This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LYu7b5Bhg7MwsZ6447EMjbGaSqc.roa File: LYu7b5Bhg7MwsZ6447EMjbGaSqc.roa (raw, json) Hash identifier: np8gIgZDolpuNuX625W4fdRTiKucCNkgfUR903009RQ= Subject key identifier: 2D:8B:BB:6F:90:61:83:B3:30:B1:9E:B8:E3:B1:0C:8D:B1:9A:4A:A7 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01942A1FDF14BFAF89EB49B0CEE93A90B0D7 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LYu7b5Bhg7MwsZ6447EMjbGaSqc.roa Signing time: Fri 03 Jan 2025 03:05:19 +0000 ROA not before: Fri 03 Jan 2025 03:05:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2a1f:aedb/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:2a:1f:df:14:bf:af:89:eb:49:b0:ce:e9:3a:90:b0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 3 03:05:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d8bbb6f906183b330b19eb8e3b10c8db19a4aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:2b:6d:26:05:ca:ac:76:c8:c8:63:81:40: 7a:95:63:7e:b5:65:17:fb:fc:65:5c:b9:86:10:8b: 66:9f:58:df:6f:f9:c4:92:a8:3f:2b:8c:57:76:78: 95:3f:4a:c2:41:8a:3a:35:85:6b:74:40:df:65:3f: e4:61:94:86:9e:b5:e2:64:5c:39:e4:af:12:82:c7: c9:81:14:12:52:24:ae:50:06:95:94:89:a8:29:4f: 3a:2e:5b:8c:34:4b:dc:25:2c:e6:d7:6d:21:01:3b: 80:1e:37:d4:9d:1f:73:57:f1:a7:c4:08:8a:fa:c9: 6e:ae:9c:ef:57:c4:79:92:e4:68:e0:27:49:04:ae: b3:32:59:ef:83:19:20:15:fa:a1:2e:08:a6:89:60: db:0f:a9:02:b2:5b:20:da:9a:1d:79:4f:f7:c3:5e: 0b:c0:71:1b:90:d5:57:1f:08:4f:7c:72:b3:33:2a: c6:17:16:9f:07:d2:fc:29:2d:6e:e4:6a:48:f5:bf: 97:18:ce:5e:13:ac:cc:a2:b2:58:35:2f:dc:1d:31: 65:c5:a9:2b:56:7f:e1:e4:29:54:77:b5:1c:d6:c3: bc:8b:06:27:44:60:a7:62:a5:77:90:d4:ea:83:7b: 50:24:c7:88:83:ab:12:00:30:9a:63:06:74:6f:ed: a5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:BB:6F:90:61:83:B3:30:B1:9E:B8:E3:B1:0C:8D:B1:9A:4A:A7 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LYu7b5Bhg7MwsZ6447EMjbGaSqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2a1f:aedb/128 Signature Algorithm: sha256WithRSAEncryption 1e:fe:86:b6:c0:b9:93:39:ed:be:a3:1a:26:8d:13:91:ec:5b: af:1d:d5:41:60:f7:c1:d3:18:9f:6b:f4:50:be:41:d2:22:fd: 81:43:98:a8:f4:ff:8c:14:df:b5:cf:0c:11:56:4b:52:a8:f1: 2b:40:0b:e8:f8:9d:d2:78:fb:d0:b0:1f:1e:7b:a7:da:62:9d: 0d:13:4b:3b:e5:30:1d:3e:2b:77:ad:b9:eb:70:86:a2:52:93: 2d:6e:e8:58:3b:f5:18:b2:b9:b9:98:d7:99:0e:66:9c:6f:57: 1b:3e:b8:79:04:5b:55:37:8d:e8:37:be:81:77:17:fc:53:df: f7:fb:8f:93:05:77:2c:57:20:b0:85:06:2b:9d:2e:c0:e8:5a: aa:1f:d6:f4:f9:6b:91:7f:b4:39:3d:c3:13:9e:68:63:a5:54: 26:f2:4e:24:24:7b:4e:78:5f:ba:d5:45:67:f9:d2:b8:da:92: da:6d:6b:03:58:b6:84:b7:d4:65:d1:53:d5:d7:7a:1c:99:77: ea:80:bf:f7:e5:d4:ae:9c:65:60:dc:aa:c9:f6:2e:a8:1b:f3: 10:d4:65:6b:04:ff:6f:e4:5c:d0:7f:13:91:fe:00:30:94:9f: 6e:72:00:4b:5d:39:7a:78:04:f9:38:95:5a:cc:e4:29:ea:a7: 29:ed:f3:21 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZQqH98Uv6+J60mwzuk6kLDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTAzMDMwNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDhiYmI2ZjkwNjE4M2IzMzBiMTllYjhlM2IxMGM4ZGIxOWE0YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/QrbSYFyqx2yMhjgUB6lWN+tWUX +/xlXLmGEItmn1jfb/nEkqg/K4xXdniVP0rCQYo6NYVrdEDfZT/kYZSGnrXiZFw5 5K8SgsfJgRQSUiSuUAaVlImoKU86LluMNEvcJSzm120hATuAHjfUnR9zV/GnxAiK +slurpzvV8R5kuRo4CdJBK6zMlnvgxkgFfqhLgimiWDbD6kCslsg2podeU/3w14L wHEbkNVXHwhPfHKzMyrGFxafB9L8KS1u5GpI9b+XGM5eE6zMorJYNS/cHTFlxakr Vn/h5ClUd7Uc1sO8iwYnRGCnYqV3kNTqg3tQJMeIg6sSADCaYwZ0b+2lQwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFC2Lu2+QYYOzMLGeuOOxDI2xmkqnMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvTFl1N2I1QmhnN013c1o2NDQ3RU1qYkdhU3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGUKh+u2zANBgkqhkiG9w0BAQsFAAOCAQEAHv6GtsC5kzntvqMaJo0Tkexb rx3VQWD3wdMYn2v0UL5B0iL9gUOYqPT/jBTftc8MEVZLUqjxK0AL6Pid0nj70LAf Hnun2mKdDRNLO+UwHT4rd62563CGolKTLW7oWDv1GLK5uZjXmQ5mnG9XGz64eQRb VTeN6De+gXcX/FPf9/uPkwV3LFcgsIUGK50uwOhaqh/W9PlrkX+0OT3DE55oY6VU JvJOJCR7TnhfutVFZ/nSuNqS2m1rA1i2hLfUZdFT1dd6HJl36oC/9+XUrpxlYNyq yfYuqBvzENRlawT/b+Rc0H8Tkf4AMJSfbnIAS105engE+TiVWszkKeqnKe3zIQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:13:17 2025 by rpki-client