This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/2ZgV_7dSwyT-xW6qbPSudzEoms8.roa File: 2ZgV_7dSwyT-xW6qbPSudzEoms8.roa (raw, json) Hash identifier: cibebxsk2RsTComIhTAh2MUMKpdz3ElM3UXtFaDAtrM= Subject key identifier: D9:98:15:FF:B7:52:C3:24:FE:C5:6E:AA:6C:F4:AE:77:31:28:9A:CF Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195FFDEDC374B52D704D546D82826F62AD4 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/2ZgV_7dSwyT-xW6qbPSudzEoms8.roa Signing time: Fri 04 Apr 2025 08:15:49 +0000 ROA not before: Fri 04 Apr 2025 08:15:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ff:de:dc:37:4b:52:d7:04:d5:46:d8:28:26:f6:2a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Apr 4 08:15:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d99815ffb752c324fec56eaa6cf4ae7731289acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:34:d9:f1:bc:92:c1:53:17:c5:06:65:b5: 99:a8:53:67:bb:0c:ff:76:52:db:4d:47:4e:48:1a: 26:d9:eb:90:bc:00:84:41:52:10:b7:7e:d0:7f:82: bb:c6:29:21:67:0e:3a:79:28:ec:d4:e2:16:e9:e7: cf:32:59:ad:92:8e:2f:b4:96:b2:1a:b5:fc:37:df: 72:dd:11:c3:22:5d:8c:5c:2d:35:3b:f5:46:bb:2b: 36:ea:e5:41:40:fb:23:be:32:88:49:6e:87:a8:ea: 46:85:2a:46:4d:fa:34:22:8c:cf:71:c5:da:23:72: bc:3a:05:46:75:c8:bd:df:d7:2b:00:25:bb:79:96: 35:7b:3e:37:6f:64:a2:0f:17:be:59:ca:72:b3:52: 0f:2f:ed:16:8b:c9:eb:d8:d7:09:82:30:f5:b5:2d: 27:2e:7d:75:b1:7b:cc:5f:b5:2f:ef:64:fe:70:65: 7e:53:3b:31:13:f3:47:a3:9b:d7:4e:a5:42:15:bc: ee:84:4c:64:7a:ac:5d:0b:74:33:57:fb:ad:b5:97: 0f:76:3e:b0:c6:79:62:45:57:d9:d0:54:f8:1b:30: d1:2a:5e:b8:e7:38:d9:65:74:b8:f3:06:4e:7c:8d: bf:8c:0f:94:8b:a3:03:f3:4b:be:e9:2e:00:1c:54: 81:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:98:15:FF:B7:52:C3:24:FE:C5:6E:AA:6C:F4:AE:77:31:28:9A:CF X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/2ZgV_7dSwyT-xW6qbPSudzEoms8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 Signature Algorithm: sha256WithRSAEncryption 8a:01:c0:17:24:70:3d:0c:3d:35:7e:a2:40:aa:4d:9b:88:f5: 64:b8:a2:5a:54:e1:ba:9b:f4:a6:17:e1:bb:6f:82:ea:ac:3a: a7:50:55:d6:58:38:8f:9f:83:ab:6a:81:23:61:a1:52:1b:78: e1:32:51:b0:14:1a:af:7a:09:aa:b0:ef:57:3c:27:ef:a3:54: 8d:36:0b:f3:7b:86:3f:7a:36:29:47:be:aa:e2:67:09:52:aa: 73:2c:96:8b:e7:c1:ff:0b:44:d9:48:c7:b9:74:42:0d:d6:75: a1:dd:e7:be:2c:8b:45:14:93:d1:8e:51:9f:aa:21:e9:ee:7c: 65:ac:ff:71:d1:a0:8e:d6:89:38:95:c9:ff:e2:9f:3a:77:f7: bb:ed:c3:4e:96:7c:79:b0:b4:fc:7b:f9:7a:ff:62:f1:d5:56: cc:4d:bf:a6:e8:0d:bc:de:00:a8:eb:c2:f5:48:be:77:b2:94: e3:5c:52:29:97:d3:40:4f:47:d9:f4:4d:88:95:38:e4:c7:e2: aa:c7:04:0f:a8:b4:8f:ff:f6:38:ee:d2:b0:a3:a9:86:2e:1b: 89:37:a4:a4:f2:b9:c4:ec:16:a5:97:d0:c4:4c:ad:ce:d4:5f: e8:3a:e5:76:0d:1b:56:dc:dd:58:50:ae:a0:77:1e:af:b8:28: eb:b0:bd:f6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZX/3tw3S1LXBNVG2Cgm9irUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwNDA0MDgxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTk4MTVmZmI3NTJjMzI0ZmVjNTZlYWE2Y2Y0YWU3NzMxMjg5YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSs02fG8ksFTF8UGZbWZqFNnuwz/ dlLbTUdOSBom2euQvACEQVIQt37Qf4K7xikhZw46eSjs1OIW6efPMlmtko4vtJay GrX8N99y3RHDIl2MXC01O/VGuys26uVBQPsjvjKISW6HqOpGhSpGTfo0IozPccXa I3K8OgVGdci939crACW7eZY1ez43b2SiDxe+Wcpys1IPL+0Wi8nr2NcJgjD1tS0n Ln11sXvMX7Uv72T+cGV+UzsxE/NHo5vXTqVCFbzuhExkeqxdC3QzV/uttZcPdj6w xnliRVfZ0FT4GzDRKl645zjZZXS48wZOfI2/jA+Ui6MD80u+6S4AHFSB2QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFNmYFf+3UsMk/sVuqmz0rncxKJrPMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvMlpnVl83ZFN3eVQteFc2cWJQU3VkekVvbXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAigHAFyRwPQw9NX6iQKpNm4j1 ZLiiWlThupv0phfhu2+C6qw6p1BV1lg4j5+Dq2qBI2GhUht44TJRsBQar3oJqrDv Vzwn76NUjTYL83uGP3o2KUe+quJnCVKqcyyWi+fB/wtE2UjHuXRCDdZ1od3nviyL RRST0Y5Rn6oh6e58Zaz/cdGgjtaJOJXJ/+KfOnf3u+3DTpZ8ebC0/Hv5ev9i8dVW zE2/pugNvN4AqOvC9Ui+d7KU41xSKZfTQE9H2fRNiJU45MfiqscED6i0j//2OO7S sKOphi4biTekpPK5xOwWpZfQxEytztRf6Drldg0bVtzdWFCuoHcer7go67C99g== -----END CERTIFICATE-----Generated at Wed Dec 17 13:28:53 2025 by rpki-client