This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/B1WIeQsUtApPTIlElDpAv5u1vZ4.roa File: B1WIeQsUtApPTIlElDpAv5u1vZ4.roa (raw, json) Hash identifier: M0NDkbhsn7vQ+n2+I29FhzYXSzJdvcYK0bshNHy2DBM= Subject key identifier: 07:55:88:79:0B:14:B4:0A:4F:4C:89:44:94:3A:40:BF:9B:B5:BD:9E Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195F8891B0D2A37ECFFA042F8F36E87C6DC Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/B1WIeQsUtApPTIlElDpAv5u1vZ4.roa Signing time: Wed 02 Apr 2025 22:04:49 +0000 ROA not before: Wed 02 Apr 2025 22:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 2001:67c:64:ffff:0:195:f888:678a/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:f8:89:1b:0d:2a:37:ec:ff:a0:42:f8:f3:6e:87:c6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Apr 2 22:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=075588790b14b40a4f4c8944943a40bf9bb5bd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:80:57:41:3a:6d:0f:7a:a8:97:27:9d:c4: ff:3b:8b:b3:26:49:e6:48:7c:d2:b7:e5:0e:05:b4: 2a:53:78:71:68:a7:0d:d2:64:c8:7b:98:45:66:01: d7:8b:8a:d7:8f:eb:b7:d0:b6:2d:eb:38:62:40:5e: 10:e8:c1:63:a9:eb:5f:fe:bf:9a:ec:ba:e8:7c:eb: 76:f5:0d:56:d1:96:22:83:90:4b:b6:48:95:41:27: 9c:b3:f8:94:4a:de:8a:87:d0:c8:9b:d4:ca:d4:6c: 41:5e:22:e9:10:2b:3b:8e:b8:51:11:75:da:55:e1: 83:2d:2a:d2:60:49:bb:22:a8:96:2d:a3:95:f3:91: 82:3e:08:83:44:3f:e5:0c:3b:33:f5:3d:99:25:80: 2c:1d:ff:3f:d6:99:94:a3:22:f3:00:0a:24:ae:49: 11:a7:68:be:fc:08:4d:3e:e3:6a:9d:b1:67:7f:4d: 36:40:1e:35:65:f8:49:ef:dd:35:84:af:17:cc:6c: 6f:2a:7b:b2:1f:9a:c2:ae:44:01:aa:90:c7:33:de: 61:39:7c:2a:6e:2f:ab:63:25:b2:53:2d:83:6b:8b: ad:84:a6:aa:54:bb:12:0d:bf:43:d1:1e:23:72:75: c7:aa:7a:85:b9:84:c9:e6:8c:7a:68:3b:fa:38:3e: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:55:88:79:0B:14:B4:0A:4F:4C:89:44:94:3A:40:BF:9B:B5:BD:9E X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/B1WIeQsUtApPTIlElDpAv5u1vZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 2001:67c:64:ffff:0:195:f888:678a/128 Signature Algorithm: sha256WithRSAEncryption 01:57:5b:c6:be:96:4c:91:b8:e6:fb:1b:5e:b5:2a:ad:aa:79: 0b:6d:93:e3:93:00:ea:77:44:99:0a:fb:57:6f:8f:a9:b4:6b: 7e:df:0e:8d:ab:1b:30:3f:d0:a9:d4:87:7b:95:04:fb:f6:d7: 8d:87:e8:88:ee:67:45:d4:b6:78:7f:7b:d2:fb:e9:30:5d:27: fa:9f:d8:9c:8c:f0:5b:07:4f:8c:87:4b:ce:20:8c:ff:6d:54: 78:a8:fb:83:7c:3e:cb:a3:b0:49:7e:39:38:f5:ec:72:f3:d8: f1:4c:8f:52:5c:7e:d7:8b:7b:b2:41:ca:3d:7f:f6:aa:2f:76: 27:5c:1e:59:dc:ad:11:07:82:43:9f:d3:64:36:47:94:a3:41: 2f:bd:c9:64:28:a7:6c:61:ac:ad:f1:b3:95:25:68:5d:14:74: 76:b1:e5:de:6e:b4:db:97:4f:3b:6f:6b:0b:b6:92:a7:fb:e9: d2:36:d3:77:91:3d:e7:74:e6:e6:94:57:5a:29:d7:b5:4f:56: d1:ff:81:18:a3:f6:39:0b:59:dd:d2:8e:45:03:de:5f:eb:50: 21:33:48:98:84:bb:a1:9e:2a:6c:67:1b:c2:5d:21:75:cd:5e: f1:21:07:6a:30:1b:e1:c7:25:e4:29:5a:8a:77:6f:11:79:e1: 81:0a:47:4a -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZX4iRsNKjfs/6BC+PNuh8bcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwNDAyMjIwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzU1ODg3OTBiMTRiNDBhNGY0Yzg5NDQ5NDNhNDBiZjliYjViZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhKAV0E6bQ96qJcnncT/O4uzJknm SHzSt+UOBbQqU3hxaKcN0mTIe5hFZgHXi4rXj+u30LYt6zhiQF4Q6MFjqetf/r+a 7LrofOt29Q1W0ZYig5BLtkiVQSecs/iUSt6Kh9DIm9TK1GxBXiLpECs7jrhREXXa VeGDLSrSYEm7IqiWLaOV85GCPgiDRD/lDDsz9T2ZJYAsHf8/1pmUoyLzAAokrkkR p2i+/AhNPuNqnbFnf002QB41ZfhJ7901hK8XzGxvKnuyH5rCrkQBqpDHM95hOXwq bi+rYyWyUy2Da4uthKaqVLsSDb9D0R4jcnXHqnqFuYTJ5ox6aDv6OD7jrwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFAdViHkLFLQKT0yJRJQ6QL+btb2eMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvQjFXSWVRc1V0QXBQVElsRWxEcEF2NXUxdlo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk //8AAAGV3GzZ3wMRACABBnwAZP//AAABlfiIZ4owDQYJKoZIhvcNAQELBQADggEB AAFXW8a+lkyRuOb7G161Kq2qeQttk+OTAOp3RJkK+1dvj6m0a37fDo2rGzA/0KnU h3uVBPv2142H6IjuZ0XUtnh/e9L76TBdJ/qf2JyM8FsHT4yHS84gjP9tVHio+4N8 PsujsEl+OTj17HLz2PFMj1JcfteLe7JByj1/9qovdidcHlncrREHgkOf02Q2R5Sj QS+9yWQop2xhrK3xs5UlaF0UdHax5d5utNuXTztvawu2kqf76dI203eRPed05uaU V1op17VPVtH/gRij9jkLWd3SjkUD3l/rUCEzSJiEu6GeKmxnG8JdIXXNXvEhB2ow G+HHJeQpWop3bxF54YEKR0o= -----END CERTIFICATE-----Generated at Tue Dec 16 09:41:11 2025 by rpki-client