This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sVzaSePWG8VQZ_0iOLHPk8qe2Ys.roa File: sVzaSePWG8VQZ_0iOLHPk8qe2Ys.roa (raw, json) Hash identifier: mfIxnKzlV5fLzUebPy8WCA1NoGQ8QlGY8QYweh5Lo9c= Subject key identifier: B1:5C:DA:49:E3:D6:1B:C5:50:67:FD:22:38:B1:CF:93:CA:9E:D9:8B Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Certificate serial: 0195ADDCE5953E640C4A6183979B50A12E48 Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sVzaSePWG8VQZ_0iOLHPk8qe2Ys.roa Signing time: Wed 19 Mar 2025 10:04:49 +0000 ROA not before: Wed 19 Mar 2025 10:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:addc:9bfb/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ad:dc:e5:95:3e:64:0c:4a:61:83:97:9b:50:a1:2e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d Validity Not Before: Mar 19 10:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b15cda49e3d61bc55067fd2238b1cf93ca9ed98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:69:d0:fa:9c:c0:24:a9:36:b0:73:02:e6: 4b:38:21:72:01:53:b2:12:29:25:8d:c7:4b:74:e1: 0f:12:91:7b:6b:85:77:89:86:bb:0d:81:92:95:d7: 09:18:07:ce:cb:0d:eb:dd:20:09:28:ba:a8:3e:f5: d7:a2:66:4a:5d:27:81:7c:fe:5c:ac:b0:f8:46:2f: b5:12:e6:5f:c0:a9:72:4e:6b:f8:1c:06:ba:f3:83: 46:58:90:67:f1:32:60:09:b5:ac:21:a9:47:fe:30: 8c:a3:3a:9c:f7:71:bf:30:a5:52:2a:1d:a4:18:dc: 8b:9e:b3:54:aa:d7:81:58:c6:d2:bc:40:bc:b2:15: 42:b1:ab:4b:24:ba:0c:39:1a:55:21:69:7f:86:73: 79:bb:cd:fe:a2:de:30:04:45:1f:60:8b:ee:89:f7: 61:1e:75:d0:14:5e:e2:56:05:8c:8a:1d:19:f9:93: b1:ef:b3:c6:12:96:a7:c3:5a:a9:32:1b:c0:66:f0: 9e:f8:b0:fe:5c:d6:83:b5:86:bd:67:15:6a:2b:e7: db:55:4f:02:d0:f4:bc:6d:75:19:89:a3:ea:91:8d: 27:c6:7e:57:bd:43:2a:8b:25:5b:95:b1:e4:88:5b: 3d:cf:b2:52:ca:91:9b:df:a1:0e:5f:73:c8:9f:ea: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5C:DA:49:E3:D6:1B:C5:50:67:FD:22:38:B1:CF:93:CA:9E:D9:8B X509v3 Authority Key Identifier: keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/sVzaSePWG8VQZ_0iOLHPk8qe2Ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:addc:9bfb/128 Signature Algorithm: sha256WithRSAEncryption 09:61:33:98:49:f8:3c:8b:72:3b:9f:d0:6a:b1:ab:e9:26:e5: 91:f7:8f:59:9f:c8:f8:89:23:97:66:99:e6:36:05:71:ca:86: 03:a0:74:b3:02:c7:93:5e:1d:66:0d:43:fe:83:c5:8e:4e:d4: 79:81:76:7a:c7:59:b0:80:78:e4:4a:ad:eb:11:13:54:2c:9c: 37:08:38:6c:a2:74:0d:77:65:ed:46:98:f3:1c:ba:50:c3:69: 45:64:8a:94:12:26:26:06:bc:d4:65:92:cd:2a:ee:ee:91:96: b7:48:b2:2c:6a:38:20:d9:95:20:79:c3:56:38:45:fd:ad:0c: 01:72:92:14:f4:3c:40:2c:a5:c4:42:f1:32:d2:27:ee:f5:89: fa:36:dd:1b:4b:d0:4e:d0:d0:14:d1:97:08:30:de:23:de:69: 18:f4:b5:c6:c0:35:9b:68:fe:da:25:44:7e:c8:1e:0c:c0:56: 2b:53:87:f6:de:98:cd:80:b1:be:bb:9b:50:11:e6:fa:2b:33: 56:35:7d:68:c6:dc:23:0f:ce:eb:27:19:be:33:db:44:bc:dc: 49:88:58:09:9c:fe:a1:bb:8d:47:68:20:72:77:15:03:5b:fb: bd:34:04:fb:7a:93:69:7b:a7:2c:7f:16:1b:a3:c3:80:f0:71: 15:4e:6e:14 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZWt3OWVPmQMSmGDl5tQoS5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj MTFhMmQwHhcNMjUwMzE5MTAwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTVjZGE0OWUzZDYxYmM1NTA2N2ZkMjIzOGIxY2Y5M2NhOWVkOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTtp0PqcwCSpNrBzAuZLOCFyAVOy EikljcdLdOEPEpF7a4V3iYa7DYGSldcJGAfOyw3r3SAJKLqoPvXXomZKXSeBfP5c rLD4Ri+1EuZfwKlyTmv4HAa684NGWJBn8TJgCbWsIalH/jCMozqc93G/MKVSKh2k GNyLnrNUqteBWMbSvEC8shVCsatLJLoMORpVIWl/hnN5u83+ot4wBEUfYIvuifdh HnXQFF7iVgWMih0Z+ZOx77PGEpanw1qpMhvAZvCe+LD+XNaDtYa9ZxVqK+fbVU8C 0PS8bXUZiaPqkY0nxn5XvUMqiyVblbHkiFs9z7JSypGb36EOX3PIn+qF9wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFLFc2knj1hvFUGf9Ijixz5PKntmLMB8GA1UdIwQY MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt MDNhYTU1MTFhNzVmLzEvc1Z6YVNlUFdHOFZRWl8waU9MSFBrOHFlMllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVrdyb+zANBgkqhkiG9w0BAQsFAAOCAQEACWEzmEn4PItyO5/QarGr6Sbl kfePWZ/I+Ikjl2aZ5jYFccqGA6B0swLHk14dZg1D/oPFjk7UeYF2esdZsIB45Eqt 6xETVCycNwg4bKJ0DXdl7UaY8xy6UMNpRWSKlBImJga81GWSzSru7pGWt0iyLGo4 INmVIHnDVjhF/a0MAXKSFPQ8QCylxELxMtIn7vWJ+jbdG0vQTtDQFNGXCDDeI95p GPS1xsA1m2j+2iVEfsgeDMBWK1OH9t6YzYCxvrubUBHm+iszVjV9aMbcIw/O6ycZ vjPbRLzcSYhYCZz+obuNR2ggcncVA1v7vTQE+3qTaXunLH8WG6PDgPBxFU5uFA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:32 2025 by rpki-client