This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/aNc8pmhdrwdZ8cst7_FM0ykwLPE.roa File: aNc8pmhdrwdZ8cst7_FM0ykwLPE.roa (raw, json) Hash identifier: NHkCPP4r8rtkhwqjf212BLO77MRjz4BAtNXj206Y6w4= Subject key identifier: 68:D7:3C:A6:68:5D:AF:07:59:F1:CB:2D:EF:F1:4C:D3:29:30:2C:F1 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 0196C2AB068A9AC0B6099E73433EA0C447C4 Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/aNc8pmhdrwdZ8cst7_FM0ykwLPE.roa Signing time: Mon 12 May 2025 04:05:10 +0000 ROA not before: Mon 12 May 2025 04:05:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:c2aa:5def/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c2:ab:06:8a:9a:c0:b6:09:9e:73:43:3e:a0:c4:47:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: May 12 04:05:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68d73ca6685daf0759f1cb2deff14cd329302cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:d4:53:e7:36:b4:3a:c5:ce:1c:04:c2:b1: 8c:f0:f5:83:c9:b2:b3:2f:62:c1:15:a0:4f:cb:9d: a9:5e:82:98:67:59:c7:ab:c8:21:ec:2d:a5:f7:30: 02:f7:31:e6:82:43:b2:a9:48:ee:ff:34:8e:c2:f1: 72:8b:02:8c:0f:e4:67:f3:77:71:ae:29:7d:a6:d1: 38:63:cf:3e:c1:15:8a:59:72:c5:03:b4:93:e2:03: 58:89:22:c5:80:4a:26:7b:30:97:f6:31:a2:86:c0: 0d:1e:e8:0b:50:75:1d:e8:66:7d:c3:c7:56:d5:25: b4:3c:ba:87:e3:c2:49:dd:f6:49:84:73:de:7b:13: 81:c7:af:31:80:1b:ba:63:19:61:1e:ae:34:92:30: e6:0f:f1:76:50:6f:04:7b:7f:26:9a:29:6f:35:b7: 6d:93:86:4b:fd:de:fa:ff:b8:7c:91:c9:02:d7:08: a9:31:66:80:99:19:ac:45:48:82:82:5f:b9:22:55: 0e:35:ab:a7:75:21:f1:0c:90:d5:a5:a0:0a:77:b0: 16:de:b8:0d:9d:58:e1:e1:38:92:19:bf:ca:29:fb: f5:ac:87:f5:02:cf:26:8d:4e:d7:43:c9:40:80:b4: 6d:f1:9e:25:d5:a1:df:22:c1:14:ae:44:e4:c2:0a: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:3C:A6:68:5D:AF:07:59:F1:CB:2D:EF:F1:4C:D3:29:30:2C:F1 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/aNc8pmhdrwdZ8cst7_FM0ykwLPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:c2aa:5def/128 Signature Algorithm: sha256WithRSAEncryption 88:99:e4:d5:f2:40:97:b7:67:78:38:5f:dd:6b:a3:97:d8:1d: 3c:ed:a6:d5:43:a5:e4:99:04:8a:a5:57:b1:7d:68:4d:31:32: f7:7d:f8:ab:41:cc:64:66:ac:a9:da:ea:cc:2b:42:be:f1:a3: a7:4d:3a:3c:90:d2:7d:80:fd:53:7c:74:21:67:79:87:b8:1f: 93:bb:ff:b8:d8:4f:56:4d:07:5a:12:d2:7f:93:a0:e8:66:2e: bf:75:37:52:5d:b1:40:5a:00:c6:aa:c7:53:ff:11:cc:9c:01: 40:19:49:a1:7f:d9:07:36:81:29:ec:15:76:81:8c:eb:1b:49: 9a:6e:cc:51:ce:b8:82:20:30:fd:6f:3f:29:fa:e9:a1:0c:46: 3b:ba:ef:51:72:b3:da:3a:fa:fe:46:fa:1e:55:94:d9:68:65: da:c5:77:81:99:35:65:bb:a6:f6:35:46:58:3d:a1:4b:8c:84: 3d:8c:a0:36:a8:04:e5:e8:70:20:5b:b2:b3:a0:12:28:e6:ba: 02:25:2d:39:ff:c6:ca:2c:1a:c8:f8:00:d1:5a:61:cc:42:56: 7e:f4:3c:b0:95:e3:00:b8:ec:a4:1a:f7:97:3f:27:64:bb:19: 40:f2:7c:ad:37:cf:91:42:ed:71:34:be:51:71:04:a4:a3:d1: ae:ec:9d:f0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZbCqwaKmsC2CZ5zQz6gxEfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNTEyMDQwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGQ3M2NhNjY4NWRhZjA3NTlmMWNiMmRlZmYxNGNkMzI5MzAyY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVXUU+c2tDrFzhwEwrGM8PWDybKz L2LBFaBPy52pXoKYZ1nHq8gh7C2l9zAC9zHmgkOyqUju/zSOwvFyiwKMD+Rn83dx ril9ptE4Y88+wRWKWXLFA7ST4gNYiSLFgEomezCX9jGihsANHugLUHUd6GZ9w8dW 1SW0PLqH48JJ3fZJhHPeexOBx68xgBu6YxlhHq40kjDmD/F2UG8Ee38mmilvNbdt k4ZL/d76/7h8kckC1wipMWaAmRmsRUiCgl+5IlUONaundSHxDJDVpaAKd7AW3rgN nVjh4TiSGb/KKfv1rIf1As8mjU7XQ8lAgLRt8Z4l1aHfIsEUrkTkwgpczwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFGjXPKZoXa8HWfHLLe/xTNMpMCzxMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvYU5jOHBtaGRyd2RaOGNzdDdfRk0weWt3TFBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGWwqpd7zANBgkqhkiG9w0BAQsFAAOCAQEAiJnk1fJAl7dneDhf3Wujl9gd PO2m1UOl5JkEiqVXsX1oTTEy9334q0HMZGasqdrqzCtCvvGjp006PJDSfYD9U3x0 IWd5h7gfk7v/uNhPVk0HWhLSf5Og6GYuv3U3Ul2xQFoAxqrHU/8RzJwBQBlJoX/Z BzaBKewVdoGM6xtJmm7MUc64giAw/W8/KfrpoQxGO7rvUXKz2jr6/kb6HlWU2Whl 2sV3gZk1Zbum9jVGWD2hS4yEPYygNqgE5ehwIFuys6ASKOa6AiUtOf/GyiwayPgA 0VphzEJWfvQ8sJXjALjspBr3lz8nZLsZQPJ8rTfPkULtcTS+UXEEpKPRruyd8A== -----END CERTIFICATE-----Generated at Wed Dec 17 09:47:46 2025 by rpki-client