This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/aG2wyUzfXDAP9-U7BMq-uh7R7dU.roa File: aG2wyUzfXDAP9-U7BMq-uh7R7dU.roa (raw, json) Hash identifier: qZRb9XQeoLkFm7ZLNSPXdGfbzXY/Q/Oz9I1dr+42f4s= Subject key identifier: 68:6D:B0:C9:4C:DF:5C:30:0F:F7:E5:3B:04:CA:BE:BA:1E:D1:ED:D5 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 0197410CF62C2B8871BF3985F462002923FF Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/aG2wyUzfXDAP9-U7BMq-uh7R7dU.roa Signing time: Thu 05 Jun 2025 17:04:17 +0000 ROA not before: Thu 05 Jun 2025 17:04:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128 2001:67c:64:ffff:0:197:410c:ddcc/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:41:0c:f6:2c:2b:88:71:bf:39:85:f4:62:00:29:23:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Jun 5 17:04:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=686db0c94cdf5c300ff7e53b04cabeba1ed1edd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:ea:a6:1e:b7:67:01:28:d5:ee:88:cc:1c: 92:a0:0c:d4:7a:bf:ac:8d:9e:15:14:0d:36:c3:b5: 64:bc:11:61:bf:e2:0c:52:08:65:40:d6:b3:6b:90: 77:5a:63:a8:7b:73:1c:65:63:a2:1b:20:e9:d0:76: dd:3f:0e:4e:ee:82:c6:b8:a6:d4:85:e8:9b:a3:9a: 66:49:88:4e:33:da:a8:9b:8a:df:0d:9f:d3:ee:ee: 31:ae:19:65:16:4f:02:ea:4a:c8:23:27:3a:ec:bf: 3b:a5:e2:8a:ed:34:24:57:3f:30:30:fb:17:d3:3a: c0:f9:35:56:23:0b:90:35:c9:52:95:92:b5:13:11: 4e:0b:09:3a:dc:23:61:6d:99:c7:4f:9a:6c:5f:b5: 65:8f:02:03:5d:18:21:a2:7f:08:71:f2:6f:ff:14: 36:9f:aa:a8:fb:fa:5b:31:23:7b:03:0c:ef:71:ed: 45:2a:b9:b1:a4:f0:a2:17:d9:ba:29:8c:71:f8:99: 2a:ef:f1:28:fa:d9:42:a6:ca:ad:88:c8:8a:03:ca: c0:02:8f:df:5c:e8:c2:7e:9a:c2:36:62:fd:87:22: 48:bb:b1:57:8f:5e:77:1c:62:76:b1:fc:4c:9b:b4: 01:c9:c7:ef:bb:9e:6d:eb:de:4d:1d:b2:89:49:b9: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6D:B0:C9:4C:DF:5C:30:0F:F7:E5:3B:04:CA:BE:BA:1E:D1:ED:D5 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/aG2wyUzfXDAP9-U7BMq-uh7R7dU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 2001:67c:64:ffff:0:197:353f:be91/128 2001:67c:64:ffff:0:197:410c:ddcc/128 Signature Algorithm: sha256WithRSAEncryption 83:dc:ca:63:01:ca:ae:b0:76:f3:48:e6:6c:45:db:c4:b0:1d: d6:a2:72:f0:dd:23:53:f5:ac:46:5d:d2:08:ac:f8:3e:d9:61: 8e:14:50:1b:7e:46:c7:4f:c4:6b:a5:3d:14:28:32:e9:75:e3: 38:e7:3c:71:9c:e0:30:d0:cf:55:b0:53:f0:a5:82:b5:97:17: 43:69:7a:12:8f:47:a0:0e:89:90:01:51:04:59:8b:23:47:59: 18:42:a7:d3:5e:17:99:69:4b:53:62:b3:51:38:2e:8a:34:03: 96:51:24:2f:27:df:dc:e3:ee:49:d9:58:3c:d5:fa:36:e9:7c: ca:7a:b0:e0:7f:a5:11:fe:92:f5:b2:a1:28:e4:a4:03:f7:a8: 8d:38:fc:d4:16:66:2c:97:88:aa:54:9f:fc:50:d5:6e:f5:c6: 8d:dd:c0:8d:91:e9:de:81:1b:36:7d:20:28:aa:f8:16:5f:57: 77:f6:1c:2f:58:67:27:6a:73:36:82:b8:fa:21:55:f2:ea:33: ee:d0:e5:c4:f9:a7:79:a8:f8:28:50:36:03:a5:ae:99:40:84: aa:ea:57:cd:47:87:17:f6:12:1a:48:d4:1f:98:f6:e8:96:2f: b9:29:53:8c:12:a9:38:55:47:02:86:35:06:c1:8b:e1:ad:cc: e1:bc:ee:9e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZdBDPYsK4hxvzmF9GIAKSP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNjA1MTcwNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODZkYjBjOTRjZGY1YzMwMGZmN2U1M2IwNGNhYmViYTFlZDFlZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Hqph63ZwEo1e6IzBySoAzUer+s jZ4VFA02w7VkvBFhv+IMUghlQNaza5B3WmOoe3McZWOiGyDp0HbdPw5O7oLGuKbU heibo5pmSYhOM9qom4rfDZ/T7u4xrhllFk8C6krIIyc67L87peKK7TQkVz8wMPsX 0zrA+TVWIwuQNclSlZK1ExFOCwk63CNhbZnHT5psX7VljwIDXRghon8IcfJv/xQ2 n6qo+/pbMSN7Awzvce1FKrmxpPCiF9m6KYxx+Jkq7/Eo+tlCpsqtiMiKA8rAAo/f XOjCfprCNmL9hyJIu7FXj153HGJ2sfxMm7QBycfvu55t695NHbKJSbm2EQIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFGhtsMlM31wwD/flOwTKvroe0e3VMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvYUcyd3lVemZYREFQOS1VN0JNcS11aDdSN2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIAAjBfAxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im AxEAIAEGfABk//8AAAGXNT++kQMRACABBnwAZP//AAABl0EM3cwwDQYJKoZIhvcN AQELBQADggEBAIPcymMByq6wdvNI5mxF28SwHdaicvDdI1P1rEZd0gis+D7ZYY4U UBt+RsdPxGulPRQoMul14zjnPHGc4DDQz1WwU/ClgrWXF0NpehKPR6AOiZABUQRZ iyNHWRhCp9NeF5lpS1Nis1E4Loo0A5ZRJC8n39zj7knZWDzV+jbpfMp6sOB/pRH+ kvWyoSjkpAP3qI04/NQWZiyXiKpUn/xQ1W71xo3dwI2R6d6BGzZ9ICiq+BZfV3f2 HC9YZydqczaCuPohVfLqM+7Q5cT5p3mo+ChQNgOlrplAhKrqV81Hhxf2EhpI1B+Y 9uiWL7kpU4wSqThVRwKGNQbBi+GtzOG87p4= -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:06 2025 by rpki-client