This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/3g7s_5sAfGHCNsC0aqyW3kfrykI.roa File: 3g7s_5sAfGHCNsC0aqyW3kfrykI.roa (raw, json) Hash identifier: JDNUW2Ls+h2BsZ6OQ2ubZmedJ6ehKCJCKptwaWG8szQ= Subject key identifier: DE:0E:EC:FF:9B:00:7C:61:C2:36:C0:B4:6A:AC:96:DE:47:EB:CA:42 Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f Certificate serial: 019A7D206493984DCCBE4E88B8DE26FED6CF Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/3g7s_5sAfGHCNsC0aqyW3kfrykI.roa Signing time: Thu 13 Nov 2025 12:11:05 +0000 ROA not before: Thu 13 Nov 2025 12:11:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13448 IP address blocks: 157.167.1.0/24 maxlen: 24 157.167.3.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:20:64:93:98:4d:cc:be:4e:88:b8:de:26:fe:d6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f Validity Not Before: Nov 13 12:11:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de0eecff9b007c61c236c0b46aac96de47ebca42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:1e:83:ab:e1:e1:97:a9:04:89:83:f0:d7: 85:ae:e3:18:c6:ff:b2:c6:f0:1e:f7:8f:90:c5:6b: 26:60:78:7f:ce:b3:03:37:d4:f2:84:50:3c:39:ca: 94:ce:87:53:43:74:1b:bf:d7:9b:9b:f4:49:44:2e: 76:a2:58:d9:94:89:e7:48:6f:34:9a:9e:99:56:a7: c3:c4:33:d8:25:da:25:67:45:43:11:a9:e1:35:09: 79:ee:3b:cf:58:7c:0e:58:a5:7b:01:36:e9:be:f1: 69:9b:68:10:cf:51:b9:b0:7f:6e:5d:a3:ba:9e:f1: 02:4d:ce:c7:07:ec:50:97:5e:8b:65:d8:a4:0b:b0: 34:6c:1f:9d:7e:5c:11:9d:85:f0:23:c7:85:ea:a9: 86:90:4d:32:ee:10:19:bf:5d:a0:ae:95:45:0d:e7: 0e:8c:cb:3c:91:a9:0b:5b:f1:22:76:ca:94:b9:71: a4:ed:67:3b:02:bc:5d:62:fe:81:b9:7e:86:7f:ec: 41:6b:23:88:08:b7:5b:8c:63:a1:2a:4d:94:4c:ff: 71:c4:ef:f2:71:d1:c1:fd:c0:5d:22:85:54:38:aa: aa:f0:ad:c6:93:38:d2:a5:da:ec:04:17:6a:7c:bd: 05:cc:4e:92:a3:a8:c9:4d:ea:40:7a:45:a7:1e:0b: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0E:EC:FF:9B:00:7C:61:C2:36:C0:B4:6A:AC:96:DE:47:EB:CA:42 X509v3 Authority Key Identifier: keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/3g7s_5sAfGHCNsC0aqyW3kfrykI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.167.1.0/24 157.167.3.0/24 Signature Algorithm: sha256WithRSAEncryption 71:0a:04:67:79:25:25:4b:86:37:cb:56:5d:6b:ee:05:ff:1a: 75:a5:a2:94:43:73:10:7d:6f:45:d1:05:7f:eb:b3:83:94:1e: dd:d1:77:83:b3:4d:eb:42:a0:71:a2:68:39:fb:95:dd:a5:02: e0:75:81:a2:89:d6:c2:54:26:46:6e:56:f6:26:5d:f7:5e:89: 94:38:9b:86:2e:0e:24:36:8b:23:6b:d1:ae:ca:da:5e:51:49: 85:aa:18:58:03:88:10:d3:30:c7:8c:28:1a:4b:ac:9f:37:08: 2d:de:36:54:74:d9:2e:9a:a3:23:0b:fa:c9:f1:8c:08:2a:3d: 1e:19:23:42:40:e9:ca:74:73:7a:ae:33:40:eb:e5:8d:fb:c9: a4:82:a7:68:1d:83:20:65:17:b3:26:3f:84:4f:c0:16:44:a8: 74:03:2e:6e:30:48:b1:da:c3:d9:6c:6f:52:82:c4:70:b7:9f: 86:b0:9a:24:f7:e1:52:ef:1b:0c:11:0a:ec:18:a4:5a:81:d0: e9:0f:dd:70:09:b9:89:a0:69:00:b8:14:f6:b0:06:6e:f7:34: 7b:e5:45:02:5e:10:05:9d:bc:ac:3b:4d:ae:43:4c:38:9d:c5: a3:61:25:60:cd:77:88:e7:b3:11:07:39:62:99:59:77:55:e3: 34:fe:23:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp9IGSTmE3Mvk6IuN4m/tbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZGQ5YzIzYWY2OWVjMmNkYjZmZTJiOTkzNmViNDk0Y2Zk MTYyMWYwHhcNMjUxMTEzMTIxMTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTBlZWNmZjliMDA3YzYxYzIzNmMwYjQ2YWFjOTZkZTQ3ZWJjYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJQeg6vh4ZepBImD8NeFruMYxv+y xvAe94+QxWsmYHh/zrMDN9TyhFA8OcqUzodTQ3Qbv9ebm/RJRC52oljZlInnSG80 mp6ZVqfDxDPYJdolZ0VDEanhNQl57jvPWHwOWKV7ATbpvvFpm2gQz1G5sH9uXaO6 nvECTc7HB+xQl16LZdikC7A0bB+dflwRnYXwI8eF6qmGkE0y7hAZv12grpVFDecO jMs8kakLW/EidsqUuXGk7Wc7ArxdYv6BuX6Gf+xBayOICLdbjGOhKk2UTP9xxO/y cdHB/cBdIoVUOKqq8K3GkzjSpdrsBBdqfL0FzE6So6jJTepAekWnHguNDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN4O7P+bAHxhwjbAtGqslt5H68pCMB8GA1UdIwQY MBaAFBfdnCOvaews22/iuZNutJTP0WIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYt OGZhN2I0YzUzMDczLzEvM2c3c181c0FmR0hDTnNDMGFxeVcza2ZyeWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYtOGZhN2I0YzUzMDcz LzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnacBAwQA nacDMA0GCSqGSIb3DQEBCwUAA4IBAQBxCgRneSUlS4Y3y1Zda+4F/xp1paKUQ3MQ fW9F0QV/67ODlB7d0XeDs03rQqBxomg5+5XdpQLgdYGiidbCVCZGblb2Jl33XomU OJuGLg4kNosja9GuytpeUUmFqhhYA4gQ0zDHjCgaS6yfNwgt3jZUdNkumqMjC/rJ 8YwIKj0eGSNCQOnKdHN6rjNA6+WN+8mkgqdoHYMgZRezJj+ET8AWRKh0Ay5uMEix 2sPZbG9SgsRwt5+GsJok9+FS7xsMEQrsGKRagdDpD91wCbmJoGkAuBT2sAZu9zR7 5UUCXhAFnbysO02uQ0w4ncWjYSVgzXeI57MRBzlimVl3VeM0/iMi -----END CERTIFICATE-----Generated at Sun Dec 21 13:27:32 2025 by rpki-client