This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CD8z6N2oIUcN6513RRUapqIKPis.roa File: CD8z6N2oIUcN6513RRUapqIKPis.roa (raw, json) Hash identifier: QCwsKDfSF+bLhZ5kAPWP+O5nnAgiVj1iYqNE3E19sug= Subject key identifier: 08:3F:33:E8:DD:A8:21:47:0D:EB:9D:77:45:15:1A:A6:A2:0A:3E:2B Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01935B7C90B5672C536F7CFE52C521EC97B4 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CD8z6N2oIUcN6513RRUapqIKPis.roa Signing time: Sun 24 Nov 2024 00:05:10 +0000 ROA not before: Sun 24 Nov 2024 00:05:10 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:193:5b7b:f8d0/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:5b:7c:90:b5:67:2c:53:6f:7c:fe:52:c5:21:ec:97:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Nov 24 00:05:10 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=083f33e8dda821470deb9d7745151aa6a20a3e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:ca:53:9b:5d:81:e6:99:93:55:0f:c5:13: eb:42:0d:5b:ad:8e:2f:b7:f1:5d:65:bb:f7:9d:58: 1b:8b:8c:70:2a:ab:1d:b2:69:1f:7a:08:e5:b1:fb: e2:6a:26:9f:ce:1b:92:80:83:46:bc:b6:ea:dd:64: 6c:92:36:bd:1f:5e:e6:4f:44:bd:3e:1d:dc:18:87: f4:b8:1c:44:33:7d:d1:7b:1d:7e:76:94:cf:6e:36: d1:e9:ba:16:e2:89:39:bf:59:16:38:fa:93:23:97: c2:17:52:6c:90:59:0e:dc:be:6e:2a:3c:6c:59:17: db:c0:fd:dc:02:b6:25:4d:dc:88:1b:4d:b4:a1:82: 58:05:b6:ad:db:f0:bb:30:12:61:a0:49:b7:93:bf: 13:9c:85:fb:a7:a7:ef:96:4f:f8:3e:c7:47:4f:d1: 76:3c:45:3e:a4:14:99:1f:80:72:82:66:7f:3f:b9: c0:60:22:be:03:cc:a4:f7:4d:14:9a:bb:4a:2c:f6: 86:4a:83:68:54:13:fb:ab:50:45:9b:ce:e2:d0:65: a7:0c:c7:9b:d7:5d:e3:2b:46:69:f7:9f:f7:56:a9: 24:da:c5:13:d2:95:f6:cc:f2:96:b4:13:3a:30:41: 43:25:df:d3:de:f8:8a:b3:f8:75:db:82:e1:3a:e0: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3F:33:E8:DD:A8:21:47:0D:EB:9D:77:45:15:1A:A6:A2:0A:3E:2B X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CD8z6N2oIUcN6513RRUapqIKPis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:193:5b7b:f8d0/128 Signature Algorithm: sha256WithRSAEncryption 4c:22:b8:75:1c:f2:cb:29:60:38:91:8e:2b:0e:4e:3c:1e:d3: c6:81:71:fc:2f:c0:59:04:1b:1e:f9:a9:68:11:e5:2a:49:5d: 0a:c2:1e:ad:fc:c7:89:75:84:f7:1b:b0:fe:1a:a8:f1:4c:4e: 5c:b5:64:5a:ba:10:eb:6f:d3:00:d4:19:a7:3f:cd:0a:5e:0a: 96:e2:fa:1b:b0:24:92:c4:66:0f:93:68:3d:50:75:ab:34:e8: 97:bd:65:88:79:02:65:dc:9f:85:d9:0f:e8:e0:df:bb:7c:fb: 0e:b6:98:c7:1e:6c:50:ce:ab:7a:4e:53:0e:36:2b:71:3d:47: 8b:7f:b2:dd:8d:06:5f:5f:06:78:b8:7c:00:aa:cb:ee:23:f9: e6:29:bd:e0:d0:5f:d4:f0:4c:a7:ae:ad:43:5c:b6:ab:86:6f: 30:4a:03:d6:33:5e:80:71:ea:bf:6a:c0:37:e7:46:f1:42:e7: 1e:41:09:94:6a:cb:bc:2d:78:88:b9:19:05:7d:77:b8:f9:00: 01:f9:65:c2:9b:6c:12:b4:b3:39:a4:f8:3e:d3:07:e5:db:bb: af:67:81:45:f3:34:3a:ec:53:01:05:fe:c7:eb:2a:84:ee:f3: 79:84:a6:31:9d:29:74:85:ae:d3:2b:0e:19:8e:c6:f2:83:6d: dc:5e:0f:77 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZNbfJC1ZyxTb3z+UsUh7Je0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQxMTI0MDAwNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNmMzNlOGRkYTgyMTQ3MGRlYjlkNzc0NTE1MWFhNmEyMGEzZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnzKU5tdgeaZk1UPxRPrQg1brY4v t/FdZbv3nVgbi4xwKqsdsmkfegjlsfviaiafzhuSgINGvLbq3WRskja9H17mT0S9 Ph3cGIf0uBxEM33Rex1+dpTPbjbR6boW4ok5v1kWOPqTI5fCF1JskFkO3L5uKjxs WRfbwP3cArYlTdyIG020oYJYBbat2/C7MBJhoEm3k78TnIX7p6fvlk/4PsdHT9F2 PEU+pBSZH4BygmZ/P7nAYCK+A8yk900UmrtKLPaGSoNoVBP7q1BFm87i0GWnDMeb 113jK0Zp95/3Vqkk2sUT0pX2zPKWtBM6MEFDJd/T3viKs/h124LhOuAi2QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFAg/M+jdqCFHDeudd0UVGqaiCj4rMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvQ0Q4ejZOMm9JVWNONjUxM1JSVWFwcUlLUGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGTW3v40DANBgkqhkiG9w0BAQsFAAOCAQEATCK4dRzyyylgOJGOKw5OPB7T xoFx/C/AWQQbHvmpaBHlKkldCsIerfzHiXWE9xuw/hqo8UxOXLVkWroQ62/TANQZ pz/NCl4KluL6G7AkksRmD5NoPVB1qzTol71liHkCZdyfhdkP6ODfu3z7DraYxx5s UM6rek5TDjYrcT1Hi3+y3Y0GX18GeLh8AKrL7iP55im94NBf1PBMp66tQ1y2q4Zv MEoD1jNegHHqv2rAN+dG8ULnHkEJlGrLvC14iLkZBX13uPkAAfllwptsErSzOaT4 PtMH5du7r2eBRfM0OuxTAQX+x+sqhO7zeYSmMZ0pdIWu0ysOGY7G8oNt3F4Pdw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:48:33 2025 by rpki-client