This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yVSlZ5rz503-C-NPEWVExttJhz4.roa File: yVSlZ5rz503-C-NPEWVExttJhz4.roa (raw, json) Hash identifier: Ww2iGmSAmGLA1WpiuxdPJV5wqyLVl9f7Acj7/kiJIHI= Subject key identifier: C9:54:A5:67:9A:F3:E7:4D:FE:0B:E3:4F:11:65:44:C6:DB:49:87:3E Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019591C74286F0CA4077B5C2B461194B136F Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yVSlZ5rz503-C-NPEWVExttJhz4.roa Signing time: Thu 13 Mar 2025 23:11:49 +0000 ROA not before: Thu 13 Mar 2025 23:11:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:91:c7:42:86:f0:ca:40:77:b5:c2:b4:61:19:4b:13:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Mar 13 23:11:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c954a5679af3e74dfe0be34f116544c6db49873e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:01:ed:ae:55:e2:74:47:a5:7b:15:cd:3b: a8:ca:ce:53:ee:bc:8f:7d:12:3e:c8:82:26:ab:93: ec:08:dc:e8:88:d0:fa:6c:f5:c9:69:04:d2:22:0d: d2:6d:74:f5:8a:a7:25:ef:ce:21:99:36:ab:dd:69: 36:73:fc:1b:35:db:a4:cc:36:d7:7b:88:f1:3b:3e: e4:fb:d4:2a:ae:ae:ff:3e:8f:7d:86:b5:d1:0f:1d: e8:53:8a:33:b5:38:8b:d5:0a:71:8b:b2:30:cd:bd: 61:87:45:46:92:d8:97:9d:83:85:15:2d:6b:7c:cf: 7a:16:66:26:a9:15:a1:4b:c2:d8:c5:c8:87:42:32: f8:f6:6a:ad:a1:6d:b1:3e:ef:6b:f9:4f:4b:66:1c: 7c:0a:b0:71:1a:b9:ae:4d:56:3d:b2:87:14:f1:66: c6:73:cf:91:46:da:7b:63:5e:2d:d9:50:d9:c8:94: 53:2c:e9:7a:9a:6c:75:2b:cd:8b:ad:12:4e:37:40: d3:30:18:1f:cb:51:ba:7b:b1:bb:33:71:fd:aa:91: 0a:f6:c5:13:52:12:48:d3:c4:33:05:ab:4f:54:25: ac:cc:2f:36:c3:99:bf:ea:75:60:fd:2e:55:0d:7d: a2:16:71:c3:e4:bd:1f:73:37:ae:4b:74:b3:e2:df: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:54:A5:67:9A:F3:E7:4D:FE:0B:E3:4F:11:65:44:C6:DB:49:87:3E X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yVSlZ5rz503-C-NPEWVExttJhz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:195:86cf:630c/128 Signature Algorithm: sha256WithRSAEncryption 76:05:e9:bb:a3:f9:cb:26:b0:8c:90:2a:f0:64:73:7d:f4:e3: 0d:78:c8:ed:97:12:c2:4f:27:95:4d:e9:6f:65:57:b4:e8:00: ca:a1:61:67:da:2a:c4:1a:4b:0d:68:75:3e:71:34:9c:60:a2: df:0d:c7:21:d0:fb:c2:84:a1:21:1c:a9:e6:14:4a:e0:7b:d5: 06:12:bd:15:15:2b:79:2f:00:de:56:c3:0a:01:80:ee:e9:6c: 16:87:30:be:7f:9a:24:b2:f3:da:c4:ea:5a:7d:bc:f6:9b:b9: b6:1f:40:fc:02:a9:44:7b:cd:17:17:04:1c:09:7f:35:2a:81: d8:aa:de:6d:25:50:05:72:6c:50:76:04:db:e4:1d:21:03:65: 9b:27:77:f4:87:9e:f8:df:ff:0d:4f:18:02:c1:03:42:8c:b4: 65:fb:ac:fd:57:81:89:4d:6d:9d:02:89:40:09:d9:97:f9:95: c6:e4:df:51:39:bc:1d:ca:31:f9:28:ec:ec:24:d3:85:54:32: a5:7f:da:a4:8b:d8:e7:62:cf:b0:f8:d6:e2:4f:7e:82:c9:6a: c6:95:8d:a0:42:2a:f7:94:ac:9c:6e:25:13:5d:a0:84:b4:e3: b1:0c:5d:80:1f:dc:1a:ef:8c:24:73:f2:a7:4e:2d:81:55:f7: 08:a4:0b:e5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZWRx0KG8MpAd7XCtGEZSxNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMzEzMjMxMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTU0YTU2NzlhZjNlNzRkZmUwYmUzNGYxMTY1NDRjNmRiNDk4NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskQB7a5V4nRHpXsVzTuoys5T7ryP fRI+yIImq5PsCNzoiND6bPXJaQTSIg3SbXT1iqcl784hmTar3Wk2c/wbNdukzDbX e4jxOz7k+9Qqrq7/Po99hrXRDx3oU4oztTiL1Qpxi7Iwzb1hh0VGktiXnYOFFS1r fM96FmYmqRWhS8LYxciHQjL49mqtoW2xPu9r+U9LZhx8CrBxGrmuTVY9socU8WbG c8+RRtp7Y14t2VDZyJRTLOl6mmx1K82LrRJON0DTMBgfy1G6e7G7M3H9qpEK9sUT UhJI08QzBatPVCWszC82w5m/6nVg/S5VDX2iFnHD5L0fczeuS3Sz4t8lgQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFMlUpWea8+dN/gvjTxFlRMbbSYc+MB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEveVZTbFo1cno1MDMtQy1OUEVXVkV4dHRKaHo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAdgXpu6P5yyawjJAq8GRzffTj DXjI7ZcSwk8nlU3pb2VXtOgAyqFhZ9oqxBpLDWh1PnE0nGCi3w3HIdD7woShIRyp 5hRK4HvVBhK9FRUreS8A3lbDCgGA7ulsFocwvn+aJLLz2sTqWn289pu5th9A/AKp RHvNFxcEHAl/NSqB2KrebSVQBXJsUHYE2+QdIQNlmyd39Iee+N//DU8YAsEDQoy0 Zfus/VeBiU1tnQKJQAnZl/mVxuTfUTm8Hcox+Sjs7CTThVQypX/apIvY52LPsPjW 4k9+gslqxpWNoEIq95SsnG4lE12ghLTjsQxdgB/cGu+MJHPyp04tgVX3CKQL5Q== -----END CERTIFICATE-----Generated at Wed Dec 17 01:15:57 2025 by rpki-client