This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/F3oKIJqIdNkGxI5T49qJ1o7HCfI.roa File: F3oKIJqIdNkGxI5T49qJ1o7HCfI.roa (raw, json) Hash identifier: FBWKUJssmMFjCgmqIyB4n6s8UlOcyudvou1iAzjtvTE= Subject key identifier: 17:7A:0A:20:9A:88:74:D9:06:C4:8E:53:E3:DA:89:D6:8E:C7:09:F2 Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195ED6AF8A745AED4092301AC4B9A5AC1C7 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/F3oKIJqIdNkGxI5T49qJ1o7HCfI.roa Signing time: Mon 31 Mar 2025 18:16:05 +0000 ROA not before: Mon 31 Mar 2025 18:16:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ed:6a:f8:a7:45:ae:d4:09:23:01:ac:4b:9a:5a:c1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Mar 31 18:16:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=177a0a209a8874d906c48e53e3da89d68ec709f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:19:11:c1:6c:0a:1c:e2:5c:03:3f:66:81: c6:2c:16:f8:d0:47:b6:0f:11:fc:37:ee:a5:77:73: d2:bb:44:92:ea:77:54:da:87:85:36:54:83:a5:b4: fb:7b:fa:82:f5:0d:e6:1f:2d:bf:d8:8d:f4:48:ce: be:4a:ff:2e:77:72:81:90:8f:ab:c9:f6:96:02:a8: bf:cd:a7:8f:82:19:51:16:59:77:84:a2:d1:6f:33: 53:ae:1b:c9:79:9f:e0:95:ce:be:46:83:4b:51:22: 90:9f:4e:dc:4c:c1:de:20:ed:49:66:c0:26:48:73: 44:c7:a5:ff:5f:e5:17:59:eb:f9:0d:66:8e:cc:0d: 46:70:55:bc:99:79:08:0e:bd:9b:70:1c:74:d4:65: 68:c4:ac:20:c4:d8:13:19:32:92:c2:48:99:aa:8c: b1:11:2f:39:39:55:41:5d:c8:07:92:67:41:5c:3c: 6f:b4:7f:13:ff:20:bd:51:ad:c9:fc:6e:d9:b0:bc: c5:d0:1f:19:19:e3:c5:41:c0:22:8c:89:c2:29:25: 36:48:5e:49:16:5f:08:de:45:b9:cb:03:67:5e:af: 09:7d:73:c9:89:99:9c:bd:1a:4d:1a:83:66:a9:08: 45:43:70:00:1b:8d:25:e5:03:3e:89:82:68:11:0b: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7A:0A:20:9A:88:74:D9:06:C4:8E:53:E3:DA:89:D6:8E:C7:09:F2 X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/F3oKIJqIdNkGxI5T49qJ1o7HCfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 Signature Algorithm: sha256WithRSAEncryption 07:85:0d:9f:26:e9:13:74:93:fd:77:be:dc:b9:0d:44:77:23: 4e:70:b4:d9:14:6e:d7:6a:ce:ed:f3:2f:37:0a:9f:bd:34:3f: 1d:76:c2:0d:c5:e1:6c:26:79:ad:08:da:a4:2e:ef:1d:77:ec: 1e:75:64:cc:c9:57:65:47:b6:69:75:1f:a2:44:61:7e:67:d4: c5:72:13:d8:5c:f2:50:dc:0c:d9:6d:75:30:0b:01:11:81:ab: 3f:bb:1e:e3:7c:32:b6:c1:ce:cf:5f:f2:c6:84:7d:89:56:05: 13:75:0d:8c:48:63:20:29:1c:8c:98:7f:1a:63:0d:b8:be:b5: 2d:c3:04:ef:67:88:96:8f:45:38:f2:34:03:6c:3e:d4:c8:65: d5:87:b3:b0:b5:e5:6a:71:63:03:5f:99:3b:84:bb:ff:19:46: e9:f2:5e:b0:4b:b3:f6:1d:a2:06:a7:30:1f:cd:98:fc:db:9b: ef:61:79:a7:69:c2:40:00:49:86:f5:7a:7e:12:0b:64:e6:16: ed:a5:77:4c:a2:89:03:dc:8e:f5:e7:17:21:01:2a:7b:c8:38: 9e:17:48:a4:f8:7b:25:cd:a5:e0:6b:1b:7c:1d:33:b8:a3:a1: b0:d5:81:55:7b:56:d9:0f:1c:74:c3:99:e7:63:c7:15:b9:2d: ab:98:88:6d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXtavinRa7UCSMBrEuaWsHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwMzMxMTgxNjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzdhMGEyMDlhODg3NGQ5MDZjNDhlNTNlM2RhODlkNjhlYzcwOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwccZEcFsChziXAM/ZoHGLBb40Ee2 DxH8N+6ld3PSu0SS6ndU2oeFNlSDpbT7e/qC9Q3mHy2/2I30SM6+Sv8ud3KBkI+r yfaWAqi/zaePghlRFll3hKLRbzNTrhvJeZ/glc6+RoNLUSKQn07cTMHeIO1JZsAm SHNEx6X/X+UXWev5DWaOzA1GcFW8mXkIDr2bcBx01GVoxKwgxNgTGTKSwkiZqoyx ES85OVVBXcgHkmdBXDxvtH8T/yC9Ua3J/G7ZsLzF0B8ZGePFQcAijInCKSU2SF5J Fl8I3kW5ywNnXq8JfXPJiZmcvRpNGoNmqQhFQ3AAG40l5QM+iYJoEQui+wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFBd6CiCaiHTZBsSOU+PaidaOxwnyMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvRjNvS0lKcUlkTmtHeEk1VDQ5cUoxbzdIQ2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAB4UNnybpE3ST/Xe+3LkNRHcj TnC02RRu12rO7fMvNwqfvTQ/HXbCDcXhbCZ5rQjapC7vHXfsHnVkzMlXZUe2aXUf okRhfmfUxXIT2FzyUNwM2W11MAsBEYGrP7se43wytsHOz1/yxoR9iVYFE3UNjEhj ICkcjJh/GmMNuL61LcME72eIlo9FOPI0A2w+1Mhl1YezsLXlanFjA1+ZO4S7/xlG 6fJesEuz9h2iBqcwH82Y/Nub72F5p2nCQABJhvV6fhILZOYW7aV3TKKJA9yO9ecX IQEqe8g4nhdIpPh7Jc2l4GsbfB0zuKOhsNWBVXtW2Q8cdMOZ52PHFbktq5iIbQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:43:37 2025 by rpki-client