This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/mzggpIs3sQdC-By4RECl5EHSVoo.roa File: mzggpIs3sQdC-By4RECl5EHSVoo.roa (raw, json) Hash identifier: HOfUhS8ipu1UXqbPyFHe1CLF65LINHNNkw7+cQ+eI7E= Subject key identifier: 9B:38:20:A4:8B:37:B1:07:42:F8:1C:B8:44:40:A5:E4:41:D2:56:8A Certificate issuer: /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b Certificate serial: 019AA7E812291FAB0A845C30995E4E387E22 Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/mzggpIs3sQdC-By4RECl5EHSVoo.roa Signing time: Fri 21 Nov 2025 19:33:15 +0000 ROA not before: Fri 21 Nov 2025 19:33:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59848 IP address blocks: 2a11:6ac0::/29 maxlen: 29 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:e8:12:29:1f:ab:0a:84:5c:30:99:5e:4e:38:7e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b Validity Not Before: Nov 21 19:33:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b3820a48b37b10742f81cb84440a5e441d2568a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:e9:e1:44:41:a7:5a:90:5d:6b:40:ee:20: 77:28:fd:b6:88:c9:bb:61:29:f6:a2:c2:44:41:d5: a2:74:d2:bd:29:41:ed:49:b1:84:f4:2f:a0:4f:d4: 36:6a:ee:6c:1f:87:a6:ca:b1:89:d5:22:e3:9b:a1: cf:db:9b:6f:dd:88:cc:19:24:92:87:dd:de:31:1f: 8e:4e:00:42:31:e5:8b:ea:23:40:ec:a1:51:8e:03: 65:f7:cc:19:c1:ab:05:8f:f9:f0:8e:86:19:cc:d9: 49:a9:d3:d5:4a:14:5d:15:ac:06:4c:f4:5a:e8:49: 13:3f:72:b5:43:17:48:a5:c7:e6:a5:a0:27:dc:5a: 83:93:40:8f:2f:92:10:d6:5f:f7:0b:05:4f:d2:a9: 01:27:71:81:f2:19:68:55:f9:5e:c1:62:7b:3d:09: 93:8c:25:45:a4:2c:b5:52:ef:62:9b:81:af:31:03: 90:8f:76:9a:21:cf:cc:00:5e:a9:3f:1e:93:bf:42: fd:e6:62:c5:a2:90:0a:93:6d:06:84:5d:f9:86:94: c8:69:81:20:5d:38:f7:78:17:95:ac:4c:4a:94:3c: 5e:69:f9:a9:ae:e9:18:ba:22:99:7c:5a:e7:a1:cb: b3:8b:23:01:0d:dc:27:f4:76:4a:34:ac:30:4f:7a: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:38:20:A4:8B:37:B1:07:42:F8:1C:B8:44:40:A5:E4:41:D2:56:8A X509v3 Authority Key Identifier: keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/mzggpIs3sQdC-By4RECl5EHSVoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:6ac0::/29 Signature Algorithm: sha256WithRSAEncryption 6a:30:90:e9:bc:b2:49:5d:39:f4:d2:c7:5a:a7:09:28:6a:72: 9f:02:96:e3:cb:3e:e5:cc:40:06:c0:11:15:7d:40:65:29:56: 99:12:6b:2a:c2:3c:11:be:19:82:0e:ad:09:f2:a4:59:35:61: dd:93:4b:80:3a:bf:19:ee:d5:8b:46:b8:4e:7f:a5:59:1c:3b: 0d:12:14:d9:dd:58:65:76:30:ad:79:93:3d:41:3d:6c:22:95: 32:95:44:d8:1e:6c:00:70:74:e0:9c:7e:9a:0d:75:56:32:a5: bf:a6:a1:1f:de:2e:b8:59:07:ff:6c:d0:2e:fe:03:85:db:30: d4:7b:39:6e:ce:3d:82:1b:84:04:66:23:b4:dd:cb:bd:36:40: d4:e6:8a:fd:21:ff:8c:f7:d4:56:e6:a7:9b:2d:ac:0e:6f:e2: 7e:13:fe:03:b7:07:6b:2e:93:13:b6:50:2c:41:1f:69:7b:e1: 64:06:9c:89:58:15:2b:dc:83:47:73:f5:39:35:b5:aa:cc:c2: b6:ec:f8:53:96:98:55:be:64:59:04:b1:30:30:8b:12:d5:2b: a2:ee:17:f4:3c:5b:8a:0f:de:17:4f:0d:3e:60:65:b8:cf:17: f4:95:36:5e:fb:05:c4:cc:b2:83:a7:dc:d8:87:67:08:c5:e8: 66:f6:4c:65 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqn6BIpH6sKhFwwmV5OOH4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYzIwOGEyM2IyZDRkODdiZTkzZjg5ZDUzMmJjNmY0NDkw ODgxOWIwHhcNMjUxMTIxMTkzMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjM4MjBhNDhiMzdiMTA3NDJmODFjYjg0NDQwYTVlNDQxZDI1NjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxrp4URBp1qQXWtA7iB3KP22iMm7 YSn2osJEQdWidNK9KUHtSbGE9C+gT9Q2au5sH4emyrGJ1SLjm6HP25tv3YjMGSSS h93eMR+OTgBCMeWL6iNA7KFRjgNl98wZwasFj/nwjoYZzNlJqdPVShRdFawGTPRa 6EkTP3K1QxdIpcfmpaAn3FqDk0CPL5IQ1l/3CwVP0qkBJ3GB8hloVflewWJ7PQmT jCVFpCy1Uu9im4GvMQOQj3aaIc/MAF6pPx6Tv0L95mLFopAKk20GhF35hpTIaYEg XTj3eBeVrExKlDxeafmprukYuiKZfFrnocuziyMBDdwn9HZKNKwwT3orFwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJs4IKSLN7EHQvgcuERApeRB0laKMB8GA1UdIwQY MBaAFLHCCKI7LU2HvpP4nVMrxvRJCIGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2NJSW9qc3RUWWUta19pZFV5dkc5RWtJZ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hNTY1ZmItNTBiZC00YmI2LTg3NWMt MGUyYmJkNDMzN2FhLzEvbXpnZ3BJczNzUWRDLUJ5NFJFQ2w1RUhTVm9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hNTY1ZmItNTBiZC00YmI2LTg3NWMtMGUyYmJkNDMzN2Fh LzEvc2NJSW9qc3RUWWUta19pZFV5dkc5RWtJZ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFqwDAN BgkqhkiG9w0BAQsFAAOCAQEAajCQ6byySV059NLHWqcJKGpynwKW48s+5cxABsAR FX1AZSlWmRJrKsI8Eb4Zgg6tCfKkWTVh3ZNLgDq/Ge7Vi0a4Tn+lWRw7DRIU2d1Y ZXYwrXmTPUE9bCKVMpVE2B5sAHB04Jx+mg11VjKlv6ahH94uuFkH/2zQLv4Dhdsw 1Hs5bs49ghuEBGYjtN3LvTZA1OaK/SH/jPfUVuanmy2sDm/ifhP+A7cHay6TE7ZQ LEEfaXvhZAaciVgVK9yDR3P1OTW1qszCtuz4U5aYVb5kWQSxMDCLEtUrou4X9Dxb ig/eF08NPmBluM8X9JU2XvsFxMyyg6fc2IdnCMXoZvZMZQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:14:32 2025 by rpki-client