This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/M-PNBYoRn09XYjLGhU_8RdqSkBk.roa File: M-PNBYoRn09XYjLGhU_8RdqSkBk.roa (raw, json) Hash identifier: 2NI1XX0KSoSzh1Rhy9d9KNJX4v0X45ViWcXvgGzEVG4= Subject key identifier: 33:E3:CD:05:8A:11:9F:4F:57:62:32:C6:85:4F:FC:45:DA:92:90:19 Certificate issuer: /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24 Certificate serial: 019B2268C4C24994F9B83F865750CDB7B5A6 Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/M-PNBYoRn09XYjLGhU_8RdqSkBk.roa Signing time: Mon 15 Dec 2025 14:27:29 +0000 ROA not before: Mon 15 Dec 2025 14:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51790 IP address blocks: 45.136.188.0/22 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:68:c4:c2:49:94:f9:b8:3f:86:57:50:cd:b7:b5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24 Validity Not Before: Dec 15 14:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=33e3cd058a119f4f576232c6854ffc45da929019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:fa:b1:2c:e8:a8:23:96:e5:0f:0e:a6:21: 7a:84:e6:79:de:fa:20:55:fc:0b:e1:1a:61:b3:3c: 53:5b:cb:ac:8d:dd:45:5d:d4:74:89:0e:59:87:86: d0:a5:ec:4d:b7:90:d4:cc:4e:55:4c:25:96:16:2a: 24:df:e2:67:53:4d:24:16:a9:bf:33:82:5c:0a:c6: 9a:93:fc:80:a2:e3:e5:9c:17:d3:87:fd:f0:f8:e6: 24:d1:f3:5a:b2:35:58:2e:68:70:0b:ea:03:4c:3c: 69:78:be:d4:7c:00:c7:41:fd:48:b6:cb:17:55:16: 38:af:bf:2d:5d:f8:1e:79:48:78:e0:5c:8e:bf:32: be:1c:a8:b3:cb:8a:53:38:f0:e0:31:d1:32:f8:0b: e9:dc:03:66:c0:d3:04:6a:c8:48:5d:25:4c:3b:9f: f2:fe:9d:c8:5b:c1:b8:8f:dd:ea:41:1a:94:f6:a8: d4:84:09:78:08:88:79:0f:f9:44:1e:64:65:a4:ab: e5:ca:41:33:fa:52:ed:0c:bc:24:4d:52:9c:1a:02: 42:c4:cc:e6:6c:e2:cc:c9:72:cc:44:48:9f:35:ba: 02:c8:ec:dd:aa:87:85:8a:39:d2:91:78:3e:73:50: 34:0c:a2:28:67:11:88:63:57:fb:ce:54:f5:a7:3d: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E3:CD:05:8A:11:9F:4F:57:62:32:C6:85:4F:FC:45:DA:92:90:19 X509v3 Authority Key Identifier: keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/M-PNBYoRn09XYjLGhU_8RdqSkBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.188.0/22 Signature Algorithm: sha256WithRSAEncryption ab:ba:93:2f:4a:21:71:90:d2:4c:d3:2d:57:e6:42:05:df:1a: c1:80:90:7c:9b:65:32:65:a2:ee:28:ef:45:ca:e3:61:e3:1a: fa:2b:e7:30:ba:9a:1d:8c:1f:bf:65:0d:74:ea:24:f8:a9:6e: be:60:9d:4a:59:9c:a7:c3:06:3c:a7:4b:78:bf:0c:2d:87:54: 99:18:10:4c:64:3b:c5:a4:39:2f:9e:fe:2a:75:9d:3c:56:32: 63:56:b0:66:02:35:a5:49:ac:f8:31:a2:18:99:5e:cb:c8:e3: bc:b0:b7:0b:e6:e8:74:ae:8b:2a:1f:46:10:1b:96:e5:df:60: 7a:13:f6:8b:49:cd:6f:7e:7b:7c:9d:0f:40:7d:60:c4:10:f3: 72:54:82:80:dc:61:51:ec:37:20:34:a9:74:8e:0d:b8:24:30: e6:60:f9:1a:08:f8:92:50:d9:0d:2b:e8:a5:70:58:b8:df:cb: 4f:cb:4f:b6:2b:ef:dd:fa:8a:ff:40:df:15:cd:f0:04:b9:f1: a5:eb:b1:c7:e8:f3:f9:79:57:d1:73:51:54:54:8a:a4:5e:ad: f2:67:25:9b:08:cd:48:21:fb:79:1c:31:96:ac:27:de:73:8c: 0f:e3:96:ab:43:4c:08:8d:0e:80:d8:42:67:1a:01:9a:0c:f7: 04:5b:b0:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsiaMTCSZT5uD+GV1DNt7WmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMThlMzRlMDk0NzlkY2U4OWVmNjFkOThmNGMyYWJmODE4 OWNmMjQwHhcNMjUxMjE1MTQyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2UzY2QwNThhMTE5ZjRmNTc2MjMyYzY4NTRmZmM0NWRhOTI5MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3176sSzoqCOW5Q8OpiF6hOZ53vog VfwL4RphszxTW8usjd1FXdR0iQ5Zh4bQpexNt5DUzE5VTCWWFiok3+JnU00kFqm/ M4JcCsaak/yAouPlnBfTh/3w+OYk0fNasjVYLmhwC+oDTDxpeL7UfADHQf1ItssX VRY4r78tXfgeeUh44FyOvzK+HKizy4pTOPDgMdEy+Avp3ANmwNMEashIXSVMO5/y /p3IW8G4j93qQRqU9qjUhAl4CIh5D/lEHmRlpKvlykEz+lLtDLwkTVKcGgJCxMzm bOLMyXLMREifNboCyOzdqoeFijnSkXg+c1A0DKIoZxGIY1f7zlT1pz1fhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPjzQWKEZ9PV2IyxoVP/EXakpAZMB8GA1UdIwQY MBaAFMEY404JR53Oie9h2Y9MKr+Bic8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JqalRnbEhuYzZKNzJIWmowd3F2NEdKenlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2Q2ZDQtOTQxYi00MjJhLTkwNWQt ZTI5ODMzYzljMWM2LzEvTS1QTkJZb1JuMDlYWWpMR2hVXzhSZHFTa0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iN2Q2ZDQtOTQxYi00MjJhLTkwNWQtZTI5ODMzYzljMWM2 LzEvd1JqalRnbEhuYzZKNzJIWmowd3F2NEdKenlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYi8MA0G CSqGSIb3DQEBCwUAA4IBAQCrupMvSiFxkNJM0y1X5kIF3xrBgJB8m2UyZaLuKO9F yuNh4xr6K+cwupodjB+/ZQ106iT4qW6+YJ1KWZynwwY8p0t4vwwth1SZGBBMZDvF pDkvnv4qdZ08VjJjVrBmAjWlSaz4MaIYmV7LyOO8sLcL5uh0rosqH0YQG5bl32B6 E/aLSc1vfnt8nQ9AfWDEEPNyVIKA3GFR7DcgNKl0jg24JDDmYPkaCPiSUNkNK+il cFi438tPy0+2K+/d+or/QN8VzfAEufGl67HH6PP5eVfRc1FUVIqkXq3yZyWbCM1I Ift5HDGWrCfec4wP45arQ0wIjQ6A2EJnGgGaDPcEW7BW -----END CERTIFICATE-----Generated at Sun Dec 21 15:16:16 2025 by rpki-client