This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zM_hO379T3LWhJ9rgZ_nlFRL1aY.roa File: zM_hO379T3LWhJ9rgZ_nlFRL1aY.roa (raw, json) Hash identifier: aFNAHP4LnzppkPnbxH6L64kAWySsORo54/bTfpO7aFU= Subject key identifier: CC:CF:E1:3B:7E:FD:4F:72:D6:84:9F:6B:81:9F:E7:94:54:4B:D5:A6 Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Certificate serial: 01965FF58E46A0E78B7F615376133C1684D0 Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zM_hO379T3LWhJ9rgZ_nlFRL1aY.roa Signing time: Wed 23 Apr 2025 00:04:10 +0000 ROA not before: Wed 23 Apr 2025 00:04:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:196:5ff5:7220/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:5f:f5:8e:46:a0:e7:8b:7f:61:53:76:13:3c:16:84:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702 Validity Not Before: Apr 23 00:04:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cccfe13b7efd4f72d6849f6b819fe794544bd5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:34:f4:48:f6:bc:ed:03:e4:5e:30:b4:04: f9:79:d0:77:fd:b7:bd:3f:a2:83:ee:cc:e2:16:ac: c2:cf:12:a3:de:20:8a:ad:73:79:84:63:41:70:d8: fc:8e:61:50:17:8f:84:d0:69:20:b9:1b:0a:7c:3f: 6e:d3:2b:a8:7f:41:c2:ef:61:76:b6:67:db:f7:94: 31:76:0e:5c:bd:76:ed:60:90:3b:09:a8:4a:5e:bc: ae:be:e0:fa:64:cc:98:e6:c6:a5:b3:7c:64:ed:52: 02:1e:37:5b:0f:54:75:4f:20:19:a4:de:ef:e6:10: e8:95:a9:e3:5b:7e:39:d4:64:6d:c0:b9:fa:eb:71: 5a:b9:1c:56:97:4e:a0:84:f1:11:3d:0f:60:f2:b6: 51:76:be:5d:13:8e:e5:ce:9c:7b:4b:79:74:6d:7a: b9:01:f4:aa:9d:57:ef:2c:ba:eb:ba:a2:32:9c:5a: 88:95:35:eb:b8:41:96:5d:05:22:f6:d8:ed:0d:ce: ed:02:da:f0:10:65:38:83:9c:27:0a:c3:a5:09:2f: 1c:78:b3:5c:ea:11:20:99:b6:84:61:1a:f3:63:6f: 1f:a7:47:0f:4b:e6:10:51:d9:dc:d0:4b:0f:cf:8a: 3f:6d:8c:8f:a7:70:26:aa:58:7a:51:5f:80:35:66: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CF:E1:3B:7E:FD:4F:72:D6:84:9F:6B:81:9F:E7:94:54:4B:D5:A6 X509v3 Authority Key Identifier: keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zM_hO379T3LWhJ9rgZ_nlFRL1aY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:196:5ff5:7220/128 Signature Algorithm: sha256WithRSAEncryption 2d:e4:91:dc:04:a3:22:f6:c2:e6:39:88:75:57:9e:32:4b:cd: 33:44:cd:89:1c:e6:c8:ff:07:2f:ce:af:74:88:86:e7:38:34: b0:d3:79:4c:9c:1d:83:d3:fe:b3:e8:19:6f:7b:7f:bd:98:93: 09:24:8e:15:66:68:c0:47:f7:78:94:6a:06:c6:d3:d3:bc:e0: 2d:62:18:12:d5:da:dc:b2:e1:d2:7b:cf:7e:95:fa:92:b9:ad: bc:6b:57:5e:40:01:5c:2e:42:05:16:cf:59:a8:fe:cc:01:db: a1:84:fc:e6:96:fa:9e:d7:62:5a:26:b8:27:e8:9b:ce:a2:38: 9d:28:3d:d2:99:6c:16:d5:33:19:aa:aa:b0:ea:1a:c1:ad:be: ee:e2:cb:07:01:f9:5c:3a:35:88:9a:af:be:93:23:f3:f2:90: 6e:10:d3:e6:a0:d4:04:11:ff:03:08:27:c2:76:14:98:a2:42: 94:86:a5:82:f6:c8:98:03:32:15:17:02:ca:fd:74:4f:23:f2: 37:04:27:18:25:af:d4:10:bc:40:d1:00:98:9a:56:9b:81:1c: 38:63:9a:52:61:e0:9e:bf:47:d7:89:a9:a7:ac:6c:04:81:5d: 0f:75:7f:73:23:68:4a:67:79:43:1a:60:9d:9d:d5:8c:0c:80: 84:34:16:7b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZZf9Y5GoOeLf2FTdhM8FoTQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2 YjY3MDIwHhcNMjUwNDIzMDAwNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2NmZTEzYjdlZmQ0ZjcyZDY4NDlmNmI4MTlmZTc5NDU0NGJkNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIM09Ej2vO0D5F4wtAT5edB3/be9 P6KD7sziFqzCzxKj3iCKrXN5hGNBcNj8jmFQF4+E0GkguRsKfD9u0yuof0HC72F2 tmfb95Qxdg5cvXbtYJA7CahKXryuvuD6ZMyY5sals3xk7VICHjdbD1R1TyAZpN7v 5hDolanjW3451GRtwLn663FauRxWl06ghPERPQ9g8rZRdr5dE47lzpx7S3l0bXq5 AfSqnVfvLLrruqIynFqIlTXruEGWXQUi9tjtDc7tAtrwEGU4g5wnCsOlCS8ceLNc 6hEgmbaEYRrzY28fp0cPS+YQUdnc0EsPz4o/bYyPp3Amqlh6UV+ANWbLSQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFMzP4Tt+/U9y1oSfa4Gf55RUS9WmMB8GA1UdIwQY MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt OTBlYjk1MTA5ZDg5LzEvek1faE8zNzlUM0xXaEo5cmdaX25sRlJMMWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5 LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGWX/VyIDANBgkqhkiG9w0BAQsFAAOCAQEALeSR3ASjIvbC5jmIdVeeMkvN M0TNiRzmyP8HL86vdIiG5zg0sNN5TJwdg9P+s+gZb3t/vZiTCSSOFWZowEf3eJRq BsbT07zgLWIYEtXa3LLh0nvPfpX6krmtvGtXXkABXC5CBRbPWaj+zAHboYT85pb6 ntdiWia4J+ibzqI4nSg90plsFtUzGaqqsOoawa2+7uLLBwH5XDo1iJqvvpMj8/KQ bhDT5qDUBBH/AwgnwnYUmKJClIalgvbImAMyFRcCyv10TyPyNwQnGCWv1BC8QNEA mJpWm4EcOGOaUmHgnr9H14mpp6xsBIFdD3V/cyNoSmd5QxpgnZ3VjAyAhDQWew== -----END CERTIFICATE-----Generated at Mon Dec 22 00:48:59 2025 by rpki-client