This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kB2cGQ8vIEJnnX8gz02JKCsUqK4.roa File: kB2cGQ8vIEJnnX8gz02JKCsUqK4.roa (raw, json) Hash identifier: N2Xu6z6+kZvt3ctr+rHmhT2o8LVBiOwGzQK7VDsZ+ko= Subject key identifier: 90:1D:9C:19:0F:2F:20:42:67:9D:7F:20:CF:4D:89:28:2B:14:A8:AE Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 019752779462FEF4664D231ED8937FA4E344 Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kB2cGQ8vIEJnnX8gz02JKCsUqK4.roa Signing time: Mon 09 Jun 2025 02:14:17 +0000 ROA not before: Mon 09 Jun 2025 02:14:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:52:77:94:62:fe:f4:66:4d:23:1e:d8:93:7f:a4:e3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Jun 9 02:14:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=901d9c190f2f2042679d7f20cf4d89282b14a8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:54:e0:16:11:c6:d8:d2:fc:66:ff:c3:0e: b5:31:ca:a5:c7:ec:fc:32:c2:dc:cd:73:91:9d:ce: 27:83:a4:90:74:a8:50:0b:5d:37:ac:60:ae:ff:2b: a9:0b:d3:94:77:75:2f:66:87:e4:6d:b5:b0:3c:79: 08:09:e6:84:d2:a2:a9:f5:42:94:97:5d:58:40:3e: 7d:fd:f0:dc:b3:65:70:71:d6:17:46:82:a9:17:5c: c4:22:49:15:58:0d:44:b8:d1:bd:e0:a8:5d:a9:a3: 13:f7:96:32:c3:6e:77:2d:b4:66:09:2b:b4:29:3d: bb:c2:0f:18:ce:0c:6c:ca:62:ec:6b:82:e5:59:db: f4:b5:83:ae:16:3a:ab:bc:8d:6d:74:af:e6:a7:7d: 78:51:03:e1:b0:52:be:eb:94:ee:7a:89:90:56:a9: f6:b7:ee:eb:65:7c:2f:19:e6:32:4f:4e:30:e1:1a: 89:4b:b5:80:9b:3b:cd:fb:78:7f:84:b1:fb:53:36: 95:11:65:cd:e4:c7:65:47:13:59:b6:ec:ca:76:22: c5:e7:29:a4:df:aa:f5:56:e5:d1:f4:9a:78:0d:d9: fd:3e:f7:15:34:ab:32:3e:d4:8e:30:9c:7a:07:39: 61:d1:66:96:51:ca:51:b1:be:4f:fc:bd:79:0c:46: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1D:9C:19:0F:2F:20:42:67:9D:7F:20:CF:4D:89:28:2B:14:A8:AE X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kB2cGQ8vIEJnnX8gz02JKCsUqK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 2001:67c:64:ffff:0:197:353f:be91/128 Signature Algorithm: sha256WithRSAEncryption 11:8a:43:a9:20:a6:dd:0f:5f:21:e5:f6:3c:b9:52:e4:7e:e0: 93:a9:f9:cc:ca:86:66:80:92:e8:1c:aa:ad:7d:2b:07:26:5e: cd:af:1d:7a:e5:96:cf:ce:18:a3:74:92:86:f1:23:c9:b6:26: fd:37:5c:3d:46:cf:43:78:ee:e4:8a:47:1d:d5:c4:8c:7c:31: 55:eb:79:ac:ed:ad:a3:2b:cd:9b:20:12:8e:15:47:36:39:da: 88:94:31:83:6a:90:4e:80:e8:50:e0:54:55:11:0e:fb:58:9f: 31:9e:a6:d4:d4:d9:00:7a:dc:f7:2b:af:f7:33:d5:33:81:9a: 82:1c:5d:c4:54:1b:aa:7a:a6:03:41:33:e3:23:01:93:d0:bd: 35:f3:dc:aa:6e:73:cb:ed:f1:e6:7f:7c:60:2f:36:8f:4d:f5: cf:49:a5:57:62:58:6a:a9:8c:7f:47:28:ce:e4:68:43:a6:89: e9:a1:76:50:7c:c9:21:63:1e:e5:06:4d:6f:95:82:87:95:64: ea:93:94:30:22:11:da:70:dd:ce:25:51:31:3a:be:4f:ff:32: 71:3e:5f:07:4b:38:df:bb:48:8f:c3:1e:2f:c5:7f:cf:c5:48: 46:41:b7:3e:0d:29:28:1a:f7:54:64:a5:d6:5d:5e:4e:b8:65: ee:3a:96:bf -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZdSd5Ri/vRmTSMe2JN/pONEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNjA5MDIxNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDFkOWMxOTBmMmYyMDQyNjc5ZDdmMjBjZjRkODkyODJiMTRhOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws5U4BYRxtjS/Gb/ww61Mcqlx+z8 MsLczXORnc4ng6SQdKhQC103rGCu/yupC9OUd3UvZofkbbWwPHkICeaE0qKp9UKU l11YQD59/fDcs2VwcdYXRoKpF1zEIkkVWA1EuNG94KhdqaMT95Yyw253LbRmCSu0 KT27wg8YzgxsymLsa4LlWdv0tYOuFjqrvI1tdK/mp314UQPhsFK+65TueomQVqn2 t+7rZXwvGeYyT04w4RqJS7WAmzvN+3h/hLH7UzaVEWXN5MdlRxNZtuzKdiLF5ymk 36r1VuXR9Jp4Ddn9PvcVNKsyPtSOMJx6Bzlh0WaWUcpRsb5P/L15DEYe1wIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFJAdnBkPLyBCZ51/IM9NiSgrFKiuMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEva0IyY0dROHZJRUpublg4Z3owMkpLQ3NVcUs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAEYpDqSCm3Q9f IeX2PLlS5H7gk6n5zMqGZoCS6ByqrX0rByZeza8deuWWz84Yo3SShvEjybYm/Tdc PUbPQ3ju5IpHHdXEjHwxVet5rO2toyvNmyASjhVHNjnaiJQxg2qQToDoUOBUVREO +1ifMZ6m1NTZAHrc9yuv9zPVM4GaghxdxFQbqnqmA0Ez4yMBk9C9NfPcqm5zy+3x 5n98YC82j031z0mlV2JYaqmMf0cozuRoQ6aJ6aF2UHzJIWMe5QZNb5WCh5Vk6pOU MCIR2nDdziVRMTq+T/8ycT5fB0s437tIj8MeL8V/z8VIRkG3Pg0pKBr3VGSl1l1e Trhl7jqWvw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:15 2025 by rpki-client