This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iw6jkky8e5XFA5la_Ae1tOqCzdo.roa File: iw6jkky8e5XFA5la_Ae1tOqCzdo.roa (raw, json) Hash identifier: PSPebfxSyv8PTxMut37Z4bIYUT706wjt1BbDWRNCNGM= Subject key identifier: 8B:0E:A3:92:4C:BC:7B:95:C5:03:99:5A:FC:07:B5:B4:EA:82:CD:DA Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 0191CAE623F44D2FBC3A914E935886C48A6D Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iw6jkky8e5XFA5la_Ae1tOqCzdo.roa Signing time: Sat 07 Sep 2024 05:12:45 +0000 ROA not before: Sat 07 Sep 2024 05:12:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:ca:e6:23:f4:4d:2f:bc:3a:91:4e:93:58:86:c4:8a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Sep 7 05:12:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=8b0ea3924cbc7b95c503995afc07b5b4ea82cdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:17:83:1c:a8:35:9f:8c:9d:ad:30:ce:0d: ce:52:1f:da:3b:8c:c1:4b:b5:04:9f:2e:5e:66:17: 46:d5:f3:7d:ef:a5:6d:18:58:8d:67:fc:fb:e4:71: c0:0d:98:3e:61:b6:f5:d5:c3:9f:5e:00:c3:09:66: 77:e7:c5:65:23:63:6a:2a:fc:e6:cd:65:0a:0d:1e: b0:e0:0d:70:5d:4a:4d:0b:70:df:9d:ac:88:96:ab: 23:bd:63:51:be:9f:33:ef:9a:4c:71:4e:db:39:ad: a0:ea:86:00:72:05:fe:bf:a3:e9:6b:e1:81:9a:cb: 39:86:53:22:ae:b5:27:bb:7e:ab:69:3a:b1:bb:d1: 0a:af:6b:8c:57:f2:05:56:7b:b6:2a:8b:67:fe:2e: 0c:07:1a:95:fa:cb:17:5e:88:52:13:ea:31:0c:76: 37:da:4f:02:63:e2:ab:25:87:04:9c:a1:aa:26:01: a0:72:81:cd:17:db:8a:7c:4a:df:b5:b5:9c:e3:bc: 97:65:06:3b:7e:0a:5e:28:62:6c:ed:e4:6d:df:7c: 38:6b:13:99:2e:b6:e0:db:76:91:2d:a6:14:47:a8: 47:42:57:63:74:ea:ef:6e:fd:84:99:9c:e3:e6:d3: fc:91:b0:32:7b:ea:d9:cf:81:35:ac:d3:c7:9f:31: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0E:A3:92:4C:BC:7B:95:C5:03:99:5A:FC:07:B5:B4:EA:82:CD:DA X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iw6jkky8e5XFA5la_Ae1tOqCzdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:190:fdf2:f302/128 Signature Algorithm: sha256WithRSAEncryption 44:53:1f:a5:4d:55:fe:a4:76:41:c7:29:b6:1f:ad:21:53:8a: be:7b:2b:10:4e:43:80:11:83:33:70:22:84:9c:c5:df:2f:70: af:9b:93:6c:3a:69:ac:19:e0:ec:6c:5d:b7:8b:c5:21:01:be: bf:ed:d6:fd:0f:9b:03:21:6b:44:60:1d:98:9c:4c:18:9c:7d: a3:68:70:a7:2d:c1:62:62:2f:14:df:bf:17:cf:b6:a8:e6:24: d6:16:eb:7b:62:fd:2b:f1:10:eb:d1:70:e2:92:fc:6e:28:53: 9a:3f:5f:61:70:d7:fb:ef:9e:59:55:a6:2f:5d:de:ec:9a:c4: 2b:4f:e7:d0:7d:ee:9f:d9:02:62:d0:80:98:b6:5f:09:2b:8d: f9:10:49:aa:e1:6d:f1:2a:73:7e:64:74:4e:87:a3:10:4f:8c: e5:2e:b4:12:d7:cd:a3:77:47:c8:0d:f2:87:05:1c:51:65:58: 55:a7:35:e5:1c:66:48:21:84:7d:bd:0c:32:d5:49:81:40:b7: 9c:60:97:88:82:b0:ef:d9:99:93:ef:89:41:2c:7b:d2:96:be: 8d:7a:03:0a:33:29:fc:9e:6f:1d:54:a4:2d:8b:bd:d1:3f:d7: 52:63:80:a1:11:ea:90:e1:16:32:05:69:61:b5:d9:cb:e9:99: ac:a4:1c:5a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZHK5iP0TS+8OpFOk1iGxIptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwOTA3MDUxMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjBlYTM5MjRjYmM3Yjk1YzUwMzk5NWFmYzA3YjViNGVhODJjZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPkXgxyoNZ+Mna0wzg3OUh/aO4zB S7UEny5eZhdG1fN976VtGFiNZ/z75HHADZg+Ybb11cOfXgDDCWZ358VlI2NqKvzm zWUKDR6w4A1wXUpNC3DfnayIlqsjvWNRvp8z75pMcU7bOa2g6oYAcgX+v6Ppa+GB mss5hlMirrUnu36raTqxu9EKr2uMV/IFVnu2Kotn/i4MBxqV+ssXXohSE+oxDHY3 2k8CY+KrJYcEnKGqJgGgcoHNF9uKfErftbWc47yXZQY7fgpeKGJs7eRt33w4axOZ Lrbg23aRLaYUR6hHQldjdOrvbv2EmZzj5tP8kbAye+rZz4E1rNPHnzEJ1wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFIsOo5JMvHuVxQOZWvwHtbTqgs3aMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvaXc2amtreThlNVhGQTVsYV9BZTF0T3FDemRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEARFMfpU1V/qR2Qccpth+tIVOK vnsrEE5DgBGDM3AihJzF3y9wr5uTbDpprBng7Gxdt4vFIQG+v+3W/Q+bAyFrRGAd mJxMGJx9o2hwpy3BYmIvFN+/F8+2qOYk1hbre2L9K/EQ69Fw4pL8bihTmj9fYXDX +++eWVWmL13e7JrEK0/n0H3un9kCYtCAmLZfCSuN+RBJquFt8SpzfmR0ToejEE+M 5S60EtfNo3dHyA3yhwUcUWVYVac15RxmSCGEfb0MMtVJgUC3nGCXiIKw79mZk++J QSx70pa+jXoDCjMp/J5vHVSkLYu90T/XUmOAoRHqkOEWMgVpYbXZy+mZrKQcWg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:48:02 2025 by rpki-client