This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DzzezpDiiCoSh66Ee7ykNY4NlM8.roa File: DzzezpDiiCoSh66Ee7ykNY4NlM8.roa (raw, json) Hash identifier: qcZ9Rl/t2kgIhg5sBqb8R+2ftp5oc/gE5LURWymp6/s= Subject key identifier: 0F:3C:DE:CE:90:E2:88:2A:12:87:AE:84:7B:BC:A4:35:8E:0D:94:CF Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 019731D0CFFF163B960CA5C86A4B5A3B2D21 Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DzzezpDiiCoSh66Ee7ykNY4NlM8.roa Signing time: Mon 02 Jun 2025 18:04:17 +0000 ROA not before: Mon 02 Jun 2025 18:04:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 2001:67c:64:ffff:0:197:31d0:b57c/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:31:d0:cf:ff:16:3b:96:0c:a5:c8:6a:4b:5a:3b:2d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Jun 2 18:04:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f3cdece90e2882a1287ae847bbca4358e0d94cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:d1:f2:2d:d6:b1:02:22:7b:e5:42:71:77: 73:72:0f:f4:91:ee:d2:b5:2c:d7:bf:01:60:7c:66: 51:60:d1:f6:d4:ab:25:0a:d5:51:aa:4a:db:cd:05: 5b:97:81:a0:05:80:15:d4:55:d2:c7:c8:2d:a0:6d: 30:a6:2e:b6:e6:55:8a:cd:40:71:fe:99:fe:ff:c9: 40:5d:19:cb:16:44:6d:7e:8e:ae:b9:e5:6b:19:3e: 20:e9:00:5f:bc:00:27:e2:9e:92:e6:7d:f9:44:0d: 32:ac:81:5b:84:3a:77:f4:75:47:58:4a:9d:8b:08: 32:4a:da:94:2b:37:f6:9e:e7:98:d2:b3:44:ba:eb: fd:45:09:1e:7b:24:81:b1:25:02:55:bc:7f:2d:a1: 25:a3:1f:56:8e:ef:55:73:57:ca:c8:72:1d:2c:dc: 6b:6a:b9:f0:30:96:aa:fc:89:f8:e1:89:30:5f:58: 95:47:f2:87:c5:82:53:54:61:61:6f:5d:a8:e1:ea: 89:28:f6:1f:20:25:68:e9:67:39:81:ec:f3:3c:a2: 38:e0:44:0d:23:c1:b7:d8:31:97:fa:f2:33:dd:e4: e8:57:09:a8:69:36:80:68:e1:6f:20:f5:80:54:e3: 99:18:9b:2a:82:c5:b7:e7:31:1e:94:6f:d5:b3:93: a6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3C:DE:CE:90:E2:88:2A:12:87:AE:84:7B:BC:A4:35:8E:0D:94:CF X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DzzezpDiiCoSh66Ee7ykNY4NlM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 2001:67c:64:ffff:0:197:31d0:b57c/128 Signature Algorithm: sha256WithRSAEncryption c2:ec:d0:ce:33:8d:cc:6c:d3:33:b1:67:4e:bd:99:24:92:4b: cc:aa:6a:be:4b:9c:48:2b:41:75:78:57:ac:5b:8a:d0:db:de: 25:0b:c9:7b:78:6c:b0:8a:23:b8:fe:0d:02:50:eb:8c:1f:fa: ac:e1:e4:1b:14:f2:30:e2:30:ff:5f:db:9a:3e:99:2e:de:a7: 86:d0:df:86:ec:eb:4a:64:cd:14:d2:be:5b:e0:14:d7:2d:e5: de:f3:d4:ae:40:76:60:8f:67:05:d5:ce:b5:96:dd:75:dc:62: 30:7f:e5:22:8a:79:69:0f:de:05:1b:38:ca:31:1e:21:ca:23: ff:df:55:33:47:b3:da:e5:cf:0b:18:7a:b5:50:ac:9f:0d:b5: 36:12:f2:d4:a5:c9:f2:82:17:47:a3:72:9b:a3:64:af:91:76: 7d:cd:6e:4b:d5:7f:ec:9e:86:c5:d2:35:5c:0c:73:54:dd:af: 00:bb:59:72:93:e9:94:d3:64:07:4a:74:ad:32:b8:f7:5c:25: 62:b5:7f:85:1f:37:06:7c:f3:52:39:20:b1:41:8a:5e:0c:31: 27:e0:8e:97:73:e6:88:8e:00:2b:d5:51:94:cd:ef:89:0e:59: 24:13:89:8c:8b:94:5d:5a:c0:29:b1:ec:9e:20:ea:84:34:67: ff:56:bf:1e -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZcx0M//FjuWDKXIaktaOy0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNjAyMTgwNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjNjZGVjZTkwZTI4ODJhMTI4N2FlODQ3YmJjYTQzNThlMGQ5NGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaDR8i3WsQIie+VCcXdzcg/0ke7S tSzXvwFgfGZRYNH21KslCtVRqkrbzQVbl4GgBYAV1FXSx8gtoG0wpi625lWKzUBx /pn+/8lAXRnLFkRtfo6uueVrGT4g6QBfvAAn4p6S5n35RA0yrIFbhDp39HVHWEqd iwgyStqUKzf2nueY0rNEuuv9RQkeeySBsSUCVbx/LaElox9Wju9Vc1fKyHIdLNxr arnwMJaq/In44YkwX1iVR/KHxYJTVGFhb12o4eqJKPYfICVo6Wc5gezzPKI44EQN I8G32DGX+vIz3eToVwmoaTaAaOFvIPWAVOOZGJsqgsW35zEelG/Vs5OmlQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFA883s6Q4ogqEoeuhHu8pDWODZTPMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvRHp6ZXpwRGlpQ29TaDY2RWU3eWtOWTRObE04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im AxEAIAEGfABk//8AAAGXMdC1fDANBgkqhkiG9w0BAQsFAAOCAQEAwuzQzjONzGzT M7FnTr2ZJJJLzKpqvkucSCtBdXhXrFuK0NveJQvJe3hssIojuP4NAlDrjB/6rOHk GxTyMOIw/1/bmj6ZLt6nhtDfhuzrSmTNFNK+W+AU1y3l3vPUrkB2YI9nBdXOtZbd ddxiMH/lIop5aQ/eBRs4yjEeIcoj/99VM0ez2uXPCxh6tVCsnw21NhLy1KXJ8oIX R6Nym6Nkr5F2fc1uS9V/7J6GxdI1XAxzVN2vALtZcpPplNNkB0p0rTK491wlYrV/ hR83BnzzUjkgsUGKXgwxJ+COl3PmiI4AK9VRlM3viQ5ZJBOJjIuUXVrAKbHsniDq hDRn/1a/Hg== -----END CERTIFICATE-----Generated at Thu Dec 25 07:18:24 2025 by rpki-client