This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v9lMu_bgejyh1pRX6-RHRvqtNTk.roa File: v9lMu_bgejyh1pRX6-RHRvqtNTk.roa (raw, json) Hash identifier: Fu+IhqukYAlXR9XYRirRBM4wq4eQzyl4e3D5OJYlWvc= Subject key identifier: BF:D9:4C:BB:F6:E0:7A:3C:A1:D6:94:57:EB:E4:47:46:FA:AD:35:39 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019444C1CCD6E2AC38C3D630EB0C71B5853C Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v9lMu_bgejyh1pRX6-RHRvqtNTk.roa Signing time: Wed 08 Jan 2025 07:12:18 +0000 ROA not before: Wed 08 Jan 2025 07:12:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:44:c1:cc:d6:e2:ac:38:c3:d6:30:eb:0c:71:b5:85:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 8 07:12:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bfd94cbbf6e07a3ca1d69457ebe44746faad3539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:25:19:45:af:45:d3:58:aa:ed:35:1f:11:12: 85:91:fb:ca:30:34:77:27:05:58:a1:b4:be:14:34: 67:54:70:19:9b:94:6f:6d:83:2a:90:11:81:39:20: a3:a5:9c:41:a8:76:31:b5:26:ce:18:e0:c3:8e:ef: e8:60:7b:41:9a:49:a6:a3:7e:0b:a1:27:99:5e:c9: d1:8a:db:9a:d7:24:77:f0:13:c3:16:54:96:da:b3: fa:0d:88:25:a2:63:85:3e:be:00:66:a0:50:96:ed: 79:5b:53:c3:0e:e4:9c:83:29:a6:6e:5a:80:e0:34: 18:e2:35:7f:67:cf:62:d0:80:b9:27:cf:c7:27:f9: 74:e5:2f:3c:2e:24:9e:6f:bd:07:7d:f4:6e:c2:81: 9f:56:55:bd:82:ff:22:c7:0d:f7:47:46:0a:83:fa: 46:df:b8:c2:cb:f4:1b:e5:11:8c:53:a5:a1:19:79: 9c:3d:a7:9e:eb:43:94:16:dd:de:c1:9a:90:e6:a8: 6f:d4:a3:56:38:c6:03:47:ff:13:f6:05:95:2c:6b: 9c:e9:2f:80:52:6e:2f:8b:35:24:bd:76:45:a9:b6: 1c:63:c1:ca:ee:f3:e4:0c:ea:00:c2:b1:75:89:5c: 5e:5c:16:e6:80:05:22:c1:a9:a7:ad:27:dc:7e:d8: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D9:4C:BB:F6:E0:7A:3C:A1:D6:94:57:EB:E4:47:46:FA:AD:35:39 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v9lMu_bgejyh1pRX6-RHRvqtNTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 66:1d:75:7e:c2:c2:f8:00:b1:8c:91:01:6c:3c:80:dc:77:a6: 95:37:9a:15:ee:ae:38:8a:12:1c:d3:7d:da:8c:47:f6:a2:21: 22:9a:8b:54:61:a5:05:84:ec:58:95:3a:2b:99:77:9e:d1:b5: 36:55:6e:6c:a9:d7:f3:bd:ca:33:31:c0:7d:8c:4a:6a:df:e9: ee:d9:67:bc:56:5e:2d:41:9a:cd:33:56:05:2e:e7:97:ae:ee: fc:8e:2d:6c:92:82:c5:7f:b3:fc:62:88:b0:70:ac:1f:62:bc: f0:b4:52:9e:f7:09:2d:a2:76:4b:15:a5:04:6d:16:0b:b6:a3: 73:04:20:83:66:79:4a:e0:0c:13:15:cf:10:42:37:2c:3a:04: cb:3b:db:2d:82:a7:43:91:23:53:0d:0e:27:08:6a:74:a3:f3: 4b:29:21:f9:7f:7a:5f:67:45:cc:10:06:7d:5d:3c:42:33:a7: f0:97:01:0b:68:27:dd:79:90:3c:4b:1d:ea:b5:21:0c:04:48: f8:0a:1b:61:b1:1c:4b:9a:d4:1c:a4:ea:41:ba:fb:55:50:82: e5:ed:db:cf:57:27:41:aa:f0:c1:24:59:63:56:16:80:9b:3d: fc:9a:f6:6e:f9:10:ce:43:87:23:2a:b8:c0:e7:05:b4:d0:d7: 53:bb:d8:98 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZREwczW4qw4w9Yw6wxxtYU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTA4MDcxMjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmQ5NGNiYmY2ZTA3YTNjYTFkNjk0NTdlYmU0NDc0NmZhYWQzNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSUZRa9F01iq7TUfERKFkfvKMDR3 JwVYobS+FDRnVHAZm5RvbYMqkBGBOSCjpZxBqHYxtSbOGODDju/oYHtBmkmmo34L oSeZXsnRitua1yR38BPDFlSW2rP6DYglomOFPr4AZqBQlu15W1PDDuScgymmblqA 4DQY4jV/Z89i0IC5J8/HJ/l05S88LiSeb70HffRuwoGfVlW9gv8ixw33R0YKg/pG 37jCy/Qb5RGMU6WhGXmcPaee60OUFt3ewZqQ5qhv1KNWOMYDR/8T9gWVLGuc6S+A Um4vizUkvXZFqbYcY8HK7vPkDOoAwrF1iVxeXBbmgAUiwamnrSfcfth2ZQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFL/ZTLv24Ho8odaUV+vkR0b6rTU5MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvdjlsTXVfYmdlanloMXBSWDYtUkhSdnF0TlRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAZh11fsLC+ACxjJEBbDyA3Hem lTeaFe6uOIoSHNN92oxH9qIhIpqLVGGlBYTsWJU6K5l3ntG1NlVubKnX873KMzHA fYxKat/p7tlnvFZeLUGazTNWBS7nl67u/I4tbJKCxX+z/GKIsHCsH2K88LRSnvcJ LaJ2SxWlBG0WC7ajcwQgg2Z5SuAMExXPEEI3LDoEyzvbLYKnQ5EjUw0OJwhqdKPz Sykh+X96X2dFzBAGfV08QjOn8JcBC2gn3XmQPEsd6rUhDARI+AobYbEcS5rUHKTq Qbr7VVCC5e3bz1cnQarwwSRZY1YWgJs9/Jr2bvkQzkOHIyq4wOcFtNDXU7vYmA== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:40 2025 by rpki-client