This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8XOU0fIgi5iKgj8YjrbdPRrTrso.roa File: 8XOU0fIgi5iKgj8YjrbdPRrTrso.roa (raw, json) Hash identifier: wtUEr31yNsY5ksaTp2JNVzpsscVp73dnAl3G361VJc8= Subject key identifier: F1:73:94:D1:F2:20:8B:98:8A:82:3F:18:8E:B6:DD:3D:1A:D3:AE:CA Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0194761DB8CA8D6DFA78CA33BD5CBC3A1051 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8XOU0fIgi5iKgj8YjrbdPRrTrso.roa Signing time: Fri 17 Jan 2025 21:14:06 +0000 ROA not before: Fri 17 Jan 2025 21:14:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:76:1d:b8:ca:8d:6d:fa:78:ca:33:bd:5c:bc:3a:10:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 17 21:14:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f17394d1f2208b988a823f188eb6dd3d1ad3aeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:ea:9a:fe:d6:da:5e:36:15:65:8e:21:e1: c4:4f:2a:11:1a:f0:94:4a:ac:e4:7f:6a:f6:90:01: 6a:b7:a7:fb:c5:73:2e:6a:46:97:4a:bf:df:7d:fc: de:01:21:60:91:3f:ec:ff:19:94:46:ea:2d:c9:ca: 58:35:30:30:0e:2e:cb:ba:55:b7:cb:7d:51:5f:e0: 3f:cb:84:88:85:ac:92:32:84:b0:6a:6b:1f:da:d3: c7:e3:91:e4:e5:e9:2f:4a:1c:87:5b:91:24:80:9e: 08:44:12:89:41:8f:1c:a2:96:06:e3:25:fe:d8:79: 3e:2d:5b:7c:62:3e:4d:01:90:d1:60:fb:58:cd:35: c7:8e:0c:41:5f:2f:3d:6f:cb:12:eb:8e:ec:8d:5c: 65:3b:e5:74:d8:03:d8:b0:c9:c0:0b:49:9d:2f:f1: 16:3a:b4:89:9d:ed:21:ca:ea:50:2f:a2:31:99:0c: 14:84:4c:00:3e:69:7c:6a:13:2a:1d:f6:28:a2:f7: 48:06:a6:21:18:a5:83:5f:b0:36:97:2f:c2:2e:4f: e2:a0:80:d3:fa:d0:25:ae:1c:f4:92:64:88:a3:a8: 22:11:8b:eb:73:ec:29:21:d9:51:2b:9e:7a:b9:cb: 71:16:2c:1b:b7:9a:7d:2a:8b:cc:e8:77:57:10:41: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:73:94:D1:F2:20:8B:98:8A:82:3F:18:8E:B6:DD:3D:1A:D3:AE:CA X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8XOU0fIgi5iKgj8YjrbdPRrTrso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 43:ab:3c:2b:88:2b:72:81:33:76:5c:74:86:6b:b8:23:ce:c3: ea:9c:9d:e7:5d:cd:c0:84:be:ce:8e:7e:b1:95:14:23:b1:43: bb:98:78:9a:87:fb:1a:f9:bb:b9:7f:4b:b6:82:29:5d:d3:c5: 31:a2:cd:31:b6:e5:ab:79:5b:3a:94:36:1f:97:d5:19:81:d9: f7:6d:87:e1:6a:38:cc:5a:4f:ce:08:b4:6c:82:24:d0:5a:33: 66:f5:06:28:2a:c5:4a:99:80:22:65:d1:4b:f6:b1:00:c8:75: 18:7e:2d:1c:e0:42:e0:1f:23:06:69:30:29:8c:8c:44:0d:7f: a5:1c:d3:ad:3e:72:2a:1b:16:31:c2:33:ca:9a:6f:ed:13:79: 8d:e6:3c:63:6e:07:fa:59:c5:ab:33:29:86:eb:88:4b:6c:37: a9:fc:29:64:f8:14:7e:4f:fd:7e:dd:7d:34:99:5d:93:d6:e8: 45:c9:26:23:d7:f9:c0:3f:28:ee:54:65:cf:41:25:00:f6:ff: 0a:c9:96:93:e2:5c:35:84:48:65:a7:4f:59:f3:b9:61:de:b9: 03:de:6b:db:89:78:97:b6:31:97:f8:7b:fc:fc:dd:95:dd:bc: 17:63:d6:8b:2c:e0:ec:b4:bf:5c:29:c7:e9:6c:10:d9:62:f8: 1a:71:d4:ec -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZR2HbjKjW36eMozvVy8OhBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTE3MjExNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTczOTRkMWYyMjA4Yjk4OGE4MjNmMTg4ZWI2ZGQzZDFhZDNhZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNPqmv7W2l42FWWOIeHETyoRGvCU Sqzkf2r2kAFqt6f7xXMuakaXSr/fffzeASFgkT/s/xmURuotycpYNTAwDi7LulW3 y31RX+A/y4SIhaySMoSwamsf2tPH45Hk5ekvShyHW5EkgJ4IRBKJQY8copYG4yX+ 2Hk+LVt8Yj5NAZDRYPtYzTXHjgxBXy89b8sS647sjVxlO+V02APYsMnAC0mdL/EW OrSJne0hyupQL6IxmQwUhEwAPml8ahMqHfYoovdIBqYhGKWDX7A2ly/CLk/ioIDT +tAlrhz0kmSIo6giEYvrc+wpIdlRK556uctxFiwbt5p9KovM6HdXEEF37wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPFzlNHyIIuYioI/GI623T0a067KMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvOFhPVTBmSWdpNWlLZ2o4WWpyYmRQUnJUcnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAQ6s8K4grcoEzdlx0hmu4I87D 6pyd513NwIS+zo5+sZUUI7FDu5h4mof7Gvm7uX9LtoIpXdPFMaLNMbblq3lbOpQ2 H5fVGYHZ922H4Wo4zFpPzgi0bIIk0FozZvUGKCrFSpmAImXRS/axAMh1GH4tHOBC 4B8jBmkwKYyMRA1/pRzTrT5yKhsWMcIzyppv7RN5jeY8Y24H+lnFqzMphuuIS2w3 qfwpZPgUfk/9ft19NJldk9boRckmI9f5wD8o7lRlz0ElAPb/CsmWk+JcNYRIZadP WfO5Yd65A95r24l4l7Yxl/h7/Pzdld28F2PWiyzg7LS/XCnH6WwQ2WL4GnHU7A== -----END CERTIFICATE-----Generated at Wed Dec 17 18:25:47 2025 by rpki-client