This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/k5CP3BKxKEzLLGGHyCLQ0w3Qma0.roa File: k5CP3BKxKEzLLGGHyCLQ0w3Qma0.roa (raw, json) Hash identifier: OGDII0aNii/aW/eMKnYKWczeJ3Ifn11Mhh1riUeV9dk= Subject key identifier: 93:90:8F:DC:12:B1:28:4C:CB:2C:61:87:C8:22:D0:D3:0D:D0:99:AD Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 01975A95D362A9BD7E3F8474409A094FB80D Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/k5CP3BKxKEzLLGGHyCLQ0w3Qma0.roa Signing time: Tue 10 Jun 2025 16:04:17 +0000 ROA not before: Tue 10 Jun 2025 16:04:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128 2001:67c:64:ffff:0:197:5a95:c9b7/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:5a:95:d3:62:a9:bd:7e:3f:84:74:40:9a:09:4f:b8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Jun 10 16:04:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=93908fdc12b1284ccb2c6187c822d0d30dd099ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:84:f4:e3:92:7e:55:00:e3:67:b1:84:8e: 5b:1b:e5:1e:b1:a0:96:b5:2b:c9:c2:49:28:a2:e7: 8c:73:7b:3a:9b:c6:f8:20:ae:91:de:58:91:ef:e1: 1e:12:82:fe:fb:4d:66:78:5a:b8:a1:38:7e:58:5f: 7e:d9:69:0c:2c:a7:19:e6:01:22:d0:25:27:29:6a: 78:c1:49:41:2a:48:0b:99:f8:f4:5e:99:35:49:44: 5c:8b:3e:c8:bb:c3:c8:31:48:42:b9:61:d5:9d:88: f5:25:21:3f:8d:33:a3:f3:99:e7:ee:5e:86:96:3b: d4:0d:6d:15:5e:c3:1c:eb:cb:29:1a:e1:20:84:5f: ff:ce:3c:29:87:0a:ec:24:69:9a:8a:90:2b:f5:20: 7c:b0:8e:88:88:52:c6:21:f6:8f:a6:a8:f0:23:f9: 5e:e9:15:b7:ce:9f:9e:5a:79:3d:b3:8e:46:4e:eb: 33:55:2f:c8:db:3f:f2:81:41:a6:d2:97:14:35:1b: a4:d1:39:9e:21:aa:b2:d0:af:f6:58:87:20:bd:85: 45:89:95:f7:53:16:52:59:d0:9c:47:b8:16:f7:fe: df:d7:90:09:24:15:12:71:8e:4f:62:54:93:e8:64: 62:d7:67:57:9c:84:b1:e4:74:a1:dc:7e:1d:13:87: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:90:8F:DC:12:B1:28:4C:CB:2C:61:87:C8:22:D0:D3:0D:D0:99:AD X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/k5CP3BKxKEzLLGGHyCLQ0w3Qma0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 2001:67c:64:ffff:0:197:353f:be91/128 2001:67c:64:ffff:0:197:5a95:c9b7/128 Signature Algorithm: sha256WithRSAEncryption 86:4f:05:e8:db:3c:d5:5a:29:46:09:ec:bf:02:a6:7c:ab:cf: 9b:9b:3a:dd:82:04:9c:1c:f9:90:2a:58:33:b8:cb:0a:4c:1f: 8a:bb:c9:af:d5:9c:f7:68:1e:7b:14:c5:a8:c4:1b:17:2b:3e: 7d:d5:a4:e6:1f:e5:7f:c5:ff:a1:e7:81:a0:fe:0a:82:9b:d8: c2:93:70:be:c3:c4:a3:36:8c:80:59:9b:b5:92:85:fc:d1:28: 9c:e0:f9:fe:eb:d0:a0:4b:7e:98:6d:f7:51:89:10:f8:e8:e4: a6:28:0a:bd:a4:1b:ed:2e:c4:fd:12:41:f2:a8:91:45:7d:ae: 80:49:6a:ef:d3:e2:4d:04:f8:42:f1:7d:a1:45:63:e5:95:62: 08:3c:28:9a:08:d6:50:ef:c6:1e:18:b6:a5:09:fe:87:c1:7c: 23:52:04:53:d8:8e:1b:a9:0d:1e:ce:bb:31:4d:9e:dc:dc:6a: 59:54:c1:5d:ad:53:22:fd:c9:23:d6:39:06:90:24:6d:70:25: 8f:32:f7:c8:18:3d:fd:45:91:3b:78:ba:4e:5e:13:3e:de:5e: 7c:b1:6a:f2:15:fd:05:7f:73:2d:ea:bf:df:6d:37:29:56:5a: 9c:56:9a:3b:ec:d1:21:24:e2:7d:70:bf:e8:4c:66:1a:02:1c: f7:6e:79:8b -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZdaldNiqb1+P4R0QJoJT7gNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNjEwMTYwNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzkwOGZkYzEyYjEyODRjY2IyYzYxODdjODIyZDBkMzBkZDA5OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2+E9OOSflUA42exhI5bG+UesaCW tSvJwkkooueMc3s6m8b4IK6R3liR7+EeEoL++01meFq4oTh+WF9+2WkMLKcZ5gEi 0CUnKWp4wUlBKkgLmfj0Xpk1SURciz7Iu8PIMUhCuWHVnYj1JSE/jTOj85nn7l6G ljvUDW0VXsMc68spGuEghF//zjwphwrsJGmaipAr9SB8sI6IiFLGIfaPpqjwI/le 6RW3zp+eWnk9s45GTuszVS/I2z/ygUGm0pcUNRuk0TmeIaqy0K/2WIcgvYVFiZX3 UxZSWdCcR7gW9/7f15AJJBUScY5PYlST6GRi12dXnISx5HSh3H4dE4c5rQIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFJOQj9wSsShMyyxhh8gi0NMN0JmtMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvazVDUDNCS3hLRXpMTEdHSHlDTFEwdzNRbWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIAAjBfAxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im AxEAIAEGfABk//8AAAGXNT++kQMRACABBnwAZP//AAABl1qVybcwDQYJKoZIhvcN AQELBQADggEBAIZPBejbPNVaKUYJ7L8Cpnyrz5ubOt2CBJwc+ZAqWDO4ywpMH4q7 ya/VnPdoHnsUxajEGxcrPn3VpOYf5X/F/6HngaD+CoKb2MKTcL7DxKM2jIBZm7WS hfzRKJzg+f7r0KBLfpht91GJEPjo5KYoCr2kG+0uxP0SQfKokUV9roBJau/T4k0E +ELxfaFFY+WVYgg8KJoI1lDvxh4YtqUJ/ofBfCNSBFPYjhupDR7OuzFNntzcallU wV2tUyL9ySPWOQaQJG1wJY8y98gYPf1FkTt4uk5eEz7eXnyxavIV/QV/cy3qv99t NylWWpxWmjvs0SEk4n1wv+hMZhoCHPdueYs= -----END CERTIFICATE-----Generated at Wed Dec 17 15:17:12 2025 by rpki-client