This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SjgNoE8eItParYcDna-CC4QsVK4.roa
File: SjgNoE8eItParYcDna-CC4QsVK4.roa (raw, json)
Hash identifier: yddjqQ6q1/07LlzXDoQ+FJxTlq1wFTD9tbzWZslwAwA=
Subject key identifier: 4A:38:0D:A0:4F:1E:22:D3:DA:AD:87:03:9D:AF:82:0B:84:2C:54:AE
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196EB01427CD497902704CCDE561271FB0B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SjgNoE8eItParYcDna-CC4QsVK4.roa
Signing time: Tue 20 May 2025 00:04:10 +0000
ROA not before: Tue 20 May 2025 00:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:eb01:3246/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:eb:01:42:7c:d4:97:90:27:04:cc:de:56:12:71:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 20 00:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a380da04f1e22d3daad87039daf820b842c54ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:de:6a:cc:e3:87:c8:b5:bf:c5:84:70:5f:
9c:52:33:53:d0:41:c1:41:ae:c7:3f:bc:f7:01:f6:
8b:a0:de:e7:88:1d:83:c4:c0:49:c1:10:a5:43:8d:
6e:f0:28:2a:86:d7:f1:3a:0d:18:c5:e6:f7:11:82:
84:06:01:c9:55:18:a7:db:38:43:55:7f:d7:56:b7:
88:2c:d3:ac:c2:ff:7f:1e:6e:7b:da:26:3b:3a:fa:
c7:18:42:54:be:fe:87:52:88:6a:86:65:2b:5c:da:
e7:a2:85:36:3a:b9:b3:fe:8c:96:a0:6a:06:3a:e7:
12:5d:6d:f5:d1:83:b4:29:44:88:0b:76:17:64:e3:
b3:08:e5:1c:82:53:bc:15:37:63:76:53:af:0b:85:
15:37:1f:e1:ea:a3:65:6f:4f:1a:b4:83:5c:e0:ca:
2c:bd:51:a3:c7:4d:b0:18:4f:99:33:f8:7c:d3:85:
bc:4f:0f:3b:ec:7e:a5:73:fc:b2:bd:4a:df:32:14:
c6:4c:e0:24:95:d9:b4:6b:da:e8:ba:04:93:96:4a:
60:1b:b7:1c:4e:fc:cd:55:d3:3a:54:ca:80:cf:76:
8f:1b:d6:1c:0f:73:45:c6:00:d3:f8:c3:3e:bd:c2:
a4:ef:33:e6:ac:8c:da:6a:9a:1d:35:1e:ff:49:38:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:0D:A0:4F:1E:22:D3:DA:AD:87:03:9D:AF:82:0B:84:2C:54:AE
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SjgNoE8eItParYcDna-CC4QsVK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:eb01:3246/128
Signature Algorithm: sha256WithRSAEncryption
03:21:6f:80:ba:d1:08:aa:11:5a:65:e9:07:c8:ec:56:7c:3a:
a9:9d:2e:32:6e:34:6d:76:c2:4e:1e:6c:27:9b:c4:31:57:18:
40:96:d9:4e:5b:47:57:c4:1b:96:ee:1e:fc:98:6f:8a:4a:01:
87:e0:22:d3:80:31:a2:e4:e1:00:b7:75:59:d5:ad:d9:db:9b:
e9:f1:49:57:64:80:e3:ac:37:0a:4d:39:14:55:bd:16:d5:e1:
5a:06:47:8c:a6:d0:ca:10:b7:a5:74:f9:e9:5f:dc:40:9f:13:
3f:bf:62:a7:95:e7:3e:9f:3f:4b:f9:4a:63:dc:00:14:ac:5d:
fc:02:0f:50:00:29:9f:bc:af:07:89:4f:f8:56:43:eb:a1:99:
6e:fe:2f:12:73:4a:b7:12:26:0e:fd:9d:51:a5:83:c3:6a:f4:
e3:8f:1e:04:dd:08:8b:54:72:76:b4:8d:41:d2:1c:8c:ed:88:
61:1e:45:e6:4c:2a:56:eb:42:46:26:11:44:d8:08:2f:3c:b9:
c5:fc:8a:cc:57:4c:87:38:47:4e:f9:87:ef:3f:fb:95:ed:28:
e5:1e:03:9b:0d:11:d6:91:92:98:4e:ab:95:6b:ae:46:c9:56:
64:e4:f4:ce:b6:bd:49:65:0c:17:f3:a9:3d:cd:6d:fc:4c:b4:
9b:6e:9a:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:57:21 2025 by rpki-client