This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/csDQmcWEO55m9dQi57q_zVAr4p8.roa File: csDQmcWEO55m9dQi57q_zVAr4p8.roa (raw, json) Hash identifier: jaTIOSt2I/QaTJ8EFKMDaXHqTRbb+Qfu8cqiWgG6dPM= Subject key identifier: 72:C0:D0:99:C5:84:3B:9E:66:F5:D4:22:E7:BA:BF:CD:50:2B:E2:9F Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 01947A676ECFAC364B96C6CD8955C8974DBA Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/csDQmcWEO55m9dQi57q_zVAr4p8.roa Signing time: Sat 18 Jan 2025 17:13:06 +0000 ROA not before: Sat 18 Jan 2025 17:13:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:7a:67:6e:cf:ac:36:4b:96:c6:cd:89:55:c8:97:4d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 18 17:13:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=72c0d099c5843b9e66f5d422e7babfcd502be29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:e3:df:0b:e1:62:aa:bd:f2:4a:6a:e4:59: de:a4:e4:f1:ef:6b:4e:46:37:39:de:e1:6d:64:ea: 23:60:cf:19:25:a4:de:dc:5d:21:25:86:7e:6b:60: 4f:78:4c:eb:ae:15:2e:49:3e:d4:24:fb:8b:97:84: a5:dd:a1:f8:e2:73:f8:7a:3a:56:5c:2e:3e:6a:79: 3c:43:6d:5d:2f:0d:c4:b7:a5:18:cd:4d:33:76:ed: 0e:6e:dd:25:c2:ad:a7:37:f3:48:71:af:1c:b5:47: 70:21:b3:d8:c8:67:ec:cc:25:c8:35:54:93:cd:d0: ef:eb:b3:3f:80:62:cb:75:2c:ef:7e:48:8d:1b:9b: 3c:e8:95:8f:09:84:f9:18:c9:52:44:b8:a5:19:3b: bb:2b:1d:96:62:a6:29:fa:5b:a0:31:6e:95:9d:a8: 67:5f:d5:44:65:67:a3:dc:cc:e2:42:bf:ba:3a:d5: 5b:ec:92:49:d9:16:4f:0c:c1:49:09:b7:6c:0c:c3: 85:12:eb:12:de:af:09:19:f8:2d:bc:c9:f8:4c:d3: ad:06:c4:c7:4d:b8:dc:42:3b:f2:8c:1e:e1:e6:ac: c7:84:03:a6:ff:5c:80:7a:dd:cf:7d:fd:21:91:33: f5:d2:6a:47:66:f1:e3:04:cb:96:f6:c4:f5:68:2c: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C0:D0:99:C5:84:3B:9E:66:F5:D4:22:E7:BA:BF:CD:50:2B:E2:9F X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/csDQmcWEO55m9dQi57q_zVAr4p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 48:31:29:bb:d9:ed:8d:81:5c:49:1e:8c:59:14:d1:c4:6a:18: 88:eb:51:cf:6e:5a:43:10:54:e9:aa:39:da:96:bd:e0:ea:ab: 71:57:09:53:fb:f4:75:c7:9e:9e:0e:36:1d:36:7c:2f:3a:59: 8d:36:30:59:82:fc:72:ac:36:39:c2:5a:bf:c2:e3:b4:62:73: 26:08:49:59:1f:a0:9b:56:f3:0d:d4:e0:64:ac:8a:a6:85:a0: 31:9c:08:53:b7:af:01:42:ca:6b:4a:8f:af:b6:e9:f1:bc:e2: 9d:d9:d0:93:c0:c4:a5:9c:3a:9d:45:d3:b9:74:10:51:f6:ee: a5:7e:24:ba:f5:38:1b:b9:9d:4a:96:47:88:79:55:6f:94:12: 15:06:f2:15:38:02:6b:26:11:7f:74:f0:e4:02:78:5d:a9:1f: 4a:80:55:5f:44:dc:e4:14:68:5d:a7:9b:a4:38:d8:02:52:26: 5c:69:44:b9:0e:91:80:84:6d:ba:60:b9:1d:bc:9b:17:fe:1e: 32:16:fe:59:a9:e0:9a:be:77:49:21:33:da:19:db:3f:e9:e0: 40:4f:7a:83:6e:03:0c:16:6d:82:22:27:d6:99:d9:0d:8a:f5: e8:2f:4c:0b:47:9a:38:53:04:14:4c:d9:25:08:b1:c9:28:4e: a4:01:58:16 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZR6Z27PrDZLlsbNiVXIl026MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTE4MTcxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmMwZDA5OWM1ODQzYjllNjZmNWQ0MjJlN2JhYmZjZDUwMmJlMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F7j3wvhYqq98kpq5FnepOTx72tO Rjc53uFtZOojYM8ZJaTe3F0hJYZ+a2BPeEzrrhUuST7UJPuLl4Sl3aH44nP4ejpW XC4+ank8Q21dLw3Et6UYzU0zdu0Obt0lwq2nN/NIca8ctUdwIbPYyGfszCXINVST zdDv67M/gGLLdSzvfkiNG5s86JWPCYT5GMlSRLilGTu7Kx2WYqYp+lugMW6Vnahn X9VEZWej3MziQr+6OtVb7JJJ2RZPDMFJCbdsDMOFEusS3q8JGfgtvMn4TNOtBsTH TbjcQjvyjB7h5qzHhAOm/1yAet3Pff0hkTP10mpHZvHjBMuW9sT1aCzUtwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFHLA0JnFhDueZvXUIue6v81QK+KfMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvY3NEUW1jV0VPNTVtOWRRaTU3cV96VkFyNHA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEASDEpu9ntjYFcSR6MWRTRxGoY iOtRz25aQxBU6ao52pa94OqrcVcJU/v0dceeng42HTZ8LzpZjTYwWYL8cqw2OcJa v8LjtGJzJghJWR+gm1bzDdTgZKyKpoWgMZwIU7evAULKa0qPr7bp8bzindnQk8DE pZw6nUXTuXQQUfbupX4kuvU4G7mdSpZHiHlVb5QSFQbyFTgCayYRf3Tw5AJ4Xakf SoBVX0Tc5BRoXaebpDjYAlImXGlEuQ6RgIRtumC5HbybF/4eMhb+Wangmr53SSEz 2hnbP+ngQE96g24DDBZtgiIn1pnZDYr16C9MC0eaOFMEFEzZJQixyShOpAFYFg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:49:36 2025 by rpki-client