This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/poW7Ye5k9KWtHdrhbgiHirqde90.roa File: poW7Ye5k9KWtHdrhbgiHirqde90.roa (raw, json) Hash identifier: yF9g6vMEjGrd4tmiVkynf2sAT6xbTagfgpDW9p11Ykw= Subject key identifier: A6:85:BB:61:EE:64:F4:A5:AD:1D:DA:E1:6E:08:87:8A:BA:9D:7B:DD Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 01974296A46AB6987CF17650B5374972F3D4 Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/poW7Ye5k9KWtHdrhbgiHirqde90.roa Signing time: Fri 06 Jun 2025 00:14:18 +0000 ROA not before: Fri 06 Jun 2025 00:14:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128 2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128 2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128 2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:42:96:a4:6a:b6:98:7c:f1:76:50:b5:37:49:72:f3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Jun 6 00:14:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a685bb61ee64f4a5ad1ddae16e08878aba9d7bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:ad:68:6c:e9:b5:f0:a0:93:45:e7:ec:8c: 29:0f:37:da:88:e6:15:54:52:e5:c1:e4:63:03:06: ab:49:08:4c:cb:6a:1b:4b:ca:79:60:4c:5e:09:2e: da:fb:af:85:54:58:da:5b:4b:eb:59:45:25:8b:1f: f9:8f:8a:c3:3b:94:16:16:75:f4:ef:08:85:30:a6: 7e:9c:99:60:03:54:a3:28:35:23:c3:ad:2c:79:ca: 50:76:9b:57:41:39:11:77:d8:7f:e9:35:ae:f7:05: ae:1b:bd:cb:ad:f6:5c:b5:0c:a2:dc:5d:51:3f:43: 85:c3:05:96:4b:03:f1:67:4e:c5:77:32:85:cc:1a: 95:f4:9e:45:f8:72:7b:49:14:1c:29:3f:98:15:93: bc:47:43:5c:cd:66:96:ba:d6:31:92:00:bb:fe:1f: 4e:3a:b0:47:19:d8:6e:7c:eb:8c:10:42:91:ef:73: 6d:b2:56:ca:43:6c:c0:4f:08:67:4a:cb:eb:bf:36: c8:28:a5:a0:85:ff:08:ff:2d:43:cb:0d:83:9b:28: 36:39:46:2f:d5:3a:eb:e8:ca:1d:8f:8a:af:c7:7e: 6e:81:55:cd:7b:08:aa:c8:97:12:d7:17:b5:14:9a: 00:d6:15:f2:38:38:09:03:3e:d8:94:e7:6d:aa:db: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:85:BB:61:EE:64:F4:A5:AD:1D:DA:E1:6E:08:87:8A:BA:9D:7B:DD X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/poW7Ye5k9KWtHdrhbgiHirqde90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:ed5d:8c28/128 2001:67c:64:ffff:0:197:108e:927e/128 2001:67c:64:ffff:0:197:15eb:6226/128 2001:67c:64:ffff:0:197:353f:be91/128 Signature Algorithm: sha256WithRSAEncryption 47:9e:c8:5b:45:fe:ec:cc:27:a4:3c:53:57:52:8a:a6:92:dd: 36:d9:cb:86:0c:82:e1:e3:d4:f7:d7:71:73:c9:1a:41:87:5a: 1d:27:ae:ff:05:57:c1:ee:e8:6a:8e:a7:2b:d9:de:22:43:0c: b9:b7:4a:f0:51:40:31:71:5d:b2:77:ef:0f:40:1c:11:83:76: b2:3b:70:41:0c:26:79:e0:ed:6d:26:9f:f5:32:71:19:a7:e8: 01:d4:c6:5f:39:fa:18:68:56:35:96:24:b7:31:0a:a4:1a:ba: c5:f3:0e:5e:ea:e3:4e:c1:8f:67:77:bc:1d:90:e4:cf:21:49: d8:26:0c:a2:d7:24:33:d2:d5:99:54:bb:3f:65:0a:d4:b8:47: 43:4c:87:12:26:95:16:9e:60:6c:62:34:4b:05:9b:9d:64:17: 4d:1c:8b:c3:6f:17:43:d2:db:eb:27:64:5a:df:3f:2a:c2:e3: 8f:eb:a8:af:6d:9a:f0:3e:be:9d:70:3e:dc:84:4c:5a:01:b6: 9f:51:a4:5a:4e:34:26:7a:4c:c0:7b:fd:1e:ad:4c:9d:3d:f9: a6:fd:5b:80:17:e7:56:8c:88:db:25:10:5c:b8:75:90:46:37: 08:4a:36:b3:52:ac:07:d7:49:4f:c7:11:18:8e:e4:03:d3:17: 5f:a9:57:db -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZdClqRqtph88XZQtTdJcvPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNjA2MDAxNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjg1YmI2MWVlNjRmNGE1YWQxZGRhZTE2ZTA4ODc4YWJhOWQ3YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxutaGzptfCgk0Xn7IwpDzfaiOYV VFLlweRjAwarSQhMy2obS8p5YExeCS7a+6+FVFjaW0vrWUUlix/5j4rDO5QWFnX0 7wiFMKZ+nJlgA1SjKDUjw60secpQdptXQTkRd9h/6TWu9wWuG73LrfZctQyi3F1R P0OFwwWWSwPxZ07FdzKFzBqV9J5F+HJ7SRQcKT+YFZO8R0NczWaWutYxkgC7/h9O OrBHGdhufOuMEEKR73NtslbKQ2zATwhnSsvrvzbIKKWghf8I/y1Dyw2Dmyg2OUYv 1Trr6Modj4qvx35ugVXNewiqyJcS1xe1FJoA1hXyODgJAz7YlOdtqtvkuQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFKaFu2HuZPSlrR3a4W4Ih4q6nXvdMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvcG9XN1llNWs5S1d0SGRyaGJnaUhpcnFkZTkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk //8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAR57IW0X+7Mwn pDxTV1KKppLdNtnLhgyC4ePU99dxc8kaQYdaHSeu/wVXwe7oao6nK9neIkMMubdK 8FFAMXFdsnfvD0AcEYN2sjtwQQwmeeDtbSaf9TJxGafoAdTGXzn6GGhWNZYktzEK pBq6xfMOXurjTsGPZ3e8HZDkzyFJ2CYMotckM9LVmVS7P2UK1LhHQ0yHEiaVFp5g bGI0SwWbnWQXTRyLw28XQ9Lb6ydkWt8/KsLjj+uor22a8D6+nXA+3IRMWgG2n1Gk Wk40JnpMwHv9Hq1MnT35pv1bgBfnVoyI2yUQXLh1kEY3CEo2s1KsB9dJT8cRGI7k A9MXX6lX2w== -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:39 2025 by rpki-client