This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9bG42jYq2n3t76Qig1fg9e-xlhc.roa File: 9bG42jYq2n3t76Qig1fg9e-xlhc.roa (raw, json) Hash identifier: UX6nTGBefAd37y9VuqHrcFM8XjLcJC6WxcBHN+6tFbc= Subject key identifier: F5:B1:B8:DA:36:2A:DA:7D:ED:EF:A4:22:83:57:E0:F5:EF:B1:96:17 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 019738112890DB2D4843CD84F86C1C5A0053 Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9bG42jYq2n3t76Qig1fg9e-xlhc.roa Signing time: Tue 03 Jun 2025 23:12:17 +0000 ROA not before: Tue 03 Jun 2025 23:12:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:38:11:28:90:db:2d:48:43:cd:84:f8:6c:1c:5a:00:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Jun 3 23:12:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5b1b8da362ada7dedefa4228357e0f5efb19617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:71:6a:f4:51:db:5b:99:c9:91:11:15:c3: 17:5c:93:68:63:6a:77:da:0e:8a:6e:6b:3b:96:c7: e1:8c:8b:86:57:28:23:ec:96:2f:e0:26:18:51:fe: 55:7d:6b:99:59:6a:1c:d9:5c:47:a1:ce:76:11:50: e7:b3:e6:46:03:80:49:d0:d8:71:a8:63:0e:1c:25: 97:7b:74:38:bf:70:e5:f2:3a:a7:45:fd:20:f8:be: e8:3d:f8:31:b5:3d:ef:29:d3:0a:be:a9:10:98:bb: 03:20:d6:c9:ae:ff:59:3a:48:70:b5:98:4e:d6:cd: f7:f3:0a:62:7a:67:a3:87:31:5f:55:cb:13:f8:63: a4:84:de:2c:ed:f3:88:ef:29:3c:73:aa:30:cc:cb: 6e:8c:fe:30:dc:77:8e:89:50:bf:24:c3:dc:c4:26: 11:e1:ad:18:94:6e:9b:39:af:dd:0a:3a:1f:a8:22: 7b:08:0f:bf:15:6f:6f:b1:3c:2a:34:28:3b:37:71: 7a:9f:a4:98:a3:a7:64:c6:42:b3:28:d7:29:1f:a8: 43:fb:c2:75:a8:0e:2e:55:63:e9:d8:63:e2:dc:e8: 03:9e:5a:aa:fc:53:ab:5c:6e:ed:aa:6f:f8:7d:08: 2a:d8:d4:2e:c3:22:99:42:14:6f:c7:e5:0c:0d:1b: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B1:B8:DA:36:2A:DA:7D:ED:EF:A4:22:83:57:E0:F5:EF:B1:96:17 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9bG42jYq2n3t76Qig1fg9e-xlhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 2001:67c:64:ffff:0:197:353f:be91/128 Signature Algorithm: sha256WithRSAEncryption 1a:47:5a:47:4f:ce:71:db:20:ef:0e:56:4f:41:38:31:8f:7c: a9:34:09:40:1d:92:d7:45:47:d8:b5:f5:9f:0a:97:25:a6:87: e0:f9:b1:68:7f:14:30:40:13:2a:9a:7a:4a:d5:b7:0d:b1:52: 0c:52:5e:6f:b4:4e:46:96:10:7a:27:fd:46:5b:d5:2a:85:9e: e2:1b:f3:a2:c7:ae:9c:7b:a8:5c:7a:e0:ba:d4:7b:2d:8e:e7: 95:d2:90:31:c3:19:bb:9b:34:e5:ff:1e:76:7a:e0:11:80:fb: 5f:70:27:0d:04:31:05:56:d0:46:92:af:c5:96:47:8d:27:81: 35:f3:92:d4:f9:23:b7:27:d3:9f:da:0d:3a:9b:38:de:b6:9a: dd:18:17:93:ac:9e:db:50:f7:07:ab:b0:8c:b8:71:28:fd:09: 5b:56:6d:a4:dc:09:97:34:38:88:bc:cd:ab:db:99:91:7d:c0: 00:66:aa:fd:a0:93:97:ab:33:50:62:5d:42:b2:e6:30:e7:3e: 43:d0:a0:50:8b:d7:fb:8d:ba:cd:ad:14:d2:22:fc:cd:2d:53: f7:6e:eb:21:eb:d6:b1:34:52:3c:2b:c7:a1:61:e5:b6:ce:c5: 53:40:1e:5a:e0:0b:0c:bc:7d:d3:75:24:55:93:6e:06:ba:fa: 4e:6a:e2:27 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZc4ESiQ2y1IQ82E+GwcWgBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNjAzMjMxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWIxYjhkYTM2MmFkYTdkZWRlZmE0MjI4MzU3ZTBmNWVmYjE5NjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPpxavRR21uZyZERFcMXXJNoY2p3 2g6Kbms7lsfhjIuGVygj7JYv4CYYUf5VfWuZWWoc2VxHoc52EVDns+ZGA4BJ0Nhx qGMOHCWXe3Q4v3Dl8jqnRf0g+L7oPfgxtT3vKdMKvqkQmLsDINbJrv9ZOkhwtZhO 1s338wpiemejhzFfVcsT+GOkhN4s7fOI7yk8c6owzMtujP4w3HeOiVC/JMPcxCYR 4a0YlG6bOa/dCjofqCJ7CA+/FW9vsTwqNCg7N3F6n6SYo6dkxkKzKNcpH6hD+8J1 qA4uVWPp2GPi3OgDnlqq/FOrXG7tqm/4fQgq2NQuwyKZQhRvx+UMDRsXFQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFPWxuNo2Ktp97e+kIoNX4PXvsZYXMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvOWJHNDJqWXEybjN0NzZRaWcxZmc5ZS14bGhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAGkdaR0/Ocdsg 7w5WT0E4MY98qTQJQB2S10VH2LX1nwqXJaaH4PmxaH8UMEATKpp6StW3DbFSDFJe b7RORpYQeif9RlvVKoWe4hvzoseunHuoXHrgutR7LY7nldKQMcMZu5s05f8ednrg EYD7X3AnDQQxBVbQRpKvxZZHjSeBNfOS1PkjtyfTn9oNOps43raa3RgXk6ye21D3 B6uwjLhxKP0JW1ZtpNwJlzQ4iLzNq9uZkX3AAGaq/aCTl6szUGJdQrLmMOc+Q9Cg UIvX+426za0U0iL8zS1T927rIevWsTRSPCvHoWHlts7FU0AeWuALDLx903UkVZNu Brr6TmriJw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:33:13 2025 by rpki-client