This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NxRljniHuK5byxlm5W_l5FTpJzE.roa File: NxRljniHuK5byxlm5W_l5FTpJzE.roa (raw, json) Hash identifier: /9ZCiC9/DNdVxfZ4V7WsEyV8oG+mw6bzPxyOaA8/OV0= Subject key identifier: 37:14:65:8E:78:87:B8:AE:5B:CB:19:66:E5:6F:E5:E4:54:E9:27:31 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 01965F1ABF891559A7799962FE636330AE6E Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NxRljniHuK5byxlm5W_l5FTpJzE.roa Signing time: Tue 22 Apr 2025 20:05:10 +0000 ROA not before: Tue 22 Apr 2025 20:05:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:5f19:ea0b/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:5f:1a:bf:89:15:59:a7:79:99:62:fe:63:63:30:ae:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Apr 22 20:05:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3714658e7887b8ae5bcb1966e56fe5e454e92731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:9e:ea:ed:25:32:ce:37:f3:ce:d0:87:c3: 69:a4:f2:f2:89:b9:e4:8e:31:dc:23:3c:34:5b:b8: d6:d9:9e:0f:6e:39:0b:3c:83:ac:0e:91:44:3f:06: b3:e1:73:1b:cf:53:21:7d:78:71:51:ff:2c:79:20: 95:73:d6:8a:dc:de:56:35:96:49:a7:ee:83:7c:76: dc:11:ab:c8:32:64:af:dd:64:37:07:9d:7d:02:89: 25:6d:63:d8:32:8b:65:d3:49:5e:76:4b:1d:66:58: cb:61:fa:49:b9:c5:e2:4a:8a:f7:45:6b:4e:bb:22: 7c:2a:f0:50:b5:93:a9:a1:b4:de:02:94:a6:df:14: ad:d6:4d:05:4a:bc:ee:7c:95:4f:da:17:af:f8:20: be:be:2c:6f:a2:8c:79:f1:d5:a2:17:62:7a:e8:8f: f4:e5:18:98:f6:c8:a8:c7:9e:5d:d4:e1:51:4e:e7: 86:4b:53:bd:38:a2:57:dc:a2:cd:40:9b:d2:8a:cc: 80:de:34:80:ca:45:d2:f4:42:66:bb:d5:9c:cb:77: f0:80:d7:68:74:6e:bc:45:d7:f7:3d:7f:24:6b:54: 06:d2:e2:5d:71:0f:93:e6:8e:6c:ef:1c:06:94:c3: 56:bc:ce:e8:c4:86:9b:7e:5a:7b:b4:b1:48:50:09: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:14:65:8E:78:87:B8:AE:5B:CB:19:66:E5:6F:E5:E4:54:E9:27:31 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NxRljniHuK5byxlm5W_l5FTpJzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:5f19:ea0b/128 Signature Algorithm: sha256WithRSAEncryption 25:a6:4a:01:65:1b:04:a2:f3:85:ab:49:97:11:3b:f3:b6:0e: ef:37:c5:af:a5:bb:2a:50:3f:7b:6f:b5:82:03:54:81:0d:b0: 76:02:af:f2:f6:37:4c:ba:1b:42:36:55:c4:b5:16:36:bb:d9: b1:7d:14:10:14:a9:53:69:ae:51:1a:77:a2:63:59:11:18:00: 7d:bd:ba:a9:ef:38:3d:40:ca:e6:b1:5b:7e:3b:f2:66:de:c8: 4b:45:53:ca:93:64:8a:f7:4a:ff:fa:12:f5:c4:0a:10:a7:b3: 69:c9:5e:57:d6:53:ad:3a:f0:ed:97:dd:2a:e3:4f:c8:9b:0e: d1:1e:08:6d:49:47:e4:a7:41:99:dc:4a:0e:46:cf:27:b1:7f: 0e:1c:41:86:9c:c0:ca:84:04:b5:93:74:af:5e:9d:23:bc:a8: c7:80:c6:bd:8f:50:22:e6:b0:bf:f4:31:43:a4:c6:74:08:51: 41:6f:4d:c3:ca:5a:08:31:99:56:40:7f:97:4e:b8:63:78:8a: 84:ed:e1:fd:9b:8a:d8:75:4c:16:b6:17:e6:cc:90:e9:c5:30: 09:db:4f:df:18:3f:23:44:95:e6:7d:b0:1c:ab:89:b8:07:d8: a4:f6:03:17:61:73:94:e8:00:f4:10:46:2f:c0:05:1f:eb:31: a7:75:8d:5a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZZfGr+JFVmneZli/mNjMK5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNDIyMjAwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzE0NjU4ZTc4ODdiOGFlNWJjYjE5NjZlNTZmZTVlNDU0ZTkyNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgae6u0lMs43887Qh8NppPLyibnk jjHcIzw0W7jW2Z4PbjkLPIOsDpFEPwaz4XMbz1MhfXhxUf8seSCVc9aK3N5WNZZJ p+6DfHbcEavIMmSv3WQ3B519AoklbWPYMotl00ledksdZljLYfpJucXiSor3RWtO uyJ8KvBQtZOpobTeApSm3xSt1k0FSrzufJVP2hev+CC+vixvoox58dWiF2J66I/0 5RiY9siox55d1OFRTueGS1O9OKJX3KLNQJvSisyA3jSAykXS9EJmu9Wcy3fwgNdo dG68Rdf3PX8ka1QG0uJdcQ+T5o5s7xwGlMNWvM7oxIabflp7tLFIUAnaBQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFDcUZY54h7iuW8sZZuVv5eRU6ScxMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvTnhSbGpuaUh1SzVieXhsbTVXX2w1RlRwSnpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGWXxnqCzANBgkqhkiG9w0BAQsFAAOCAQEAJaZKAWUbBKLzhatJlxE787YO 7zfFr6W7KlA/e2+1ggNUgQ2wdgKv8vY3TLobQjZVxLUWNrvZsX0UEBSpU2muURp3 omNZERgAfb26qe84PUDK5rFbfjvyZt7IS0VTypNkivdK//oS9cQKEKezacleV9ZT rTrw7ZfdKuNPyJsO0R4IbUlH5KdBmdxKDkbPJ7F/DhxBhpzAyoQEtZN0r16dI7yo x4DGvY9QIuawv/QxQ6TGdAhRQW9Nw8paCDGZVkB/l064Y3iKhO3h/ZuK2HVMFrYX 5syQ6cUwCdtP3xg/I0SV5n2wHKuJuAfYpPYDF2FzlOgA9BBGL8AFH+sxp3WNWg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:57:46 2025 by rpki-client