This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5gPSEAT8osJPYi5_eiyCGpzFqLE.roa
File: 5gPSEAT8osJPYi5_eiyCGpzFqLE.roa (raw, json)
Hash identifier: e8NfRCAGFHSpKgyAUxG/qjky9QqiKsSAbW++lCiyCLU=
Subject key identifier: E6:03:D2:10:04:FC:A2:C2:4F:62:2E:7F:7A:2C:82:1A:9C:C5:A8:B1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019591218CC948E235F297A73DC7C666F334
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5gPSEAT8osJPYi5_eiyCGpzFqLE.roa
Signing time: Thu 13 Mar 2025 20:10:49 +0000
ROA not before: Thu 13 Mar 2025 20:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:91:21:8c:c9:48:e2:35:f2:97:a7:3d:c7:c6:66:f3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 20:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e603d21004fca2c24f622e7f7a2c821a9cc5a8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:3a:fc:63:f8:44:6c:0c:49:2a:88:e0:59:
5e:0b:09:73:cf:c6:95:57:fe:d3:77:ea:0d:c4:45:
a9:10:db:c0:3f:55:92:1b:7e:12:53:c0:1a:ae:3f:
8d:6e:b9:51:4d:92:1e:67:a6:8b:5a:bd:2d:bc:b5:
6e:7e:2f:a9:f3:13:e2:fe:09:f2:a8:21:05:94:1c:
48:ea:1a:23:81:4a:b5:f1:56:41:81:a4:a5:c0:c7:
16:b1:da:02:12:41:f0:79:67:68:72:05:de:ab:41:
7e:21:11:a9:22:9f:30:6f:a5:99:c9:b5:6d:89:3b:
c0:b0:09:b2:a2:b6:1f:c0:4b:99:ff:97:93:bb:41:
fe:be:c7:70:15:28:92:3a:cb:17:ed:dc:19:54:4c:
49:ae:38:ed:3a:e4:00:48:66:dd:17:96:5f:27:dd:
e8:b0:e4:b5:7b:05:3d:34:f0:65:2f:47:11:4f:3f:
a5:1f:94:0b:95:90:b8:05:f5:e1:52:66:7e:3b:09:
24:cc:4e:a5:6e:50:61:27:be:69:2b:82:ab:e9:59:
b6:47:24:83:2d:5e:2c:11:2a:52:ff:4f:61:2b:58:
31:61:ac:c2:51:69:e4:8c:15:1f:b7:99:98:e9:52:
39:e0:b6:f1:6f:52:fa:43:ee:6d:1d:41:25:0d:0c:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:03:D2:10:04:FC:A2:C2:4F:62:2E:7F:7A:2C:82:1A:9C:C5:A8:B1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5gPSEAT8osJPYi5_eiyCGpzFqLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
54:6a:34:cd:3e:b5:55:66:74:5d:a8:b1:f3:66:77:af:dd:b9:
04:1a:52:60:c7:a2:df:6c:57:31:fc:96:74:c1:1b:1f:6b:8e:
da:c0:16:f0:73:bf:46:fa:8b:fe:4b:68:30:60:0b:59:93:c9:
fd:41:a2:65:bd:e5:41:c5:63:59:33:83:1c:8e:95:4c:b3:57:
47:0e:71:c2:28:76:ff:23:97:06:34:bc:94:c1:f4:56:cc:c1:
aa:03:32:f2:43:f4:5e:16:d5:70:52:37:38:8e:2e:93:25:0a:
4b:e3:e3:51:1d:ab:54:a8:17:3e:cc:8f:e0:63:b4:af:12:51:
ad:24:11:df:58:08:24:51:cf:05:3c:c1:52:96:fe:05:f4:b4:
11:85:c1:53:9e:c4:77:c5:62:60:42:79:86:2a:7a:7f:c2:a9:
06:6a:35:3c:6d:40:91:49:fc:2b:d5:bf:e0:d9:3e:64:9e:c1:
26:f2:73:f1:81:39:7c:be:13:0e:9f:3b:a4:5f:34:4c:6d:87:
a8:d5:7a:b8:ef:28:af:c0:83:53:23:40:81:25:e8:ed:14:da:
e1:95:b0:c3:85:72:7e:86:7d:cc:36:26:2c:3a:46:dc:8c:59:
a2:e8:53:3c:4b:61:0a:56:d9:74:a8:0e:a8:3b:fc:d7:aa:52:
58:2c:f0:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 17 15:15:51 2025 by rpki-client