This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/XhCZw936EUu_QCuSJG6Pupqqifs.roa File: XhCZw936EUu_QCuSJG6Pupqqifs.roa (raw, json) Hash identifier: EugHBX4bqCdga50F/hFDl4tawUvQjoEuUsJqOEY84iw= Subject key identifier: 5E:10:99:C3:DD:FA:11:4B:BF:40:2B:92:24:6E:8F:BA:9A:AA:89:FB Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191DBD7F442C283D0B96117FA9E4FBF07F2 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/XhCZw936EUu_QCuSJG6Pupqqifs.roa Signing time: Tue 10 Sep 2024 12:10:48 +0000 ROA not before: Tue 10 Sep 2024 12:10:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128 2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:db:d7:f4:42:c2:83:d0:b9:61:17:fa:9e:4f:bf:07:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Sep 10 12:10:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=5e1099c3ddfa114bbf402b92246e8fba9aaa89fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:c0:a2:92:7c:ce:3b:b8:35:3c:cf:aa:d0: a9:32:9c:01:40:94:1f:fe:e8:63:71:de:86:3e:24: 05:b4:06:43:27:2b:fa:4f:00:00:4d:0d:21:fa:4c: bc:6a:82:b8:a0:13:b6:ea:cd:29:f0:a4:ca:ee:75: ee:63:49:20:65:23:60:8e:63:56:29:1c:38:59:ad: 05:d3:79:b2:32:6f:27:f2:da:4c:4f:3d:a5:0e:6e: 08:d1:24:e2:bb:ee:92:e9:00:35:0a:b2:cc:fa:fa: a9:09:b9:78:c8:6b:b1:04:50:13:f0:b0:31:65:98: b0:26:19:a1:91:ef:32:fd:5a:a1:ff:88:f2:3a:3f: ad:cf:0d:33:8c:70:e8:ae:6f:19:d6:fe:92:98:71: a0:34:e5:d9:08:f4:a2:bf:25:69:81:85:70:c6:c0: 96:0d:6b:48:56:bb:d2:ee:71:96:f0:14:9c:80:30: 59:c9:0e:a4:93:23:b1:5b:74:e7:97:64:f2:f3:3e: 68:2e:43:0f:5d:78:3e:a4:f9:76:90:fc:61:47:b1: 23:43:d8:de:ca:76:db:08:a9:47:4a:c5:e3:6a:e4: 85:a5:51:0f:91:b9:4d:b4:2b:8a:66:c4:cb:0e:d4: d3:3f:a2:c3:d9:09:71:4a:ff:06:26:be:ab:54:6b: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:10:99:C3:DD:FA:11:4B:BF:40:2B:92:24:6E:8F:BA:9A:AA:89:FB X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/XhCZw936EUu_QCuSJG6Pupqqifs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 2001:67c:64:ffff:0:191:d606:d79c/128 2001:67c:64:ffff:0:191:d82c:371b/128 Signature Algorithm: sha256WithRSAEncryption 8f:fd:54:fe:d0:f5:0e:b7:3f:81:7d:63:88:66:99:d0:8d:fb: 3e:8d:19:0b:76:8e:71:8d:d1:d7:ca:fd:61:32:8a:67:bb:ab: 99:88:e7:3d:35:dc:83:3e:b7:aa:ad:7b:ee:d3:9a:74:4e:c1: ca:61:dc:9d:2d:79:e7:5d:2e:b2:fd:8e:b6:32:9f:96:af:19: 0e:fe:18:97:bc:5b:fa:3a:e7:2d:64:d8:e1:50:f4:8c:3e:2f: fd:e8:f3:5c:33:d6:f0:56:12:c6:a7:ad:41:16:57:c0:66:8e: 3a:64:90:d3:e6:53:9e:2b:6d:d8:d2:29:c3:3b:3e:ce:05:17: 85:ba:7e:b6:63:4c:92:82:f4:75:f7:2e:b9:ce:1b:42:82:51: ae:22:6c:8b:66:5b:42:3b:7f:55:1a:ad:ef:9d:d9:cb:76:fb: 29:13:43:83:17:fe:e3:cc:25:76:3d:af:21:bc:32:58:57:d4: 50:b6:6f:c1:4a:d2:81:4d:1a:78:f7:93:fb:9f:38:ed:67:d0: 4c:44:f6:2e:26:66:65:dd:9c:2b:4b:6d:c7:09:55:f5:0d:1d: 22:94:9d:d0:79:17:06:f5:a8:a6:a8:77:e4:5e:f7:0b:a8:84: eb:59:9d:79:9e:4a:c1:97:bc:34:f8:0a:d1:95:93:1a:76:20: 9b:1b:c4:dc -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZHb1/RCwoPQuWEX+p5PvwfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwOTEwMTIxMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTEwOTljM2RkZmExMTRiYmY0MDJiOTIyNDZlOGZiYTlhYWE4OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT/AopJ8zju4NTzPqtCpMpwBQJQf /uhjcd6GPiQFtAZDJyv6TwAATQ0h+ky8aoK4oBO26s0p8KTK7nXuY0kgZSNgjmNW KRw4Wa0F03myMm8n8tpMTz2lDm4I0STiu+6S6QA1CrLM+vqpCbl4yGuxBFAT8LAx ZZiwJhmhke8y/Vqh/4jyOj+tzw0zjHDorm8Z1v6SmHGgNOXZCPSivyVpgYVwxsCW DWtIVrvS7nGW8BScgDBZyQ6kkyOxW3Tnl2Ty8z5oLkMPXXg+pPl2kPxhR7EjQ9je ynbbCKlHSsXjauSFpVEPkblNtCuKZsTLDtTTP6LD2QlxSv8GJr6rVGt4EwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFF4QmcPd+hFLv0ArkiRuj7qaqon7MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvWGhDWnc5MzZFVXVfUUN1U0pHNlB1cHFxaWZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk //8AAAGQ/fLzAgMRACABBnwAZP//AAABkdYG15wDEQAgAQZ8AGT//wAAAZHYLDcb MA0GCSqGSIb3DQEBCwUAA4IBAQCP/VT+0PUOtz+BfWOIZpnQjfs+jRkLdo5xjdHX yv1hMopnu6uZiOc9NdyDPreqrXvu05p0TsHKYdydLXnnXS6y/Y62Mp+WrxkO/hiX vFv6OuctZNjhUPSMPi/96PNcM9bwVhLGp61BFlfAZo46ZJDT5lOeK23Y0inDOz7O BReFun62Y0ySgvR19y65zhtCglGuImyLZltCO39VGq3vndnLdvspE0ODF/7jzCV2 Pa8hvDJYV9RQtm/BStKBTRp495P7nzjtZ9BMRPYuJmZl3ZwrS23HCVX1DR0ilJ3Q eRcG9aimqHfkXvcLqITrWZ15nkrBl7w0+ArRlZMadiCbG8Tc -----END CERTIFICATE-----Generated at Sat Dec 20 19:35:21 2025 by rpki-client