This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/eVDtIzuzdOPYhZvEYyL9-WgDW4Y.roa
File: eVDtIzuzdOPYhZvEYyL9-WgDW4Y.roa (raw, json)
Hash identifier: y4dXZzTz1hA2z7KxNgQohCRb2HRVBxo1aEJ7Mm1zNG0=
Subject key identifier: 79:50:ED:23:3B:B3:74:E3:D8:85:9B:C4:63:22:FD:F9:68:03:5B:86
Certificate issuer: /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial: 019B26ECFE97E3CAFB38842CD66F60943A72
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/eVDtIzuzdOPYhZvEYyL9-WgDW4Y.roa
Signing time: Tue 16 Dec 2025 11:30:24 +0000
ROA not before: Tue 16 Dec 2025 11:30:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42184
IP address blocks: 2a06:b600::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:26:ec:fe:97:e3:ca:fb:38:84:2c:d6:6f:60:94:3a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Validity
Not Before: Dec 16 11:30:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7950ed233bb374e3d8859bc46322fdf968035b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:2b:73:ee:30:91:7a:84:b6:85:c4:a6:6a:
b3:b8:da:02:f4:91:80:60:80:bb:70:0c:6a:5b:bc:
eb:84:91:89:24:d7:42:83:93:a7:92:48:ad:a3:01:
17:ea:9d:fa:cb:c3:4b:88:ed:62:8c:36:6a:35:bd:
1a:12:53:56:a4:8b:96:c9:26:58:56:5d:d9:21:a3:
60:b6:33:08:2c:25:15:f5:51:46:a5:55:47:5f:52:
96:b6:09:b9:e8:fd:b0:7c:66:89:10:29:ef:2a:2f:
68:24:0a:ea:b6:19:f0:01:22:b9:33:d9:dc:83:84:
ee:d4:97:ab:09:3b:88:8c:ab:14:6d:b5:96:63:2e:
3d:28:27:77:17:8b:39:12:33:e7:01:3b:06:79:99:
38:d9:dd:59:b1:34:59:58:b2:bd:72:53:9a:c7:c8:
64:63:97:d9:9c:4b:aa:49:f1:ba:c0:d7:80:64:45:
a0:1e:0c:3a:79:36:ed:2f:3f:4a:10:93:b6:0a:f5:
12:25:e1:1e:49:24:9d:d8:5d:9c:7b:29:95:00:5a:
ab:79:fd:e1:bd:db:69:e2:b8:63:2d:fb:bd:c4:61:
71:82:2e:c4:08:6d:83:5b:89:f3:22:f8:4d:41:c7:
3f:b3:a9:cf:1d:06:1e:df:e0:49:12:8c:57:a2:b0:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:50:ED:23:3B:B3:74:E3:D8:85:9B:C4:63:22:FD:F9:68:03:5B:86
X509v3 Authority Key Identifier:
keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/eVDtIzuzdOPYhZvEYyL9-WgDW4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b600::/29
Signature Algorithm: sha256WithRSAEncryption
23:9e:84:db:0c:b2:8b:d7:5d:8c:e4:a8:2f:e7:02:b4:f1:31:
e6:77:73:b1:0d:8d:29:50:e2:a3:76:92:7d:15:54:66:65:f5:
be:b1:5b:ec:df:e9:ae:bc:14:6e:86:40:62:c5:c7:01:c9:b6:
87:37:ba:a6:2c:81:30:cf:f4:85:e4:27:cb:80:e2:4c:b4:0f:
0d:d8:3a:e6:59:1f:3a:69:ef:77:51:6c:3f:56:66:01:05:77:
10:44:75:88:49:07:70:db:cd:23:cc:fe:34:0d:01:14:73:56:
c0:7d:3d:2c:fd:9f:8f:fe:66:4c:63:45:c9:16:53:11:4f:df:
2e:66:a9:ff:90:c9:e2:71:36:d5:ca:eb:6f:b4:54:ec:2a:7e:
0d:af:d0:b1:e3:83:84:3a:db:af:b1:c9:bf:47:9a:19:de:1b:
49:a6:83:51:12:98:ac:ec:05:03:97:03:e7:a2:0d:e8:74:9d:
62:ed:0e:e0:0a:54:7a:34:79:4f:41:8c:08:bb:16:a9:28:8a:
bc:a1:bf:71:17:48:24:eb:ac:f7:ce:09:38:d1:6d:a7:5e:11:
a9:ab:d2:d4:29:65:d3:a5:29:6b:2c:c4:df:ed:d4:38:19:dc:
9b:b1:ba:22:ba:2a:19:2a:86:a7:0f:2f:28:7d:90:e5:4e:a7:
ae:51:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 10:56:34 2025 by rpki-client