This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/bgNb-DyhXXgD7Q2PocM-uz5PlYQ.roa File: bgNb-DyhXXgD7Q2PocM-uz5PlYQ.roa (raw, json) Hash identifier: WRG49OGgM0D9ibcA6zQeTjcOAf1uSTW3dYyvYbyz5bg= Subject key identifier: 6E:03:5B:F8:3C:A1:5D:78:03:ED:0D:8F:A1:C3:3E:BB:3E:4F:95:84 Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195ED9FD4B1B48351F17761B11FA0810365 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/bgNb-DyhXXgD7Q2PocM-uz5PlYQ.roa Signing time: Mon 31 Mar 2025 19:13:49 +0000 ROA not before: Mon 31 Mar 2025 19:13:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ed:9f:d4:b1:b4:83:51:f1:77:61:b1:1f:a0:81:03:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Mar 31 19:13:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6e035bf83ca15d7803ed0d8fa1c33ebb3e4f9584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:16:49:68:94:4d:3e:69:37:a9:72:17:9f: 01:2c:d5:14:a5:18:93:54:dd:ac:32:fc:64:ec:61: 39:f4:1a:09:ee:94:ec:89:01:af:74:e9:64:8f:e3: 90:6b:a3:d6:ec:c9:73:73:6d:22:84:bd:36:56:f3: 29:0d:b5:a9:50:36:d8:74:74:c5:45:57:18:58:73: e8:6a:88:7a:5f:da:a7:61:78:91:e9:17:f5:43:c2: e3:2d:56:7a:a4:e9:66:68:de:14:42:46:87:54:21: 01:97:24:f3:fe:61:e7:21:c4:e9:4e:c7:8f:00:7f: 02:45:23:2d:0c:49:7b:e8:54:33:83:1e:b2:94:b1: e7:25:6e:5c:ce:25:63:b9:ce:4f:67:4a:08:a8:f2: 93:01:06:b0:47:ed:08:64:60:84:f3:01:2b:85:a8: 5a:7a:d0:12:dc:42:18:bb:55:93:a3:97:47:82:5e: aa:6d:c8:08:8a:0c:7e:67:dd:f9:a9:95:e6:0e:c6: 31:f4:79:c7:0d:f1:d5:1b:bd:be:e7:24:90:5a:65: 4b:02:97:00:55:a0:99:aa:d1:d4:01:87:b8:8b:9f: aa:b2:ed:6c:61:a2:75:b1:2a:06:c2:95:ab:74:34: 84:ef:92:00:05:f7:3f:b8:83:b6:e9:39:a3:f7:f8: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:03:5B:F8:3C:A1:5D:78:03:ED:0D:8F:A1:C3:3E:BB:3E:4F:95:84 X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/bgNb-DyhXXgD7Q2PocM-uz5PlYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:dc6c:d9df/128 Signature Algorithm: sha256WithRSAEncryption 13:e2:00:93:42:fc:bb:87:0a:7b:48:b0:65:eb:09:a4:32:6e: ef:99:c4:38:16:69:6d:b3:f3:80:de:2b:89:ad:cc:9f:e4:46: ae:41:d8:c7:a6:31:07:06:a9:c7:68:b0:df:18:73:41:2b:22: d2:69:7f:2a:60:c6:91:22:6b:7e:e4:54:f2:5e:3e:6f:c9:27: 84:fe:a9:17:88:52:f3:fb:a6:aa:a9:55:0a:f3:03:27:1b:d2: 55:b2:5a:d9:60:69:d1:a3:0b:cd:19:81:c2:5c:6c:df:4c:c7: 2b:50:ba:f7:69:fe:b8:25:8d:a6:d5:99:6e:7f:26:4d:02:71: 32:c9:76:bd:2f:a9:49:ac:cf:24:fa:45:7e:d7:89:db:04:f7: 39:4d:78:78:ec:8d:0e:62:b7:c4:3a:60:79:b6:52:58:dc:9f: 65:3e:f7:f1:22:a2:e7:c4:00:9b:74:55:31:27:0a:47:89:9c: e4:fd:ba:94:b3:77:a6:72:c8:f5:07:ac:4e:d0:d6:b5:bd:dc: c3:39:fe:87:9c:c4:f6:8f:c8:0a:e3:a8:13:88:de:e5:0f:00: e5:12:52:5b:84:93:9d:cf:4b:9b:d6:f5:3f:74:8a:b7:5a:74: cb:54:b0:5a:50:30:6e:47:09:9a:dd:d9:3d:f2:b4:bf:a7:44: 9b:07:2d:cc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXtn9SxtINR8XdhsR+ggQNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwMzMxMTkxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTAzNWJmODNjYTE1ZDc4MDNlZDBkOGZhMWMzM2ViYjNlNGY5NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA174WSWiUTT5pN6lyF58BLNUUpRiT VN2sMvxk7GE59BoJ7pTsiQGvdOlkj+OQa6PW7Mlzc20ihL02VvMpDbWpUDbYdHTF RVcYWHPoaoh6X9qnYXiR6Rf1Q8LjLVZ6pOlmaN4UQkaHVCEBlyTz/mHnIcTpTseP AH8CRSMtDEl76FQzgx6ylLHnJW5cziVjuc5PZ0oIqPKTAQawR+0IZGCE8wErhaha etAS3EIYu1WTo5dHgl6qbcgIigx+Z935qZXmDsYx9HnHDfHVG72+5ySQWmVLApcA VaCZqtHUAYe4i5+qsu1sYaJ1sSoGwpWrdDSE75IABfc/uIO26Tmj9/gFqQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFG4DW/g8oV14A+0Nj6HDPrs+T5WEMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvYmdOYi1EeWhYWGdEN1EyUG9jTS11ejVQbFlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAE+IAk0L8u4cKe0iwZesJpDJu 75nEOBZpbbPzgN4ria3Mn+RGrkHYx6YxBwapx2iw3xhzQSsi0ml/KmDGkSJrfuRU 8l4+b8knhP6pF4hS8/umqqlVCvMDJxvSVbJa2WBp0aMLzRmBwlxs30zHK1C692n+ uCWNptWZbn8mTQJxMsl2vS+pSazPJPpFfteJ2wT3OU14eOyNDmK3xDpgebZSWNyf ZT738SKi58QAm3RVMScKR4mc5P26lLN3pnLI9QesTtDWtb3cwzn+h5zE9o/ICuOo E4je5Q8A5RJSW4STnc9Lm9b1P3SKt1p0y1SwWlAwbkcJmt3ZPfK0v6dEmwctzA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:56 2025 by rpki-client