This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IBw8TSrVwqQQjMqCAh4lZObuaIs.roa File: IBw8TSrVwqQQjMqCAh4lZObuaIs.roa (raw, json) Hash identifier: DMol62cAsi2axtm6KSl93fU4i0jMnX6ntVr+C4t88NI= Subject key identifier: 20:1C:3C:4D:2A:D5:C2:A4:10:8C:CA:82:02:1E:25:64:E6:EE:68:8B Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 01972C46503271107EB9BE8E3711F7AA14BA Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IBw8TSrVwqQQjMqCAh4lZObuaIs.roa Signing time: Sun 01 Jun 2025 16:14:54 +0000 ROA not before: Sun 01 Jun 2025 16:14:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:2c:46:50:32:71:10:7e:b9:be:8e:37:11:f7:aa:14:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Jun 1 16:14:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=201c3c4d2ad5c2a4108cca82021e2564e6ee688b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:8c:a0:3e:01:77:09:42:8e:fa:a8:99:56: c4:c2:fc:2a:fd:53:b1:2f:20:bf:fe:df:8a:3c:ad: 21:8e:83:19:f5:90:da:21:67:41:69:00:6d:12:08: cd:1f:0b:9a:cb:48:22:74:f5:6a:89:b2:81:28:02: 21:21:90:00:cc:64:9d:a3:ab:b1:f1:cb:3c:a6:64: 34:75:19:99:d4:73:fe:7f:7a:74:a4:84:3e:bf:26: 92:7a:ad:94:7a:0a:df:77:ae:8a:fc:13:84:78:76: bc:f8:68:c2:9c:e0:68:7f:15:54:15:27:6a:24:18: 40:a9:34:fe:11:34:a7:d0:7c:6e:1b:41:02:a3:b9: 08:2f:bb:91:89:c5:61:9b:59:48:fc:f3:33:3f:d5: b4:40:09:2c:89:f9:82:50:6d:07:73:33:a0:45:07: 1b:4b:6a:08:f3:59:77:05:83:25:a4:03:4c:52:0a: 53:06:36:e5:94:a6:52:fb:75:aa:b7:1c:c4:33:7f: 01:ac:98:a9:66:e4:15:64:34:4b:c8:54:42:1a:97: ca:a4:86:1e:c2:86:aa:d4:18:c8:b9:82:e2:3d:87: d4:5d:91:26:0e:12:4c:9c:3c:5c:3b:f5:cb:e6:5d: 0f:89:57:6e:d2:63:53:14:c8:e5:b2:1d:0c:f6:1a: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1C:3C:4D:2A:D5:C2:A4:10:8C:CA:82:02:1E:25:64:E6:EE:68:8B X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IBw8TSrVwqQQjMqCAh4lZObuaIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 Signature Algorithm: sha256WithRSAEncryption 86:f7:62:76:a0:76:e3:a7:cd:dc:53:9d:0b:37:90:2c:a6:a9: 9a:bb:62:3a:83:30:97:4e:38:af:ff:5c:fe:4b:66:fc:a1:4e: af:b4:9b:4d:72:cf:59:37:f7:e2:4c:1f:47:6c:98:4c:65:d4: c8:74:01:35:5b:0b:af:8c:83:27:9b:53:e1:f0:22:69:e5:2a: d7:6e:f2:e8:b4:66:09:6a:f3:8c:ca:b2:03:88:b4:9c:3f:0d: cf:4c:4f:ad:20:8a:b9:5b:7e:65:f5:89:07:52:e2:66:86:41: 1d:e6:36:45:f8:d1:30:e8:28:48:c1:72:f1:34:4c:fe:73:a2: 2a:55:f3:2b:1a:00:4d:2d:a3:90:e2:84:40:cf:4c:09:45:ab: 56:69:ba:71:b1:b9:0d:5c:9f:64:fa:25:d0:9d:11:73:5c:82: e4:8e:eb:35:0b:4d:38:8d:c8:31:2a:fc:ff:8b:71:9b:7d:25: 2b:f1:34:7b:53:e4:17:b0:cd:c4:ab:1b:a9:ea:ff:9c:d5:66: c3:6d:9e:58:e4:b7:a2:21:46:a1:57:fc:08:35:72:15:65:01: 60:67:ac:34:2d:43:fb:9b:3e:c3:a7:a6:72:92:dc:f6:b8:43: dd:bd:ca:be:92:37:e8:65:d8:de:ad:a4:fa:9e:43:c7:c8:7a: bd:96:61:59 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZcsRlAycRB+ub6ONxH3qhS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNjAxMTYxNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDFjM2M0ZDJhZDVjMmE0MTA4Y2NhODIwMjFlMjU2NGU2ZWU2ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJCMoD4BdwlCjvqomVbEwvwq/VOx LyC//t+KPK0hjoMZ9ZDaIWdBaQBtEgjNHwuay0gidPVqibKBKAIhIZAAzGSdo6ux 8cs8pmQ0dRmZ1HP+f3p0pIQ+vyaSeq2Uegrfd66K/BOEeHa8+GjCnOBofxVUFSdq JBhAqTT+ETSn0HxuG0ECo7kIL7uRicVhm1lI/PMzP9W0QAksifmCUG0HczOgRQcb S2oI81l3BYMlpANMUgpTBjbllKZS+3WqtxzEM38BrJipZuQVZDRLyFRCGpfKpIYe woaq1BjIuYLiPYfUXZEmDhJMnDxcO/XL5l0PiVdu0mNTFMjlsh0M9hrodwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFCAcPE0q1cKkEIzKggIeJWTm7miLMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvSUJ3OFRTclZ3cVFRak1xQ0FoNGxaT2J1YUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im MA0GCSqGSIb3DQEBCwUAA4IBAQCG92J2oHbjp83cU50LN5Aspqmau2I6gzCXTjiv /1z+S2b8oU6vtJtNcs9ZN/fiTB9HbJhMZdTIdAE1WwuvjIMnm1Ph8CJp5SrXbvLo tGYJavOMyrIDiLScPw3PTE+tIIq5W35l9YkHUuJmhkEd5jZF+NEw6ChIwXLxNEz+ c6IqVfMrGgBNLaOQ4oRAz0wJRatWabpxsbkNXJ9k+iXQnRFzXILkjus1C004jcgx Kvz/i3GbfSUr8TR7U+QXsM3Eqxup6v+c1WbDbZ5Y5LeiIUahV/wINXIVZQFgZ6w0 LUP7mz7Dp6Zyktz2uEPdvcq+kjfoZdjeraT6nkPHyHq9lmFZ -----END CERTIFICATE-----Generated at Thu Dec 18 06:49:53 2025 by rpki-client