This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/c2kSui1-9JqaL4eNbL2SUGcbSxc.roa File: c2kSui1-9JqaL4eNbL2SUGcbSxc.roa (raw, json) Hash identifier: SKaZKKX777Qam5LyrVGdAYyPX2du6Bp65zn5vCbU1Js= Subject key identifier: 73:69:12:BA:2D:7E:F4:9A:9A:2F:87:8D:6C:BD:92:50:67:1B:4B:17 Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195C31B202C9DFDD4FBB0082B0DF1A78262 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/c2kSui1-9JqaL4eNbL2SUGcbSxc.roa Signing time: Sun 23 Mar 2025 13:04:49 +0000 ROA not before: Sun 23 Mar 2025 13:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:c31a:8653/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:c3:1b:20:2c:9d:fd:d4:fb:b0:08:2b:0d:f1:a7:82:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Mar 23 13:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=736912ba2d7ef49a9a2f878d6cbd9250671b4b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:fd:32:4f:20:cd:0c:1d:cc:d7:81:68:38: d0:47:a1:3f:bc:e0:74:67:73:6d:6f:0a:f5:bf:37: 88:d9:95:75:55:88:59:9e:2a:92:59:e4:cc:57:05: 4a:d5:5d:c6:d4:36:0a:dc:47:60:11:2c:80:31:b3: 93:21:5d:43:f0:b4:c0:ff:17:8f:bc:90:40:1c:d7: cd:e6:10:8f:fd:56:6e:8c:6e:0a:dd:90:19:0f:e7: 17:97:dc:87:57:fd:ab:ad:7f:8e:7f:8a:70:79:80: e7:48:be:9d:c1:ca:ee:5f:c9:94:8b:59:a3:1a:44: e4:2a:3b:44:8e:82:41:f9:67:2b:a2:9d:c7:56:b9: 81:df:de:01:c4:8e:02:bb:6a:f8:4b:ee:6a:eb:8a: 2a:a1:73:94:66:63:4a:89:37:d0:8f:50:0b:3d:d7: fa:b0:b4:01:7d:61:76:d9:2c:f3:be:ed:08:30:d9: 2c:7f:f1:73:5e:95:6f:ca:96:89:9f:13:2b:ac:40: 7b:1b:5b:d1:f9:9a:0f:bb:09:61:75:3f:83:77:d3: cc:92:fa:e4:1b:f3:c1:53:97:d1:45:f1:20:51:12: 17:cf:03:6b:4b:08:95:f0:6e:39:fa:c5:a1:08:04: 56:e0:b8:d6:41:fe:9d:ae:57:1b:fb:7e:9c:d8:a9: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:69:12:BA:2D:7E:F4:9A:9A:2F:87:8D:6C:BD:92:50:67:1B:4B:17 X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/c2kSui1-9JqaL4eNbL2SUGcbSxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:c31a:8653/128 Signature Algorithm: sha256WithRSAEncryption 39:b1:d3:63:c5:be:11:22:df:f7:80:24:3f:b0:a2:17:0a:f8: e8:04:a1:92:ee:f8:72:bb:bb:48:ef:c2:54:a7:a8:b0:1d:a9: b1:58:b5:69:ef:4e:07:b5:b5:bf:60:09:04:53:67:83:28:7b: 86:95:93:a4:74:6d:d4:aa:15:db:20:31:01:aa:61:01:30:c5: ff:98:30:fd:1a:75:89:55:e2:c7:96:2f:8e:e4:dd:75:a8:dc: 17:36:8a:10:11:9a:43:52:c7:df:d7:e9:22:3a:24:f0:12:cd: d0:98:b0:27:d7:e5:78:73:5c:07:18:61:19:20:d1:77:b6:a5: 14:37:01:b5:c1:7c:5e:81:e9:fa:f3:37:6c:da:8f:d5:66:71: 87:87:11:55:68:fe:2b:af:f1:2f:63:d0:50:b1:97:d7:e5:24: b0:28:ad:81:82:a6:63:ce:65:61:e2:58:3a:10:0c:cc:92:3d: bf:01:e3:13:92:40:ea:89:a1:dc:6b:7f:6b:56:2b:41:9c:40: 11:36:56:b1:83:b3:87:5a:4a:c3:7e:ee:58:7b:ed:32:2a:20: 89:70:50:c7:a0:1a:31:f1:a6:ac:94:85:e0:90:20:68:7e:44: 41:10:44:a0:bb:e0:46:ca:7c:dc:a4:37:3b:d0:d9:5e:f6:56: b1:71:b7:e5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZXDGyAsnf3U+7AIKw3xp4JiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwMzIzMTMwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzY5MTJiYTJkN2VmNDlhOWEyZjg3OGQ2Y2JkOTI1MDY3MWI0YjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/39Mk8gzQwdzNeBaDjQR6E/vOB0 Z3Ntbwr1vzeI2ZV1VYhZniqSWeTMVwVK1V3G1DYK3EdgESyAMbOTIV1D8LTA/xeP vJBAHNfN5hCP/VZujG4K3ZAZD+cXl9yHV/2rrX+Of4pweYDnSL6dwcruX8mUi1mj GkTkKjtEjoJB+Wcrop3HVrmB394BxI4Cu2r4S+5q64oqoXOUZmNKiTfQj1ALPdf6 sLQBfWF22Szzvu0IMNksf/FzXpVvypaJnxMrrEB7G1vR+ZoPuwlhdT+Dd9PMkvrk G/PBU5fRRfEgURIXzwNrSwiV8G45+sWhCARW4LjWQf6drlcb+36c2KkI6QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFHNpErotfvSami+HjWy9klBnG0sXMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvYzJrU3VpMS05SnFhTDRlTmJMMlNVR2NiU3hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVwxqGUzANBgkqhkiG9w0BAQsFAAOCAQEAObHTY8W+ESLf94AkP7CiFwr4 6AShku74cru7SO/CVKeosB2psVi1ae9OB7W1v2AJBFNngyh7hpWTpHRt1KoV2yAx AaphATDF/5gw/Rp1iVXix5YvjuTddajcFzaKEBGaQ1LH39fpIjok8BLN0JiwJ9fl eHNcBxhhGSDRd7alFDcBtcF8XoHp+vM3bNqP1WZxh4cRVWj+K6/xL2PQULGX1+Uk sCitgYKmY85lYeJYOhAMzJI9vwHjE5JA6omh3Gt/a1YrQZxAETZWsYOzh1pKw37u WHvtMiogiXBQx6AaMfGmrJSF4JAgaH5EQRBEoLvgRsp83KQ3O9DZXvZWsXG35Q== -----END CERTIFICATE-----Generated at Tue Dec 16 23:21:58 2025 by rpki-client