This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GFIiNIMyO0N6bODdnMLbzvADxeo.roa File: GFIiNIMyO0N6bODdnMLbzvADxeo.roa (raw, json) Hash identifier: 54Iqz6vuJDrLYWx7ARl0MdLktb1TA8SFyeAtaeKkPvM= Subject key identifier: 18:52:22:34:83:32:3B:43:7A:6C:E0:DD:9C:C2:DB:CE:F0:03:C5:EA Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191E0915DACF947FA1F0D8163A22CF4B1E7 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GFIiNIMyO0N6bODdnMLbzvADxeo.roa Signing time: Wed 11 Sep 2024 10:11:48 +0000 ROA not before: Wed 11 Sep 2024 10:11:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128 2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:e0:91:5d:ac:f9:47:fa:1f:0d:81:63:a2:2c:f4:b1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Sep 11 10:11:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=1852223483323b437a6ce0dd9cc2dbcef003c5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:50:c9:b3:01:79:c1:44:68:e1:c2:1f:09: ac:6b:ad:c7:b4:ba:b4:fb:0a:da:52:5c:89:43:5f: 81:c7:5d:58:40:18:78:7e:d6:91:5c:ea:42:7b:96: cc:28:04:fc:67:05:56:54:9d:78:1f:7c:95:b2:50: 05:6d:a2:cf:a7:17:ea:57:6a:b1:75:5b:87:ed:e3: 55:d0:26:6e:f3:ce:ad:7b:9b:08:2c:fb:ff:8f:7b: 70:bf:00:01:07:d7:e5:5a:e8:40:f8:61:79:1b:34: 42:27:79:26:0a:8b:49:6b:58:96:c6:32:ae:2e:d2: 77:83:3c:9d:b8:4e:0f:79:d8:ab:e7:b2:3b:bf:e4: ca:16:84:cb:a2:78:4a:6a:15:86:c9:d1:30:f0:99: 6a:6a:1a:b7:db:34:0b:8d:d0:d1:87:42:0e:d5:43: db:6b:6f:fc:be:3d:1d:f4:39:d3:d4:0b:90:74:48: 3e:87:25:ef:65:7a:c8:71:41:db:40:de:77:59:76: e8:3b:aa:13:69:f2:37:ac:b9:b6:17:47:b6:25:03: 15:5c:2f:31:2f:e6:5b:ff:dc:b1:c3:b3:c4:b2:a5: 49:10:28:f0:d8:82:8f:f0:01:cc:10:f3:db:75:fb: 66:fa:3d:38:0f:37:a9:cc:69:e0:38:cd:f7:f4:5d: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:22:34:83:32:3B:43:7A:6C:E0:DD:9C:C2:DB:CE:F0:03:C5:EA X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GFIiNIMyO0N6bODdnMLbzvADxeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 2001:67c:64:ffff:0:191:d606:d79c/128 2001:67c:64:ffff:0:191:d82c:371b/128 Signature Algorithm: sha256WithRSAEncryption 11:75:5d:ac:e7:e9:f6:7f:69:64:94:15:6a:c7:fc:c0:40:75: 69:d8:c9:14:5e:31:c8:45:1c:33:cb:b4:e6:20:2f:a4:3f:0a: 89:05:e9:d3:92:ca:c1:8f:0e:0e:82:65:24:25:f3:3f:97:e2: 5b:0f:d2:54:75:ac:a3:cf:a2:04:cc:10:a0:7f:5a:c8:14:ce: ec:f1:87:ab:d1:9e:90:14:b2:5a:fd:44:76:a7:2d:90:aa:02: 9e:8d:cc:a9:ce:8b:36:69:56:78:19:cc:6d:ee:fd:7b:28:d4: 3a:29:e0:ce:fe:a7:b4:50:8b:aa:81:33:4c:7e:86:66:54:f9: 1b:67:ed:89:d2:e9:37:1c:30:95:80:07:ba:52:1b:3b:6f:47: 5a:e1:37:f4:ea:a3:36:5c:5d:46:de:3e:54:73:cb:e6:bb:cc: 1a:37:7f:a6:ae:86:1b:4e:52:cd:0e:61:86:49:48:a2:18:49: a8:b9:90:57:2d:cc:6d:c4:b6:35:be:d6:c4:98:e0:86:d5:05: 97:73:a1:8d:6d:73:cc:af:98:33:3b:d0:23:35:bb:e8:d0:7c: d3:4d:2d:3a:99:90:24:44:87:77:73:7d:05:71:3c:1b:79:2f: 24:ea:3c:6f:7f:70:ff:1f:19:7b:bd:44:e0:d7:f0:72:c4:f8: 95:1d:85:80 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZHgkV2s+Uf6Hw2BY6Is9LHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwOTExMTAxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODUyMjIzNDgzMzIzYjQzN2E2Y2UwZGQ5Y2MyZGJjZWYwMDNjNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD9QybMBecFEaOHCHwmsa63HtLq0 +wraUlyJQ1+Bx11YQBh4ftaRXOpCe5bMKAT8ZwVWVJ14H3yVslAFbaLPpxfqV2qx dVuH7eNV0CZu886te5sILPv/j3twvwABB9flWuhA+GF5GzRCJ3kmCotJa1iWxjKu LtJ3gzyduE4Pedir57I7v+TKFoTLonhKahWGydEw8Jlqahq32zQLjdDRh0IO1UPb a2/8vj0d9DnT1AuQdEg+hyXvZXrIcUHbQN53WXboO6oTafI3rLm2F0e2JQMVXC8x L+Zb/9yxw7PEsqVJECjw2IKP8AHMEPPbdftm+j04DzepzGngOM339F29AwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFBhSIjSDMjtDemzg3ZzC287wA8XqMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvR0ZJaU5JTXlPME42Yk9EZG5NTGJ6dkFEeGVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk //8AAAGQ/fLzAgMRACABBnwAZP//AAABkdYG15wDEQAgAQZ8AGT//wAAAZHYLDcb MA0GCSqGSIb3DQEBCwUAA4IBAQARdV2s5+n2f2lklBVqx/zAQHVp2MkUXjHIRRwz y7TmIC+kPwqJBenTksrBjw4OgmUkJfM/l+JbD9JUdayjz6IEzBCgf1rIFM7s8Yer 0Z6QFLJa/UR2py2QqgKejcypzos2aVZ4Gcxt7v17KNQ6KeDO/qe0UIuqgTNMfoZm VPkbZ+2J0uk3HDCVgAe6Uhs7b0da4Tf06qM2XF1G3j5Uc8vmu8waN3+mroYbTlLN DmGGSUiiGEmouZBXLcxtxLY1vtbEmOCG1QWXc6GNbXPMr5gzO9AjNbvo0HzTTS06 mZAkRId3c30FcTwbeS8k6jxvf3D/Hxl7vUTg1/ByxPiVHYWA -----END CERTIFICATE-----Generated at Wed Dec 17 09:44:44 2025 by rpki-client