This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ngEGiEyetVp6tmEUejrkxQHVqTY.roa File: ngEGiEyetVp6tmEUejrkxQHVqTY.roa (raw, json) Hash identifier: R+cUsXUDf/WznOKqGXeoCtdJ3Y1ZyfovSqa3ily6jM8= Subject key identifier: 9E:01:06:88:4C:9E:B5:5A:7A:B6:61:14:7A:3A:E4:C5:01:D5:A9:36 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 01969FB12AEB5A0E569FEEDE9CF2A9797EF5 Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ngEGiEyetVp6tmEUejrkxQHVqTY.roa Signing time: Mon 05 May 2025 09:05:10 +0000 ROA not before: Mon 05 May 2025 09:05:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:9fb0:5f2f/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9f:b1:2a:eb:5a:0e:56:9f:ee:de:9c:f2:a9:79:7e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: May 5 09:05:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e0106884c9eb55a7ab661147a3ae4c501d5a936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:72:aa:30:f9:2b:09:35:93:5d:1b:a6:2e:5a: df:9a:21:31:60:e9:36:6f:98:a1:93:c6:8e:ad:19: fe:2e:08:36:5e:71:cd:27:6e:28:b2:7d:10:6a:7d: 1e:0d:d8:52:0a:2e:32:56:b6:c7:a1:b0:9e:e9:04: 6f:e5:96:18:e3:9b:8f:0e:38:19:2e:e5:0d:47:31: 13:89:1a:5e:37:e4:c8:94:d8:9c:38:ee:ab:39:d0: bf:1b:ef:b3:a9:ab:d3:51:9a:90:80:21:18:69:46: 87:6b:fd:0b:f0:a8:86:5b:0c:eb:9c:70:0f:d7:ba: c5:42:ef:cb:9f:90:97:38:7d:af:3a:77:0c:16:72: 06:7a:e5:be:ff:02:a4:e5:e0:16:46:9a:87:78:b7: ef:e2:37:f2:7b:e2:62:ce:4e:e7:44:9a:0f:c1:e8: 43:4d:4a:31:69:6c:81:b9:7b:59:fa:8a:5f:78:bf: c6:7b:3b:d5:00:80:d0:59:53:45:66:ab:ee:ba:ca: 64:34:68:34:2d:44:6a:36:fc:41:dc:96:87:72:e1: 45:f4:2a:1e:ea:cc:8e:35:0b:d7:a2:c5:7f:24:44: c9:4c:88:7a:be:3e:9b:03:00:ea:e4:66:58:79:a6: 77:6d:35:49:77:f6:48:44:91:26:a6:ac:17:91:4f: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:01:06:88:4C:9E:B5:5A:7A:B6:61:14:7A:3A:E4:C5:01:D5:A9:36 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ngEGiEyetVp6tmEUejrkxQHVqTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:9fb0:5f2f/128 Signature Algorithm: sha256WithRSAEncryption a7:0d:9f:76:d4:37:2e:43:c6:1a:3f:9b:2a:e1:da:d9:d0:ba: e4:42:f1:04:c2:00:6e:fb:a8:03:36:aa:a0:2e:81:12:d1:88: 46:f1:42:dd:50:e4:91:85:db:fa:a0:a8:4e:0c:df:a9:a6:ea: 8f:1b:2a:f2:39:2e:a0:67:c7:a8:82:fd:d3:5d:a9:21:03:30: 42:01:38:51:27:50:23:8d:cd:83:86:91:e9:0d:e0:dc:65:95: 80:5a:6c:11:a4:70:c2:35:83:a5:e0:6f:ce:70:f4:b2:74:70: 1a:37:8d:1a:a4:60:68:a8:e2:f9:3c:39:7e:6e:34:d3:3d:40: d6:37:78:a3:ea:45:b4:cc:b4:1b:89:f3:ee:d6:e6:b4:f3:16: 08:ff:24:05:c0:26:11:5a:1d:9a:a8:13:27:1e:e7:88:c1:f5: ab:e7:84:57:37:e5:be:0b:65:13:f2:5f:2e:11:b0:ce:ed:20: 45:78:e5:dd:0f:8a:7a:d5:4d:40:a0:ce:e7:c5:3c:ea:ea:22: 61:03:8e:d1:2e:15:41:c3:f5:6a:30:ac:72:e0:79:cb:92:d7: c5:24:86:c3:24:9f:93:1c:77:a8:bb:38:57:87:89:23:a8:55: 37:c5:1f:e1:b8:94:5a:8f:83:c7:fd:a5:f7:bd:63:75:55:2a: 94:09:64:23 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZafsSrrWg5Wn+7enPKpeX71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNTA1MDkwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTAxMDY4ODRjOWViNTVhN2FiNjYxMTQ3YTNhZTRjNTAxZDVhOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nKqMPkrCTWTXRumLlrfmiExYOk2 b5ihk8aOrRn+Lgg2XnHNJ24osn0Qan0eDdhSCi4yVrbHobCe6QRv5ZYY45uPDjgZ LuUNRzETiRpeN+TIlNicOO6rOdC/G++zqavTUZqQgCEYaUaHa/0L8KiGWwzrnHAP 17rFQu/Ln5CXOH2vOncMFnIGeuW+/wKk5eAWRpqHeLfv4jfye+Jizk7nRJoPwehD TUoxaWyBuXtZ+opfeL/GezvVAIDQWVNFZqvuuspkNGg0LURqNvxB3JaHcuFF9Coe 6syONQvXosV/JETJTIh6vj6bAwDq5GZYeaZ3bTVJd/ZIRJEmpqwXkU835QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFJ4BBohMnrVaerZhFHo65MUB1ak2MB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvbmdFR2lFeWV0VnA2dG1FVWVqcmt4UUhWcVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGWn7BfLzANBgkqhkiG9w0BAQsFAAOCAQEApw2fdtQ3LkPGGj+bKuHa2dC6 5ELxBMIAbvuoAzaqoC6BEtGIRvFC3VDkkYXb+qCoTgzfqabqjxsq8jkuoGfHqIL9 012pIQMwQgE4USdQI43Ng4aR6Q3g3GWVgFpsEaRwwjWDpeBvznD0snRwGjeNGqRg aKji+Tw5fm400z1A1jd4o+pFtMy0G4nz7tbmtPMWCP8kBcAmEVodmqgTJx7niMH1 q+eEVzflvgtlE/JfLhGwzu0gRXjl3Q+KetVNQKDO58U86uoiYQOO0S4VQcP1ajCs cuB5y5LXxSSGwySfkxx3qLs4V4eJI6hVN8Uf4biUWo+Dx/2l971jdVUqlAlkIw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:15:23 2025 by rpki-client