This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/rA5FeobBWA3DTUNOUm_D24xERrg.roa
File: rA5FeobBWA3DTUNOUm_D24xERrg.roa (raw, json)
Hash identifier: LoNmb7Fk0kahFznYpeqGmCJgF1IYE34P/yqO80LshHA=
Subject key identifier: AC:0E:45:7A:86:C1:58:0D:C3:4D:43:4E:52:6F:C3:DB:8C:44:46:B8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196C3BDAEE768D7938CF73D9FB805C2CD5D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/rA5FeobBWA3DTUNOUm_D24xERrg.roa
Signing time: Mon 12 May 2025 09:05:10 +0000
ROA not before: Mon 12 May 2025 09:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:c3bc:f3b5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:bd:ae:e7:68:d7:93:8c:f7:3d:9f:b8:05:c2:cd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 12 09:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac0e457a86c1580dc34d434e526fc3db8c4446b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:30:21:ae:b4:96:6d:47:f4:bf:69:40:9f:
25:93:59:4b:4e:c6:94:f7:1d:8f:5d:50:e6:84:46:
9a:a6:65:c5:66:03:e5:2e:f4:42:12:3a:f1:1d:65:
fd:cf:72:e9:0d:81:53:89:1a:07:35:23:3a:d6:4c:
d1:28:0c:e7:de:a1:1f:6f:be:f6:f9:6b:23:17:f9:
d5:eb:06:8d:57:e7:6d:c8:a3:c5:8f:1c:3e:8f:cd:
42:95:c9:9c:0e:e1:36:f4:53:16:d5:6f:6e:03:b2:
20:76:c2:76:1b:82:11:8e:2e:0f:0c:a4:e7:da:d1:
33:c3:5b:2a:e2:33:d0:7e:e2:44:7d:41:d8:d4:7f:
68:af:e6:fa:fa:f6:1c:cf:3d:03:a9:05:27:86:c2:
4f:dd:b6:e1:01:a2:ad:09:e0:52:6f:6c:00:c6:d7:
82:3b:85:70:3e:90:93:e9:b9:18:1a:2a:e3:dc:a6:
4b:bb:5b:05:43:75:83:5b:17:a2:b6:f1:62:27:96:
ea:c3:be:30:52:d3:6f:c5:3d:29:ee:c2:9a:ba:b6:
41:69:f7:0b:21:1a:d6:91:10:7f:ca:b5:62:e9:54:
be:98:a6:b2:89:80:66:c9:4f:e3:9b:b9:57:66:b6:
56:08:70:3b:c6:a1:9c:12:db:a9:a4:0f:e0:b9:9a:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0E:45:7A:86:C1:58:0D:C3:4D:43:4E:52:6F:C3:DB:8C:44:46:B8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/rA5FeobBWA3DTUNOUm_D24xERrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:c3bc:f3b5/128
Signature Algorithm: sha256WithRSAEncryption
b1:af:43:ad:bc:fa:e5:e7:a2:4f:4d:a6:dd:ac:d9:bf:9e:1a:
ca:47:a4:c4:16:36:27:24:81:1f:a8:26:1d:f2:0f:b1:58:2b:
61:98:38:31:29:21:fd:74:7a:9d:f4:39:bf:9a:dd:49:9c:06:
89:07:9d:5b:81:9b:23:d3:f7:b8:59:1b:92:b6:14:04:be:17:
af:5a:d1:6b:d1:d8:7e:95:ac:69:2b:77:48:12:07:52:ba:b0:
7e:5a:e9:7b:2f:a1:22:57:bf:79:6b:61:b9:fb:31:db:0b:7e:
44:4c:9b:23:60:81:7e:a0:77:8f:6d:bd:81:75:cf:1b:0e:f5:
2a:73:e4:26:01:2f:89:10:65:95:9f:99:8a:cd:11:b0:92:3a:
15:df:04:0e:ac:79:fd:40:7e:4e:12:29:3a:12:2b:23:3b:bb:
5c:d5:55:ff:8b:e5:d4:73:15:f9:28:3a:b0:42:f2:c6:98:4e:
85:b3:a8:37:f3:35:d1:99:64:40:e3:32:84:84:8e:a1:42:3e:
39:ff:8a:61:7f:d3:0f:e3:44:0e:81:8a:9d:9d:aa:65:ab:58:
28:9b:d2:68:e0:26:15:36:27:93:ea:01:de:e2:a6:95:33:de:
aa:3e:a3:9a:57:30:6e:1a:63:7d:64:1a:f8:38:84:1d:80:dd:
c2:4b:45:9b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZbDva7naNeTjPc9n7gFws1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTEyMDkwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzBlNDU3YTg2YzE1ODBkYzM0ZDQzNGU1MjZmYzNkYjhjNDQ0NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYAwIa60lm1H9L9pQJ8lk1lLTsaU
9x2PXVDmhEaapmXFZgPlLvRCEjrxHWX9z3LpDYFTiRoHNSM61kzRKAzn3qEfb772
+WsjF/nV6waNV+dtyKPFjxw+j81ClcmcDuE29FMW1W9uA7IgdsJ2G4IRji4PDKTn
2tEzw1sq4jPQfuJEfUHY1H9or+b6+vYczz0DqQUnhsJP3bbhAaKtCeBSb2wAxteC
O4VwPpCT6bkYGirj3KZLu1sFQ3WDWxeitvFiJ5bqw74wUtNvxT0p7sKaurZBafcL
IRrWkRB/yrVi6VS+mKayiYBmyU/jm7lXZrZWCHA7xqGcEtuppA/guZoQ7wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKwORXqGwVgNw01DTlJvw9uMREa4MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvckE1RmVvYkJXQTNEVFVOT1VtX0QyNHhFUnJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWw7zztTANBgkqhkiG9w0BAQsFAAOCAQEAsa9Drbz65eeiT02m3azZv54a
ykekxBY2JySBH6gmHfIPsVgrYZg4MSkh/XR6nfQ5v5rdSZwGiQedW4GbI9P3uFkb
krYUBL4Xr1rRa9HYfpWsaSt3SBIHUrqwflrpey+hIle/eWthufsx2wt+REybI2CB
fqB3j229gXXPGw71KnPkJgEviRBllZ+Zis0RsJI6Fd8EDqx5/UB+ThIpOhIrIzu7
XNVV/4vl1HMV+Sg6sELyxphOhbOoN/M10ZlkQOMyhISOoUI+Of+KYX/TD+NEDoGK
nZ2qZatYKJvSaOAmFTYnk+oB3uKmlTPeqj6jmlcwbhpjfWQa+DiEHYDdwktFmw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:34:43 2025 by rpki-client