This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LHFRf1WCcLwCc0juA7JRLnwfEk0.roa File: LHFRf1WCcLwCc0juA7JRLnwfEk0.roa (raw, json) Hash identifier: YJdv7+9/Up1r++1b0t4K++EyHQmJMY7Nml5VUZfQ+iM= Subject key identifier: 2C:71:51:7F:55:82:70:BC:02:73:48:EE:03:B2:51:2E:7C:1F:12:4D Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 01963F8FCAFAE07C3927113C8333DFD84C4E Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LHFRf1WCcLwCc0juA7JRLnwfEk0.roa Signing time: Wed 16 Apr 2025 17:05:10 +0000 ROA not before: Wed 16 Apr 2025 17:05:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:3f8e:ea9c/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3f:8f:ca:fa:e0:7c:39:27:11:3c:83:33:df:d8:4c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Apr 16 17:05:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c71517f558270bc027348ee03b2512e7c1f124d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:eb:0c:4c:d7:ec:64:4b:19:1a:3f:78:f1: f5:8e:ba:4f:89:0a:1d:25:7c:f6:2b:fc:f0:d6:e7: 4b:8b:32:76:7b:92:36:9c:15:a7:1d:cc:e4:5e:65: 52:89:c8:64:06:c8:ae:8b:7d:37:85:e3:37:b8:8c: 6a:b0:b7:4b:bc:32:dd:44:a3:14:00:18:ef:f7:37: b4:52:8a:89:ce:71:34:54:6c:fd:f2:ec:ce:71:9e: fb:92:c2:55:85:e9:a9:2a:8a:95:e8:ea:7c:ab:fe: f2:fa:40:a2:05:9a:b1:18:ed:62:f1:cf:ac:5e:7e: da:3a:ab:65:49:05:e8:29:ec:95:25:df:23:27:8b: 8d:9c:f0:22:cd:fd:ce:1e:1c:6b:cb:45:47:8f:45: 77:dc:cf:b5:f4:82:60:12:e0:7c:6d:29:1d:3e:57: a7:db:58:b1:e6:96:c0:3e:91:4e:14:37:d0:d1:66: ea:56:e1:8c:62:6d:5b:23:b5:15:fd:68:1b:48:f1: ca:79:bb:72:c3:67:8f:46:54:5f:d3:c8:f1:ea:3d: 88:37:39:30:2c:34:e5:85:11:a3:08:99:ad:2a:21: d3:a7:0e:3a:3c:28:ad:1d:ed:bd:21:d1:63:f4:af: 9c:bc:bc:09:2d:eb:9c:95:89:e1:ce:7f:52:d9:1a: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:71:51:7F:55:82:70:BC:02:73:48:EE:03:B2:51:2E:7C:1F:12:4D X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LHFRf1WCcLwCc0juA7JRLnwfEk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:3f8e:ea9c/128 Signature Algorithm: sha256WithRSAEncryption 5a:d2:66:43:08:41:0f:d7:68:d2:31:42:46:38:a1:f4:16:0d: 1f:97:0a:f1:cc:57:93:0b:b0:1c:1a:ba:59:cd:c1:da:80:a8: 06:13:f3:46:bc:3d:5e:c4:0c:20:e4:de:c9:b3:93:28:74:50: 07:13:49:3f:9b:65:a2:fc:92:87:f0:0a:94:d9:61:2f:bd:bc: ba:7c:03:a4:97:db:47:59:57:5b:82:ac:7f:ac:91:fc:28:ea: 7c:41:13:fe:4d:89:b8:7d:22:47:80:43:56:d3:7f:3b:62:69: cb:63:29:98:8f:bc:94:90:71:8a:11:f7:b9:d6:5a:e8:26:48: c4:aa:07:96:57:9b:5a:af:0d:6f:db:13:e5:33:2e:6c:f7:bd: 54:43:b1:f4:ed:61:b3:07:87:52:d4:a4:9f:6c:93:7b:47:90: b2:06:7b:71:3f:a6:bd:e8:c1:e6:45:52:43:e0:36:87:1e:ff: 4d:32:c8:d2:89:38:ca:e0:48:09:78:de:db:37:8d:49:0e:06: 2c:9d:ea:85:08:c8:4a:99:eb:bc:0a:71:de:9e:4c:c0:17:35: b5:8e:3c:31:a8:5a:f5:7c:ca:a4:e5:5a:07:5d:be:4d:10:68: 03:b8:4d:0c:55:7c:fe:c2:5a:e7:70:c7:04:d4:35:a3:88:e5: d0:f8:76:74 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZY/j8r64Hw5JxE8gzPf2ExOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNDE2MTcwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzcxNTE3ZjU1ODI3MGJjMDI3MzQ4ZWUwM2IyNTEyZTdjMWYxMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkDrDEzX7GRLGRo/ePH1jrpPiQod JXz2K/zw1udLizJ2e5I2nBWnHczkXmVSichkBsiui303heM3uIxqsLdLvDLdRKMU ABjv9ze0UoqJznE0VGz98uzOcZ77ksJVhempKoqV6Op8q/7y+kCiBZqxGO1i8c+s Xn7aOqtlSQXoKeyVJd8jJ4uNnPAizf3OHhxry0VHj0V33M+19IJgEuB8bSkdPlen 21ix5pbAPpFOFDfQ0WbqVuGMYm1bI7UV/WgbSPHKebtyw2ePRlRf08jx6j2INzkw LDTlhRGjCJmtKiHTpw46PCitHe29IdFj9K+cvLwJLeuclYnhzn9S2Rrw1QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFCxxUX9VgnC8AnNI7gOyUS58HxJNMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvTEhGUmYxV0NjTHdDYzBqdUE3SlJMbndmRWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGWP47qnDANBgkqhkiG9w0BAQsFAAOCAQEAWtJmQwhBD9do0jFCRjih9BYN H5cK8cxXkwuwHBq6Wc3B2oCoBhPzRrw9XsQMIOTeybOTKHRQBxNJP5tlovySh/AK lNlhL728unwDpJfbR1lXW4Ksf6yR/CjqfEET/k2JuH0iR4BDVtN/O2Jpy2MpmI+8 lJBxihH3udZa6CZIxKoHllebWq8Nb9sT5TMubPe9VEOx9O1hsweHUtSkn2yTe0eQ sgZ7cT+mvejB5kVSQ+A2hx7/TTLI0ok4yuBICXje2zeNSQ4GLJ3qhQjISpnrvApx 3p5MwBc1tY48Maha9XzKpOVaB12+TRBoA7hNDFV8/sJa53DHBNQ1o4jl0Ph2dA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:23:27 2025 by rpki-client