This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/JzUcaz4FA-hQF1VQAtPxO7--Zts.roa File: JzUcaz4FA-hQF1VQAtPxO7--Zts.roa (raw, json) Hash identifier: BRjDdrUWMS6T6HcKQ989u1jjOIw1kAtLpFkCWtF9p9U= Subject key identifier: 27:35:1C:6B:3E:05:03:E8:50:17:55:50:02:D3:F1:3B:BF:BE:66:DB Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195EDD89800C94DE17C9D6D1725932142AD Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/JzUcaz4FA-hQF1VQAtPxO7--Zts.roa Signing time: Mon 31 Mar 2025 20:15:49 +0000 ROA not before: Mon 31 Mar 2025 20:15:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ed:d8:98:00:c9:4d:e1:7c:9d:6d:17:25:93:21:42:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Mar 31 20:15:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=27351c6b3e0503e85017555002d3f13bbfbe66db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:33:fa:99:bd:25:7a:9b:09:09:79:0f:77: 22:3f:ca:b2:9f:7f:27:1b:90:51:2e:1b:c5:e0:bf: 9a:ae:db:e9:4c:27:0b:33:ac:e9:01:95:62:2f:a6: fb:3a:8e:fe:2c:96:5c:05:ef:4b:28:f6:bf:7d:df: 09:fd:81:fc:0d:8b:6c:99:ba:e1:82:30:e9:51:80: 22:44:e4:19:12:ed:62:ba:34:9d:ae:8e:bb:06:be: f1:91:57:ae:62:6d:ba:40:1f:d1:44:91:53:7c:47: fd:5a:d4:8f:75:75:e3:cd:fc:37:27:44:fd:f9:99: bf:49:03:af:c0:20:bf:a8:2e:cb:6a:ce:9d:14:68: 6c:9b:c9:cf:57:2f:9a:18:1e:08:62:a4:7a:97:0f: 67:ac:0f:fb:66:4e:9a:17:b1:5c:4d:c8:86:0c:ba: f7:59:9d:23:3a:f2:78:17:1e:99:0b:73:3f:fb:b5: 08:41:5f:f6:2e:59:c7:c9:85:f4:e5:81:56:86:7a: bf:4a:46:fc:dc:e6:6b:59:de:3a:25:1c:2c:df:17: 77:f3:88:68:89:2d:c0:01:19:4e:a5:c4:ed:5a:dd: 22:45:90:19:1e:7d:ff:cb:c9:b0:7f:7a:c6:bc:d4: 30:dd:98:43:1a:ee:1c:76:4b:f7:4f:83:16:a7:bb: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:35:1C:6B:3E:05:03:E8:50:17:55:50:02:D3:F1:3B:BF:BE:66:DB X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/JzUcaz4FA-hQF1VQAtPxO7--Zts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 Signature Algorithm: sha256WithRSAEncryption 50:5a:23:81:3f:54:e1:04:6a:b9:28:82:30:f5:a0:21:3f:b1: 03:b2:f9:08:c3:2c:9d:af:30:c2:f4:bc:97:25:0c:74:fe:1d: 5a:33:c4:be:0a:93:cc:e2:9c:ac:fe:7b:16:5b:42:b2:47:3b: 4d:9d:14:12:11:6e:54:73:b7:78:76:08:60:81:99:bd:2c:10: a5:3f:11:7a:6c:95:0a:d9:c6:22:18:48:ef:d3:47:30:cc:80: 05:48:c9:a9:78:1f:4f:ad:65:6a:ac:4d:39:aa:71:80:26:a2: 1f:be:87:01:c6:7c:98:ad:3a:f5:4d:88:0d:2e:ef:bb:0c:0f: 8b:8e:4f:94:e4:9b:13:50:30:e7:cf:ff:bb:c1:98:2a:43:2e: 1b:08:2e:6a:31:98:70:4a:40:3d:36:06:84:a9:12:9e:bb:f6: ea:e5:38:56:7f:90:70:3a:df:44:3f:71:6f:25:05:f0:e1:8c: 4e:ff:a5:46:90:5b:d9:2b:a8:56:c7:a2:e5:ce:65:4d:ad:88: 67:5a:b9:92:ae:82:7e:48:71:5c:55:c5:c0:e0:cb:05:7c:ba: 2c:d4:5d:89:d3:5e:a4:d1:79:74:1d:27:69:70:82:13:b7:a5: be:78:22:c0:a7:cb:2c:30:a4:64:2d:c0:0d:1d:e2:b0:63:1a: 30:ee:d6:ae -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXt2JgAyU3hfJ1tFyWTIUKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwMzMxMjAxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzM1MWM2YjNlMDUwM2U4NTAxNzU1NTAwMmQzZjEzYmJmYmU2NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17Mz+pm9JXqbCQl5D3ciP8qyn38n G5BRLhvF4L+artvpTCcLM6zpAZViL6b7Oo7+LJZcBe9LKPa/fd8J/YH8DYtsmbrh gjDpUYAiROQZEu1iujSdro67Br7xkVeuYm26QB/RRJFTfEf9WtSPdXXjzfw3J0T9 +Zm/SQOvwCC/qC7Las6dFGhsm8nPVy+aGB4IYqR6lw9nrA/7Zk6aF7FcTciGDLr3 WZ0jOvJ4Fx6ZC3M/+7UIQV/2LlnHyYX05YFWhnq/Skb83OZrWd46JRws3xd384ho iS3AARlOpcTtWt0iRZAZHn3/y8mwf3rGvNQw3ZhDGu4cdkv3T4MWp7uCOQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFCc1HGs+BQPoUBdVUALT8Tu/vmbbMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvSnpVY2F6NEZBLWhRRjFWUUF0UHhPNy0tWnRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAUFojgT9U4QRquSiCMPWgIT+x A7L5CMMsna8wwvS8lyUMdP4dWjPEvgqTzOKcrP57FltCskc7TZ0UEhFuVHO3eHYI YIGZvSwQpT8RemyVCtnGIhhI79NHMMyABUjJqXgfT61laqxNOapxgCaiH76HAcZ8 mK069U2IDS7vuwwPi45PlOSbE1Aw58//u8GYKkMuGwguajGYcEpAPTYGhKkSnrv2 6uU4Vn+QcDrfRD9xbyUF8OGMTv+lRpBb2SuoVsei5c5lTa2IZ1q5kq6CfkhxXFXF wODLBXy6LNRdidNepNF5dB0naXCCE7elvngiwKfLLDCkZC3ADR3isGMaMO7Wrg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:20:57 2025 by rpki-client