This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Iu_tDiqDO5yummo3M8UIxLEQozI.roa File: Iu_tDiqDO5yummo3M8UIxLEQozI.roa (raw, json) Hash identifier: 39N3z4kGe5k/zMmn6ce1Fu/kL7lJ7/aa6gs5AGcicN0= Subject key identifier: 22:EF:ED:0E:2A:83:3B:9C:AE:9A:6A:37:33:C5:08:C4:B1:10:A3:32 Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195CCC30D09AED188012CE5E537DD4E55F7 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Iu_tDiqDO5yummo3M8UIxLEQozI.roa Signing time: Tue 25 Mar 2025 10:04:49 +0000 ROA not before: Tue 25 Mar 2025 10:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:ccc2:77da/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:cc:c3:0d:09:ae:d1:88:01:2c:e5:e5:37:dd:4e:55:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Mar 25 10:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=22efed0e2a833b9cae9a6a3733c508c4b110a332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:ba:9b:4b:f9:dc:c7:ae:6d:a0:c0:76:8c: 15:8b:2c:1f:c5:ee:42:b7:9f:d3:5c:a7:53:02:f3: 82:8a:f1:8a:b8:ca:41:4f:2f:70:e3:1f:85:a6:50: b2:2c:f6:68:91:2c:f0:47:e1:7d:b8:e3:b1:49:03: 14:f7:d9:a2:f3:55:de:a2:b0:e9:cb:88:c8:ce:2c: 9a:4c:e3:0d:a5:ad:67:ac:38:e8:8e:da:d0:b9:51: 92:e8:2c:2b:7d:1f:13:9c:e7:c2:4b:1e:18:bb:52: 25:9c:86:f4:aa:db:ac:c9:dc:68:36:fa:08:99:c8: ce:57:fd:ab:a9:96:f5:c8:f2:bd:e5:90:54:53:97: 4a:57:e0:3c:05:34:ae:20:e2:3d:fd:db:69:1f:54: e0:e4:c0:71:62:4f:89:73:d2:a6:29:48:b6:2f:95: b3:56:e1:40:6b:9b:9b:1f:31:6d:db:ca:51:b5:95: 24:80:21:e6:4f:1d:ac:6f:c5:06:34:96:d1:80:aa: 6f:2e:12:4d:78:01:1a:b6:9e:22:54:fa:90:1b:1e: 83:b9:bd:58:c8:14:d0:19:7c:ae:ea:0c:7b:88:53: 7e:e7:79:9a:51:71:55:cf:5c:49:e6:c9:f3:cd:d2: 19:0c:99:7b:fb:a5:a8:5d:fd:33:f2:49:75:6c:7a: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:ED:0E:2A:83:3B:9C:AE:9A:6A:37:33:C5:08:C4:B1:10:A3:32 X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Iu_tDiqDO5yummo3M8UIxLEQozI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:ccc2:77da/128 Signature Algorithm: sha256WithRSAEncryption 7b:56:b3:b7:da:cd:76:1b:bc:43:24:16:37:bd:54:7c:77:d7: 4c:55:fa:fd:14:57:22:7c:a4:19:53:de:51:b7:95:39:09:0c: 09:59:94:af:49:30:4c:e4:e6:9f:be:88:06:f4:d0:02:89:cd: 9b:ea:09:c7:f7:dc:e4:97:a3:4a:11:bf:f4:2c:d1:c4:40:28: 9d:1b:bd:6c:16:8a:00:c3:14:cc:7e:ef:0d:b6:9a:a6:f2:fd: fe:08:af:23:67:f2:9f:14:80:f1:2f:1b:60:cc:90:5c:77:34: 94:65:07:2e:95:22:b4:34:08:ab:93:d5:72:1f:7c:34:8f:25: b6:8f:9e:68:18:ef:d2:a6:af:1e:e2:c9:91:c5:9f:12:93:c0: 77:3b:65:c9:22:04:15:e4:2d:48:ec:69:91:74:3e:ba:da:86: 47:21:d8:fa:31:1a:f7:d9:5a:ad:5a:08:d9:f4:b9:51:65:78: c1:80:0b:dc:7d:f6:45:a8:3a:5c:85:b8:98:2f:33:d5:49:f6: ba:ac:31:e1:0b:dc:0d:9a:8b:e9:55:81:1a:2a:4d:18:f3:96: f1:dc:03:9b:d0:25:ea:c9:67:ab:65:a6:50:9e:af:cb:6e:95: 6d:d5:36:6d:60:a8:2f:17:7c:c1:72:43:7f:1f:10:90:7b:25: c6:b2:61:d8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXMww0JrtGIASzl5TfdTlX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwMzI1MTAwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmVmZWQwZTJhODMzYjljYWU5YTZhMzczM2M1MDhjNGIxMTBhMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X+6m0v53MeubaDAdowViywfxe5C t5/TXKdTAvOCivGKuMpBTy9w4x+FplCyLPZokSzwR+F9uOOxSQMU99mi81XeorDp y4jIziyaTOMNpa1nrDjojtrQuVGS6CwrfR8TnOfCSx4Yu1IlnIb0qtusydxoNvoI mcjOV/2rqZb1yPK95ZBUU5dKV+A8BTSuIOI9/dtpH1Tg5MBxYk+Jc9KmKUi2L5Wz VuFAa5ubHzFt28pRtZUkgCHmTx2sb8UGNJbRgKpvLhJNeAEatp4iVPqQGx6Dub1Y yBTQGXyu6gx7iFN+53maUXFVz1xJ5snzzdIZDJl7+6WoXf0z8kl1bHqRJQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFCLv7Q4qgzucrppqNzPFCMSxEKMyMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvSXVfdERpcURPNXl1bW1vM004VUl4TEVRb3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVzMJ32jANBgkqhkiG9w0BAQsFAAOCAQEAe1azt9rNdhu8QyQWN71UfHfX TFX6/RRXInykGVPeUbeVOQkMCVmUr0kwTOTmn76IBvTQAonNm+oJx/fc5JejShG/ 9CzRxEAonRu9bBaKAMMUzH7vDbaapvL9/givI2fynxSA8S8bYMyQXHc0lGUHLpUi tDQIq5PVch98NI8lto+eaBjv0qavHuLJkcWfEpPAdztlySIEFeQtSOxpkXQ+utqG RyHY+jEa99larVoI2fS5UWV4wYAL3H32Rag6XIW4mC8z1Un2uqwx4QvcDZqL6VWB GipNGPOW8dwDm9Al6slnq2WmUJ6vy26VbdU2bWCoLxd8wXJDfx8QkHslxrJh2A== -----END CERTIFICATE-----Generated at Wed Dec 17 00:14:20 2025 by rpki-client