:97:2b:ca:62:e2:e7:5f:1f:e3:f2: 1e:f1:df:a9:d7:bc:c6:f2:1f:86:9e:f0:0d:23:34: b7:df:60:13:9a:b5:23:10:ef:76:be:0d:5f:0a:ff: fb:1c:b5:a8:58:e0:1c:fb:b9:04:b8:8d:b8:01:2a: 6a:9a:94:a5:67:28:88:c2:e8:5e:f1:1b:3b:da:c4: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BC:62:2E:A0:BD:BB:A1:8F:9C:25:F9:E7:3F:E7:93:C9:00:0B:FD X509v3 Authority Key Identifier: keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/fbxiLqC9u6GPnCX55z_nk8kAC_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6940::/32 Signature Algorithm: sha256WithRSAEncryption 2e:a2:f3:a2:76:df:de:d8:81:01:49:da:11:78:eb:d1:00:94: 34:85:c7:91:35:43:84:9f:9b:76:81:fc:47:f7:9e:92:1f:0a: 3d:62:b5:c5:d6:10:d3:29:d9:38:96:33:12:b5:b4:e4:44:a8: 16:ce:2f:e0:2e:22:a3:3d:5d:84:ce:73:7e:8d:8e:f3:11:24: e4:35:77:24:3d:ca:f1:4b:59:63:b2:53:fa:c8:60:7b:c3:3a: d2:8a:e1:5b:91:be:0d:56:58:0b:81:16:68:53:b0:f6:af:8c: c5:c8:5b:ac:3e:ce:a6:ad:90:4e:5e:f4:0f:1c:f5:0b:f2:d2: a8:94:75:f6:c7:76:23:ec:5c:1d:4e:43:40:4f:f1:e1:fb:53: 9c:f9:17:bc:f7:0f:d8:ea:e6:98:e6:98:6a:f0:43:a8:21:ab: b1:54:b4:9c:c8:73:36:7b:3b:6c:47:f7:18:d4:60:79:22:b3: b5:6d:1b:5f:89:e1:8e:f1:0a:58:7f:19:7e:b5:9e:2e:83:ab: 9b:53:21:7e:d5:b7:0e:8e:4b:db:9e:81:2c:b8:98:8f:93:c4: 98:d0:b9:61:41:05:ea:42:78:fb:16:8d:97:6d:c6:c9:60:69: 8e:f4:28:cf:25:23:2b:59:c5:6c:90:83:af:24:21:50:4f:11: fb:f4:bb:90 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsyMO75VyzgKd3crbePA172MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NmQ2ZjU2OTUwMGMyNTA3MGI2MTI0ZjFiODZmNjA5NTI2 NzdhOTMwHhcNMjUxMjE4MTYwMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGJjNjIyZWEwYmRiYmExOGY5YzI1ZjllNzNmZTc5M2M5MDAwYmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBMy+iyyoDhlrtdKPr63WINIvNlU n1p0OK5R+tnkz/bgWFBahPG59WjTqHC4n02MDO/NgXDmAwp1OfgXGd7IPT13ph7y h1kPsPO61XLLT2XVlxwVsLnh4mqSoLhLAdXG/FEnRNL8So9ghzE7QZile7P5ZPTf 3CRv8CtgrxdB9oTnc7F6XgBEijXCPpyP8WVfNiwD0YoHpGV6vTl8s1ClSKLsheAg Dkyu8b48S/a8kAPp86cJ4oSOYpcrymLi518f4/Ie8d+p17zG8h+GnvANIzS332AT mrUjEO92vg1fCv/7HLWoWOAc+7kEuI24ASpqmpSlZyiIwuhe8Rs72sRmKwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFH28Yi6gvbuhj5wl+ec/55PJAAv9MB8GA1UdIwQY MBaAFGhtb1aVAMJQcLYSTxuG9glSZ3qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWIt YWI2ZmM0ZTBmMWUwLzEvZmJ4aUxxQzl1NkdQbkNYNTV6X25rOGtBQ18wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWItYWI2ZmM0ZTBmMWUw LzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg9pQDAN BgkqhkiG9w0BAQsFAAOCAQEALqLzonbf3tiBAUnaEXjr0QCUNIXHkTVDhJ+bdoH8 R/eekh8KPWK1xdYQ0ynZOJYzErW05ESoFs4v4C4ioz1dhM5zfo2O8xEk5DV3JD3K 8UtZY7JT+shge8M60orhW5G+DVZYC4EWaFOw9q+MxchbrD7Opq2QTl70Dxz1C/LS qJR19sd2I+xcHU5DQE/x4ftTnPkXvPcP2OrmmOaYavBDqCGrsVS0nMhzNns7bEf3 GNRgeSKztW0bX4nhjvEKWH8ZfrWeLoOrm1MhftW3Do5L256BLLiYj5PEmNC5YUEF 6kJ4+xaNl23GyWBpjvQozyUjK1nFbJCDryQhUE8R+/S7kA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:19:10 2025 by rpki-client