This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8V1zqyZoVVVmlZOlhIsI07ujfg.roa
File: r8V1zqyZoVVVmlZOlhIsI07ujfg.roa (raw, json)
Hash identifier: Vj6C+HdcBe+mCL/R5bZVEyN2LJ0fik1vZKKrwocaj7A=
Subject key identifier: AF:C5:75:CE:AC:99:A1:55:55:9A:56:4E:96:12:2C:23:4E:EE:8D:F8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918896145B9DEB1B12CF7454E2B0FB8E74
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8V1zqyZoVVVmlZOlhIsI07ujfg.roa
Signing time: Sun 25 Aug 2024 08:10:22 +0000
ROA not before: Sun 25 Aug 2024 08:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:88:96:14:5b:9d:eb:1b:12:cf:74:54:e2:b0:fb:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 25 08:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afc575ceac99a155559a564e96122c234eee8df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:36:b0:c1:8c:d5:37:97:5f:79:f5:1d:e5:
c1:44:9a:30:21:7b:f6:d3:f6:4a:81:69:67:2b:3e:
a1:23:39:f5:a5:c6:f6:d8:db:ee:d7:08:49:8c:c7:
3b:54:69:cf:4b:7d:84:72:b1:33:c4:53:15:49:41:
cd:ae:1a:91:73:9f:30:4b:69:99:2b:02:7e:6a:3c:
e8:60:10:0c:0e:02:5e:95:60:6b:59:25:8e:74:5c:
18:49:57:7a:e3:6b:a0:f9:df:40:53:72:73:6f:f8:
9a:bc:59:3a:ad:27:15:c1:7a:f0:ca:56:da:02:6c:
ac:ec:2a:9c:55:1c:5c:6c:7a:38:5f:02:48:90:56:
10:42:9d:a3:a8:9d:7e:e0:af:3a:94:ab:07:97:82:
97:4f:b2:ee:06:57:0e:43:f8:16:5d:3e:97:51:b9:
50:74:35:27:26:6e:0a:83:5f:b3:64:15:29:fe:dd:
cc:96:a8:e7:54:e7:93:4c:26:6b:bd:fe:a7:c7:91:
83:57:44:82:12:0e:a8:ee:02:a8:01:9d:ba:5f:61:
5b:c4:75:a6:e1:fe:ed:e0:96:a0:bd:1d:ed:4a:33:
df:bd:36:1b:27:c3:01:08:21:9f:35:a7:c1:ec:5c:
42:33:8d:ed:b0:34:1d:1b:37:dd:01:3e:71:8f:dc:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C5:75:CE:AC:99:A1:55:55:9A:56:4E:96:12:2C:23:4E:EE:8D:F8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8V1zqyZoVVVmlZOlhIsI07ujfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
61:75:b1:f6:d0:98:25:94:5e:32:13:4d:48:1f:68:42:dd:a1:
4f:b6:9b:94:6c:35:3f:b2:e2:55:2d:11:38:61:c8:40:a7:bb:
fe:b0:e7:48:a1:67:17:ec:ca:38:8b:d9:44:9b:a2:db:85:bb:
a1:47:8f:85:af:71:84:10:8c:83:68:c8:59:eb:11:31:13:1e:
85:55:63:40:7c:0b:59:2b:e9:49:e6:e2:bc:f8:a6:20:38:da:
56:c4:f2:f6:a2:49:58:1f:86:3b:70:ea:41:03:e0:70:06:59:
4a:fc:c6:74:86:cc:f1:00:10:3e:82:f7:9d:67:dc:bc:86:1c:
af:98:78:a9:62:ca:08:59:3c:af:f2:5e:55:f7:3f:2c:ea:40:
1f:c2:81:ac:96:c6:bf:55:77:c3:12:0e:f1:6c:be:cf:07:c9:
c5:cf:ae:e3:48:57:d5:54:92:b9:11:32:18:e8:08:2f:b0:18:
5a:1a:2c:fd:31:58:8d:77:4e:42:d4:50:78:7b:f5:ab:5a:4a:
de:74:46:95:de:d7:61:9d:ae:63:e2:05:8f:71:21:92:c2:8d:
8b:e3:83:6b:2c:19:6c:1a:9d:71:27:d8:b9:82:d9:6a:a3:15:
7c:6e:04:ea:a2:49:08:cd:c8:28:4d:c0:aa:b0:c3:45:b6:71:
59:71:fc:c1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGIlhRbnesbEs90VOKw+450MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODI1MDgxMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmM1NzVjZWFjOTlhMTU1NTU5YTU2NGU5NjEyMmMyMzRlZWU4ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn542sMGM1TeXX3n1HeXBRJowIXv2
0/ZKgWlnKz6hIzn1pcb22Nvu1whJjMc7VGnPS32EcrEzxFMVSUHNrhqRc58wS2mZ
KwJ+ajzoYBAMDgJelWBrWSWOdFwYSVd642ug+d9AU3Jzb/iavFk6rScVwXrwylba
Amys7CqcVRxcbHo4XwJIkFYQQp2jqJ1+4K86lKsHl4KXT7LuBlcOQ/gWXT6XUblQ
dDUnJm4Kg1+zZBUp/t3MlqjnVOeTTCZrvf6nx5GDV0SCEg6o7gKoAZ26X2FbxHWm
4f7t4JagvR3tSjPfvTYbJ8MBCCGfNafB7FxCM43tsDQdGzfdAT5xj9xp3wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFK/Fdc6smaFVVZpWTpYSLCNO7o34MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvcjhWMXpxeVpvVlZWbWxaT2xoSXNJMDd1amZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAYXWx9tCYJZReMhNNSB9oQt2h
T7ablGw1P7LiVS0ROGHIQKe7/rDnSKFnF+zKOIvZRJui24W7oUePha9xhBCMg2jI
WesRMRMehVVjQHwLWSvpSebivPimIDjaVsTy9qJJWB+GO3DqQQPgcAZZSvzGdIbM
8QAQPoL3nWfcvIYcr5h4qWLKCFk8r/JeVfc/LOpAH8KBrJbGv1V3wxIO8Wy+zwfJ
xc+u40hX1VSSuREyGOgIL7AYWhos/TFYjXdOQtRQeHv1q1pK3nRGld7XYZ2uY+IF
j3EhksKNi+ODaywZbBqdcSfYuYLZaqMVfG4E6qJJCM3IKE3AqrDDRbZxWXH8wQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:57:16 2025 by rpki-client