This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/iXAkecQloOdcqucFZ7pVMRuZ1eM.roa File: iXAkecQloOdcqucFZ7pVMRuZ1eM.roa (raw, json) Hash identifier: OQUUfW/fuVaqzDKYIEpajPTQYXMT6wmMqulaZDq/v+4= Subject key identifier: 89:70:24:79:C4:25:A0:E7:5C:AA:E7:05:67:BA:55:31:1B:99:D5:E3 Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41 Certificate serial: 018697129FFB49DA3B70A4BA4D538B9E072F Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/iXAkecQloOdcqucFZ7pVMRuZ1eM.roa Signing time: Tue 28 Feb 2023 08:10:25 +0000 ROA not before: Tue 28 Feb 2023 08:10:25 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 1239 IP address blocks: 149.126.250.0/24 maxlen: 24 149.126.252.0/24 maxlen: 24 46.232.72.0/21 maxlen: 24 46.232.80.0/20 maxlen: 22 46.232.96.0/20 maxlen: 24 46.3.208.0/21 maxlen: 21 46.232.112.0/20 maxlen: 22 149.126.192.0/18 maxlen: 22 46.3.220.0/23 maxlen: 23 46.3.116.0/22 maxlen: 24 46.3.230.0/23 maxlen: 23 46.3.120.0/21 maxlen: 21 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:97:12:9f:fb:49:da:3b:70:a4:ba:4d:53:8b:9e:07:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41 Validity Not Before: Feb 28 08:10:25 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=89702479c425a0e75caae70567ba55311b99d5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5c:3a:6d:c1:a0:9a:e6:cd:6a:26:d1:1e:fd: b9:da:56:1f:02:94:1f:72:b5:7a:c4:8b:d8:2c:3d: 5e:8e:89:11:f6:41:1b:32:90:9a:58:ad:26:a7:73: ab:51:43:90:9d:a6:ce:28:f0:2e:a2:6d:56:c8:3d: 8a:24:31:1e:b8:14:5b:de:9d:37:9c:d4:c9:ec:4d: 29:81:e1:0c:a6:fc:cb:ad:17:8c:42:5f:fe:bf:74: 29:a8:2f:40:91:29:ac:3c:25:30:01:c5:8b:47:ff: 77:68:11:91:89:d0:c8:35:11:f9:e8:17:28:d7:87: 62:ee:8e:0b:b1:5c:05:6f:87:e5:11:1b:4f:34:a5: 40:35:63:2e:17:b7:6a:cf:08:a8:06:c5:3d:7c:58: b8:ee:1c:bd:de:cd:1d:51:4d:a3:b3:e3:9c:27:41: 64:80:86:22:a6:47:db:eb:26:11:79:db:9a:f6:2b: c5:54:b6:13:7a:a3:e4:d9:15:f8:79:cf:b2:80:46: c7:5c:ce:36:22:fd:a8:1a:60:f6:42:ae:28:d4:a9: c2:3e:9c:8f:8a:88:44:83:86:0c:8b:ac:55:65:4a: 47:62:50:69:bb:78:8e:75:a5:a5:3f:43:f3:f3:60: 0a:13:57:7f:e5:f6:8f:d1:9a:8f:70:73:a1:9d:83: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:70:24:79:C4:25:A0:E7:5C:AA:E7:05:67:BA:55:31:1B:99:D5:E3 X509v3 Authority Key Identifier: keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/iXAkecQloOdcqucFZ7pVMRuZ1eM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.3.116.0-46.3.127.255 46.3.208.0/21 46.3.220.0/23 46.3.230.0/23 46.232.72.0-46.232.127.255 149.126.192.0/18 Signature Algorithm: sha256WithRSAEncryption 96:8e:72:d7:5b:4d:d7:20:58:7f:1d:f5:e5:5a:7b:1a:c4:a5: ae:18:f8:d1:af:4a:05:8b:bc:b0:4e:ff:93:1d:5e:8a:37:79: f9:b0:15:16:21:00:cf:5b:23:d7:2c:9e:4f:86:4a:48:4b:c3: 97:b3:e0:09:ed:63:fb:0e:d5:7f:ca:33:39:93:49:1b:7f:ed: 7c:f1:e3:27:d1:9b:ae:ce:66:5e:8b:76:25:2f:e2:11:42:49: 59:3b:9f:c1:1a:36:7a:ea:c0:68:74:1b:57:0e:b6:23:27:db: d1:ed:6c:1a:a6:34:9d:79:ae:25:77:25:a5:37:15:02:01:19: e8:3b:3b:05:ed:85:fb:62:63:e0:da:98:63:e3:6b:3f:47:7e: 50:c0:36:04:35:8c:22:1c:c5:44:66:e9:ac:21:5a:18:ca:52: cc:6e:f5:f7:04:01:25:fa:49:a5:11:37:d4:65:c9:93:80:c1: 0d:bb:b2:ad:68:a5:53:76:e4:4f:0c:bf:2d:62:47:5d:f3:74: 8d:33:84:82:41:3b:62:d5:73:9a:f0:cd:3a:03:db:a4:ed:ba: 7d:ec:07:3c:0b:d3:c1:bb:40:ab:b0:ed:27:d5:52:54:de:98: 25:66:f3:5d:59:de:6d:cf:ee:07:1f:bf:5a:b0:21:34:f2:72: 13:f7:ba:d2 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAYaXEp/7Sdo7cKS6TVOLngcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw ZmJjNDEwHhcNMjMwMjI4MDgxMDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTcwMjQ3OWM0MjVhMGU3NWNhYWU3MDU2N2JhNTUzMTFiOTlkNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lw6bcGgmubNaibRHv252lYfApQf crV6xIvYLD1ejokR9kEbMpCaWK0mp3OrUUOQnabOKPAuom1WyD2KJDEeuBRb3p03 nNTJ7E0pgeEMpvzLrReMQl/+v3QpqC9AkSmsPCUwAcWLR/93aBGRidDINRH56Bco 14di7o4LsVwFb4flERtPNKVANWMuF7dqzwioBsU9fFi47hy93s0dUU2js+OcJ0Fk gIYipkfb6yYRedua9ivFVLYTeqPk2RX4ec+ygEbHXM42Iv2oGmD2Qq4o1KnCPpyP iohEg4YMi6xVZUpHYlBpu3iOdaWlP0Pz82AKE1d/5faP0ZqPcHOhnYO7swIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFIlwJHnEJaDnXKrnBWe6VTEbmdXjMB8GA1UdIwQY MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et N2NmZWY0Mjc2YTBmLzEvaVhBa2VjUWxvT2RjcXVjRlo3cFZNUnVaMWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAIuA3QD BAcuAwADBAMuA9ADBAEuA9wDBAEuA+YwDAMEAy7oSAMEBy7oAAMEBpV+wDANBgkq hkiG9w0BAQsFAAOCAQEAlo5y11tN1yBYfx315Vp7GsSlrhj40a9KBYu8sE7/kx1e ijd5+bAVFiEAz1sj1yyeT4ZKSEvDl7PgCe1j+w7Vf8ozOZNJG3/tfPHjJ9Gbrs5m Xot2JS/iEUJJWTufwRo2eurAaHQbVw62Iyfb0e1sGqY0nXmuJXclpTcVAgEZ6Ds7 Be2F+2Jj4NqYY+NrP0d+UMA2BDWMIhzFRGbprCFaGMpSzG719wQBJfpJpRE31GXJ k4DBDbuyrWilU3bkTwy/LWJHXfN0jTOEgkE7YtVzmvDNOgPbpO26fewHPAvTwbtA q7DtJ9VSVN6YJWbzXVnebc/uBx+/WrAhNPJyE/e60g== -----END CERTIFICATE-----Generated at Sun Dec 28 18:52:49 2025 by rpki-client