This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/C_K9C9f-ADdlC7Q2NgYNTDPLNA0.roa File: C_K9C9f-ADdlC7Q2NgYNTDPLNA0.roa (raw, json) Hash identifier: nDu/66BgniFideWLm1ewLdNNFTEIaK8fp/btfO3qbYM= Subject key identifier: 0B:F2:BD:0B:D7:FE:00:37:65:0B:B4:36:36:06:0D:4C:33:CB:34:0D Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d Certificate serial: 019B6A6624D21CF4AF5AE69173BFED9E4796 Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/C_K9C9f-ADdlC7Q2NgYNTDPLNA0.roa Signing time: Mon 29 Dec 2025 13:57:17 +0000 ROA not before: Mon 29 Dec 2025 13:57:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215123 IP address blocks: 2a14:37c0:d000::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:66:24:d2:1c:f4:af:5a:e6:91:73:bf:ed:9e:47:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d Validity Not Before: Dec 29 13:57:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0bf2bd0bd7fe0037650bb43636060d4c33cb340d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:91:91:48:0d:ac:35:33:16:96:ad:07:9a: d8:54:71:7b:a8:31:a0:d0:37:65:e6:f5:2c:b1:8f: 38:63:cb:86:d7:59:03:6d:a7:d0:49:a4:15:f8:f6: 6e:5c:c3:3e:29:81:cf:1d:a5:f6:57:31:51:f6:59: ee:66:f9:12:a6:eb:95:75:a8:d3:69:f1:96:8b:83: bb:7e:58:3f:86:79:26:2f:2d:ba:a0:1a:db:1b:32: e1:55:9e:97:cf:0a:a3:38:e9:c0:18:54:7c:a3:d1: 0d:b5:c1:4a:06:61:90:96:4e:a2:16:e2:70:91:cf: bf:55:26:51:ef:08:ba:25:7e:96:72:17:7d:12:21: 2b:43:ea:67:18:e1:bf:4b:59:4b:5c:02:3b:c2:d7: 8a:1d:08:11:4d:3e:aa:d4:af:29:da:2d:13:d1:3f: f2:6e:99:af:5f:8d:68:aa:bc:ce:92:06:6e:29:fe: 17:08:c2:e7:40:81:d0:19:73:58:28:a8:ea:f2:2f: f7:31:ef:74:5f:4c:7b:a7:51:17:e0:e2:13:43:bf: 56:62:4a:3c:95:ad:00:d1:68:15:2d:03:45:84:e2: 4b:66:3e:0a:e0:23:42:a2:fe:b6:32:c3:3f:33:b7: bb:18:7f:24:eb:e7:83:42:88:f8:7e:a0:8b:30:b8: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F2:BD:0B:D7:FE:00:37:65:0B:B4:36:36:06:0D:4C:33:CB:34:0D X509v3 Authority Key Identifier: keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/C_K9C9f-ADdlC7Q2NgYNTDPLNA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:37c0:d000::/48 Signature Algorithm: sha256WithRSAEncryption 18:09:ab:d9:ef:12:9a:15:64:9e:01:d6:cb:29:f8:be:c9:4b: 6b:f9:ff:ce:3b:0b:f6:1a:eb:b2:ea:43:a1:5a:29:88:7f:1c: e7:44:71:23:6b:b4:3e:66:ce:34:da:7a:3b:4f:d6:88:2f:b8: 4e:4d:11:94:ca:2e:da:06:fd:b4:21:b6:07:c5:f2:9e:25:14: 27:60:f7:c4:4d:fa:bc:46:24:f6:c4:e6:39:72:8e:6f:6b:f8: ba:c8:77:88:e2:82:61:70:8a:e7:8a:89:2f:61:68:3b:26:cb: d1:a1:be:a4:12:87:4d:3a:06:da:04:c8:f1:81:66:a6:e4:f0: 76:cc:32:de:a4:bf:1f:5a:d3:2b:0c:75:77:2b:a0:45:0c:7e: 16:80:f5:97:0b:06:ff:7a:31:57:10:84:0c:39:0b:8d:60:3d: 56:7d:20:e3:5c:f5:52:08:24:91:bb:d6:8e:45:b4:8c:6c:ec: d6:ba:86:d0:7e:3f:f9:6a:77:8e:98:73:4a:74:ea:c5:51:2d: bc:ab:8e:a4:fa:d7:3e:99:cc:b9:a4:fd:53:f1:16:0f:19:b0: 12:e5:3a:ea:a5:2d:6c:17:98:47:30:64:11:12:7e:7f:df:1c: 77:85:b4:ec:4b:32:4c:d9:bc:21:2f:ed:ef:44:4d:64:28:0f: d0:bf:e7:1d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtqZiTSHPSvWuaRc7/tnkeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwM2IzMWJjNmU3ZjQyZjYzMDM4NzBmMDIzNGI0MGRlZjcx ZmEwM2QwHhcNMjUxMjI5MTM1NzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmYyYmQwYmQ3ZmUwMDM3NjUwYmI0MzYzNjA2MGQ0YzMzY2IzNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUqRkUgNrDUzFpatB5rYVHF7qDGg 0Ddl5vUssY84Y8uG11kDbafQSaQV+PZuXMM+KYHPHaX2VzFR9lnuZvkSpuuVdajT afGWi4O7flg/hnkmLy26oBrbGzLhVZ6XzwqjOOnAGFR8o9ENtcFKBmGQlk6iFuJw kc+/VSZR7wi6JX6Wchd9EiErQ+pnGOG/S1lLXAI7wteKHQgRTT6q1K8p2i0T0T/y bpmvX41oqrzOkgZuKf4XCMLnQIHQGXNYKKjq8i/3Me90X0x7p1EX4OITQ79WYko8 la0A0WgVLQNFhOJLZj4K4CNCov62MsM/M7e7GH8k6+eDQoj4fqCLMLjvpwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAvyvQvX/gA3ZQu0NjYGDUwzyzQNMB8GA1UdIwQY MBaAFGA7Mbxuf0L2MDhw8CNLQN73H6A9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMt Njc5MzI2NTZlNTk0LzEvQ19LOUM5Zi1BRGRsQzdRMk5nWU5URFBMTkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMtNjc5MzI2NTZlNTk0 LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhQ3wNAA MA0GCSqGSIb3DQEBCwUAA4IBAQAYCavZ7xKaFWSeAdbLKfi+yUtr+f/OOwv2Guuy 6kOhWimIfxznRHEja7Q+Zs402no7T9aIL7hOTRGUyi7aBv20IbYHxfKeJRQnYPfE Tfq8RiT2xOY5co5va/i6yHeI4oJhcIrniokvYWg7JsvRob6kEodNOgbaBMjxgWam 5PB2zDLepL8fWtMrDHV3K6BFDH4WgPWXCwb/ejFXEIQMOQuNYD1WfSDjXPVSCCSR u9aORbSMbOzWuobQfj/5aneOmHNKdOrFUS28q46k+tc+mcy5pP1T8RYPGbAS5Trq pS1sF5hHMGQREn5/3xx3hbTsSzJM2bwhL+3vRE1kKA/Qv+cd -----END CERTIFICATE-----Generated at Sun Jan 11 20:35:09 2026 by rpki-client