This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/YfBfhYxX8_0gKVV8z5WZvgmxE1Y.roa File: YfBfhYxX8_0gKVV8z5WZvgmxE1Y.roa (raw, json) Hash identifier: t+l5ebusGufba6ijIMhgHsXsCnvmU/5KrOU6VSe3pBc= Subject key identifier: 61:F0:5F:85:8C:57:F3:FD:20:29:55:7C:CF:95:99:BE:09:B1:13:56 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 0197351108FA83838357BE03750431A7216C Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/YfBfhYxX8_0gKVV8z5WZvgmxE1Y.roa Signing time: Tue 03 Jun 2025 09:13:17 +0000 ROA not before: Tue 03 Jun 2025 09:13:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:35:11:08:fa:83:83:83:57:be:03:75:04:31:a7:21:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Jun 3 09:13:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=61f05f858c57f3fd2029557ccf9599be09b11356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:ef:20:27:07:76:3a:7b:33:37:b9:ad:08: 90:f0:83:d6:2e:6f:93:18:55:e3:f5:6c:1b:3a:f6: 75:39:69:48:1f:e0:73:13:5d:dc:24:43:03:70:71: 07:58:1f:21:39:f5:45:e2:61:a7:16:40:18:8f:6f: 69:22:ee:7b:7f:5e:92:d8:79:c9:12:ff:07:95:a6: 0c:38:72:68:34:94:2b:9e:86:7c:d5:4e:20:8d:6a: ba:dc:25:f6:b0:cd:68:5f:33:65:1e:5a:f2:e0:d6: fa:bf:ac:75:31:06:bb:24:37:30:f5:f2:ca:0d:9c: 51:99:c1:9c:d2:ae:ec:8c:8e:64:7c:3d:f3:a7:1b: 21:c9:c0:d9:3d:f7:1c:64:8a:44:b2:61:00:87:30: d9:c8:00:c8:1c:95:f3:08:b5:cd:0f:9a:7a:b0:03: 16:f7:cd:b5:3d:50:73:69:f7:a8:eb:bd:02:ab:40: 3e:47:e0:76:c6:fe:9c:28:a9:60:62:8a:be:94:54: 63:eb:af:fd:a1:69:bc:ba:65:96:b9:0f:b7:81:e3: 0e:09:48:30:99:7f:8b:59:66:6b:95:d7:58:57:a6: ac:93:12:24:32:af:60:46:ad:e4:6a:8d:48:a3:56: 13:f4:f5:c4:04:48:06:87:95:13:bc:36:4b:f5:97: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F0:5F:85:8C:57:F3:FD:20:29:55:7C:CF:95:99:BE:09:B1:13:56 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/YfBfhYxX8_0gKVV8z5WZvgmxE1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 Signature Algorithm: sha256WithRSAEncryption 45:49:30:b5:c3:a4:c7:5a:1c:c8:25:ed:61:1f:a5:3d:28:ab: 4f:17:97:25:e6:0e:5d:49:15:33:45:a5:a2:49:c2:59:f8:6f: c4:93:ea:c4:85:0a:4c:c0:17:f9:7b:20:b0:a0:ed:15:c1:8b: a2:71:ed:e9:cf:ae:28:21:df:e2:f8:2e:b4:de:64:ab:92:c2: 3b:56:24:d6:84:cb:e4:39:66:46:e3:c8:a9:d6:fc:35:70:09: fd:40:ce:67:34:a1:e9:d1:5a:9c:bc:73:a9:6a:f3:d6:06:08: 52:83:65:ba:2d:c6:a4:fa:6a:11:de:74:b7:db:6b:97:ae:31: 98:ba:23:0d:92:d1:00:7e:1c:e4:99:a9:81:14:1e:d0:6c:b0: 76:d4:08:d0:8b:55:38:98:60:9c:83:cd:fb:ad:29:27:86:af: 53:8b:28:35:56:02:6c:c8:b2:cc:f2:4c:33:c9:5c:d0:39:1b: 8e:ed:fe:6a:a8:ac:ea:0d:a0:00:a1:a5:4d:d9:1c:1e:6b:82: 30:35:7c:56:08:06:65:9a:5c:81:58:d7:cc:12:90:70:f1:49: ef:19:9b:9f:6a:2d:cc:7e:c1:b3:0d:12:7a:28:a6:92:bd:70: c4:ea:2c:c1:da:64:d0:2b:27:e1:d7:f4:ef:3d:ce:20:eb:c0: b0:bd:50:7d -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZc1EQj6g4ODV74DdQQxpyFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNjAzMDkxMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWYwNWY4NThjNTdmM2ZkMjAyOTU1N2NjZjk1OTliZTA5YjExMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUXvICcHdjp7Mze5rQiQ8IPWLm+T GFXj9WwbOvZ1OWlIH+BzE13cJEMDcHEHWB8hOfVF4mGnFkAYj29pIu57f16S2HnJ Ev8HlaYMOHJoNJQrnoZ81U4gjWq63CX2sM1oXzNlHlry4Nb6v6x1MQa7JDcw9fLK DZxRmcGc0q7sjI5kfD3zpxshycDZPfccZIpEsmEAhzDZyADIHJXzCLXND5p6sAMW 9821PVBzafeo670Cq0A+R+B2xv6cKKlgYoq+lFRj66/9oWm8umWWuQ+3geMOCUgw mX+LWWZrlddYV6askxIkMq9gRq3kao1Io1YT9PXEBEgGh5UTvDZL9ZcxHwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFGHwX4WMV/P9IClVfM+Vmb4JsRNWMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvWWZCZmhZeFg4XzBnS1ZWOHo1V1p2Z214RTFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im MA0GCSqGSIb3DQEBCwUAA4IBAQBFSTC1w6THWhzIJe1hH6U9KKtPF5cl5g5dSRUz RaWiScJZ+G/Ek+rEhQpMwBf5eyCwoO0VwYuice3pz64oId/i+C603mSrksI7ViTW hMvkOWZG48ip1vw1cAn9QM5nNKHp0VqcvHOpavPWBghSg2W6Lcak+moR3nS322uX rjGYuiMNktEAfhzkmamBFB7QbLB21AjQi1U4mGCcg837rSknhq9Tiyg1VgJsyLLM 8kwzyVzQORuO7f5qqKzqDaAAoaVN2Rwea4IwNXxWCAZlmlyBWNfMEpBw8UnvGZuf ai3MfsGzDRJ6KKaSvXDE6izB2mTQKyfh1/TvPc4g68CwvVB9 -----END CERTIFICATE-----Generated at Wed Dec 24 10:05:08 2025 by rpki-client