This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jh1xn7eq4KVWwEiEft_-Qq5mxRU.roa File: Jh1xn7eq4KVWwEiEft_-Qq5mxRU.roa (raw, json) Hash identifier: 43C7x7qMLGPG151cW8Hmcey8FQykkA/U6LWcYU+qyaM= Subject key identifier: 26:1D:71:9F:B7:AA:E0:A5:56:C0:48:84:7E:DF:FE:42:AE:66:C5:15 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0194A3251EEF149538E4AFD8D307D408A86F Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jh1xn7eq4KVWwEiEft_-Qq5mxRU.roa Signing time: Sun 26 Jan 2025 15:05:06 +0000 ROA not before: Sun 26 Jan 2025 15:05:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:a324:5a53/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:a3:25:1e:ef:14:95:38:e4:af:d8:d3:07:d4:08:a8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 26 15:05:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=261d719fb7aae0a556c048847edffe42ae66c515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:da:20:72:10:d3:c9:41:bb:7a:11:f1:64: 65:8b:7e:d1:c5:57:67:9a:5f:0e:ca:a4:f2:ef:b0: 29:5e:ed:17:0e:dc:88:0b:2c:de:12:d2:ee:24:ad: 01:47:00:52:fc:af:ed:44:c6:95:33:85:ac:ae:33: 49:66:81:ff:5c:3b:8d:82:1d:44:7f:92:ac:d6:5b: 87:d1:27:88:e1:73:1f:82:77:24:a8:00:88:20:8e: 04:1b:85:97:2c:1c:41:58:18:66:7a:29:1a:1b:e7: aa:79:a2:a4:73:13:99:21:df:e3:4e:e4:57:8b:72: 0f:30:29:fb:00:26:00:e8:87:6b:37:3b:47:57:16: 1a:34:b3:81:75:7d:64:a7:9c:64:41:a4:f3:2c:83: 25:57:6b:04:80:04:f6:ce:7d:f0:f8:9e:16:1d:8b: 56:8f:91:04:be:37:0d:46:7e:fd:cc:e3:3e:fb:ad: 5c:8b:7e:f9:bf:e6:88:8b:bc:ad:bd:eb:bf:f9:18: 53:5f:b0:1d:3a:4e:0d:2a:01:9e:7d:19:ee:10:5e: 70:f4:a3:c4:03:5f:47:96:40:79:3c:e3:16:76:5a: 29:38:10:aa:8f:5d:2e:38:98:9e:c1:4b:38:ff:05: 4f:d5:de:f7:c4:79:f5:90:e5:73:de:72:f3:94:ab: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1D:71:9F:B7:AA:E0:A5:56:C0:48:84:7E:DF:FE:42:AE:66:C5:15 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jh1xn7eq4KVWwEiEft_-Qq5mxRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:a324:5a53/128 Signature Algorithm: sha256WithRSAEncryption 89:f6:c5:69:c9:88:fe:8b:e9:93:88:4d:92:d1:56:22:5b:d2: da:80:e2:d9:e1:90:10:a0:a2:da:df:4a:67:eb:24:aa:b9:3f: 90:4b:91:d9:8d:3c:3e:91:2e:b2:37:68:c0:59:69:41:c7:1f: fe:e0:5a:4d:43:86:24:7a:9e:d4:7c:ee:68:ab:b6:38:1b:59: a7:7d:31:86:49:43:68:7a:92:81:96:57:10:0e:1e:a8:91:d1: 99:85:79:05:69:1d:cb:e1:e3:13:a6:bb:71:a9:50:c8:5a:d6: 54:37:75:11:e3:52:75:31:46:46:93:4f:bb:52:33:8b:ab:b1: 5b:eb:db:90:84:57:da:90:c6:0e:d5:7c:b5:5b:ef:ed:ab:3a: d2:ca:c1:50:27:20:f4:a9:dd:f0:28:fe:5f:96:1b:f1:d4:7d: a6:e0:85:70:24:fe:6f:db:0a:20:d3:5e:64:29:95:3c:0e:ec: 2a:b7:7c:67:d5:8f:49:2b:40:2c:c9:b8:32:24:69:ea:9b:e3: 4b:e1:48:bc:eb:55:f5:c9:e7:aa:85:4c:67:8c:f1:57:70:f3: 37:be:fa:a6:05:95:b3:06:4e:e6:b5:e9:89:f7:6a:1c:49:3d: 8e:c8:7e:5b:7e:18:5c:b3:a1:b5:ff:37:c0:50:c6:34:51:5c: 56:b0:e3:9a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZSjJR7vFJU45K/Y0wfUCKhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTI2MTUwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjFkNzE5ZmI3YWFlMGE1NTZjMDQ4ODQ3ZWRmZmU0MmFlNjZjNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mnaIHIQ08lBu3oR8WRli37RxVdn ml8OyqTy77ApXu0XDtyICyzeEtLuJK0BRwBS/K/tRMaVM4WsrjNJZoH/XDuNgh1E f5Ks1luH0SeI4XMfgnckqACIII4EG4WXLBxBWBhmeikaG+eqeaKkcxOZId/jTuRX i3IPMCn7ACYA6IdrNztHVxYaNLOBdX1kp5xkQaTzLIMlV2sEgAT2zn3w+J4WHYtW j5EEvjcNRn79zOM++61ci375v+aIi7ytveu/+RhTX7AdOk4NKgGefRnuEF5w9KPE A19HlkB5POMWdlopOBCqj10uOJiewUs4/wVP1d73xHn1kOVz3nLzlKseRQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFCYdcZ+3quClVsBIhH7f/kKuZsUVMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvSmgxeG43ZXE0S1ZXd0VpRWZ0Xy1RcTVteFJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGUoyRaUzANBgkqhkiG9w0BAQsFAAOCAQEAifbFacmI/ovpk4hNktFWIlvS 2oDi2eGQEKCi2t9KZ+skqrk/kEuR2Y08PpEusjdowFlpQccf/uBaTUOGJHqe1Hzu aKu2OBtZp30xhklDaHqSgZZXEA4eqJHRmYV5BWkdy+HjE6a7calQyFrWVDd1EeNS dTFGRpNPu1Izi6uxW+vbkIRX2pDGDtV8tVvv7as60srBUCcg9Knd8Cj+X5Yb8dR9 puCFcCT+b9sKINNeZCmVPA7sKrd8Z9WPSStALMm4MiRp6pvjS+FIvOtV9cnnqoVM Z4zxV3DzN776pgWVswZO5rXpifdqHEk9jsh+W34YXLOhtf83wFDGNFFcVrDjmg== -----END CERTIFICATE-----Generated at Thu Dec 25 19:43:24 2025 by rpki-client