This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/USHajZYKb7srNXcgSwlmE5cqlps.roa File: USHajZYKb7srNXcgSwlmE5cqlps.roa (raw, json) Hash identifier: tqQrFiahSrGS2jhFueTDvtF6a0CjPNdosP7uS3R9cKY= Subject key identifier: 51:21:DA:8D:96:0A:6F:BB:2B:35:77:20:4B:09:66:13:97:2A:96:9B Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2 Certificate serial: 0196A4C44D8C74CAFC62890D186AD818B54F Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/USHajZYKb7srNXcgSwlmE5cqlps.roa Signing time: Tue 06 May 2025 08:44:10 +0000 ROA not before: Tue 06 May 2025 08:44:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.149.153.0/24 maxlen: 24 89.150.49.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a4:c4:4d:8c:74:ca:fc:62:89:0d:18:6a:d8:18:b5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2 Validity Not Before: May 6 08:44:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5121da8d960a6fbb2b3577204b096613972a969b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:ac:d6:84:45:3e:ea:cd:e8:42:40:b2:40: 3c:65:c7:82:69:f2:52:96:a4:c6:a9:d5:80:06:85: 05:cf:7c:dd:2a:b1:66:ff:4c:9a:60:a9:38:45:e6: b7:3e:6a:d1:11:75:18:26:3a:88:87:64:b7:b4:d1: 02:03:36:a9:69:6f:7e:c0:02:f7:7f:30:a4:e3:a7: 2b:ae:86:30:33:d6:fe:f7:81:28:56:e7:37:e3:d8: 52:47:20:9a:5b:20:a3:b1:a2:9c:21:b5:04:20:ec: 73:7e:48:94:45:3f:49:43:87:c6:9f:40:1d:57:1d: 27:a5:51:4a:f0:e0:c7:e0:4d:84:0a:0f:d2:a3:ba: 4d:d7:25:56:af:06:52:90:bc:2a:f4:ae:91:ed:e0: d0:c4:75:1e:37:97:76:3b:fb:aa:28:37:15:a1:30: 15:8c:22:40:95:c6:a3:e3:19:50:bd:34:ad:49:84: d9:7a:6f:a2:4c:c6:ee:f9:6e:8c:5e:e3:3c:37:9f: b7:94:9b:6a:9e:68:74:59:fa:81:88:d3:4d:a0:c8: cb:32:57:3d:1f:ba:61:d4:a7:05:24:ac:96:23:ef: 33:99:0c:32:43:83:bf:3f:a7:a5:d0:99:b6:44:0c: ab:80:56:45:2f:13:5a:74:92:6b:dd:85:a9:6d:31: 7b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:21:DA:8D:96:0A:6F:BB:2B:35:77:20:4B:09:66:13:97:2A:96:9B X509v3 Authority Key Identifier: keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/USHajZYKb7srNXcgSwlmE5cqlps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.153.0/24 89.150.49.0/24 Signature Algorithm: sha256WithRSAEncryption 59:6f:53:b6:8a:29:e4:59:f4:77:1f:f3:aa:fa:0f:78:3e:84: ec:22:67:6d:1a:59:57:02:e8:1f:3d:15:7e:10:4d:4a:76:87: ea:93:2f:7a:68:ec:58:74:9f:25:b1:53:72:3d:86:43:5f:f8: 0c:df:d5:e3:ec:68:79:be:fc:40:2a:68:f8:a5:39:b6:ff:fa: 2b:7a:f7:a4:d0:4c:75:be:79:91:78:76:2a:f7:3b:d7:e2:2a: c1:40:9e:98:b8:b8:a0:14:94:b6:3c:16:7a:31:66:48:93:50: 5d:e6:21:30:92:a6:9b:bf:a1:b6:c8:87:4a:bb:8d:d8:c4:95: 43:48:cd:26:be:e9:43:a1:2d:5a:36:f4:1c:93:86:fd:ba:dd: 3b:cc:7b:b6:c5:df:36:15:3e:62:84:92:ac:9b:c3:93:ae:5a: d9:42:c0:08:e4:09:6f:1e:82:21:89:51:65:55:3d:ed:d1:92: 0d:14:5b:a0:02:ca:46:ad:aa:d2:5f:33:f2:70:13:86:f7:7f: 22:86:4c:16:5a:ef:16:d2:96:2d:33:fc:c1:26:03:cf:fc:f3: a5:b3:fa:1f:b7:48:15:bd:ac:0a:ac:16:ef:da:2b:79:51:fd: dc:c8:dc:44:37:52:ff:1e:05:f4:e2:bd:c8:98:64:cd:90:2b: 89:af:60:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZakxE2MdMr8YokNGGrYGLVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5 NDEyZTIwHhcNMjUwNTA2MDg0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTIxZGE4ZDk2MGE2ZmJiMmIzNTc3MjA0YjA5NjYxMzk3MmE5NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHis1oRFPurN6EJAskA8ZceCafJS lqTGqdWABoUFz3zdKrFm/0yaYKk4Rea3PmrREXUYJjqIh2S3tNECAzapaW9+wAL3 fzCk46crroYwM9b+94EoVuc349hSRyCaWyCjsaKcIbUEIOxzfkiURT9JQ4fGn0Ad Vx0npVFK8ODH4E2ECg/So7pN1yVWrwZSkLwq9K6R7eDQxHUeN5d2O/uqKDcVoTAV jCJAlcaj4xlQvTStSYTZem+iTMbu+W6MXuM8N5+3lJtqnmh0WfqBiNNNoMjLMlc9 H7ph1KcFJKyWI+8zmQwyQ4O/P6el0Jm2RAyrgFZFLxNadJJr3YWpbTF7pwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFEh2o2WCm+7KzV3IEsJZhOXKpabMB8GA1UdIwQY MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt OGE5NWU2Mzc3MzMyLzEvVVNIYWpaWUtiN3NyTlhjZ1N3bG1FNWNxbHBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZWZAwQA WZYxMA0GCSqGSIb3DQEBCwUAA4IBAQBZb1O2iinkWfR3H/Oq+g94PoTsImdtGllX AugfPRV+EE1Kdofqky96aOxYdJ8lsVNyPYZDX/gM39Xj7Gh5vvxAKmj4pTm2//or evek0Ex1vnmReHYq9zvX4irBQJ6YuLigFJS2PBZ6MWZIk1Bd5iEwkqabv6G2yIdK u43YxJVDSM0mvulDoS1aNvQck4b9ut07zHu2xd82FT5ihJKsm8OTrlrZQsAI5Alv HoIhiVFlVT3t0ZINFFugAspGrarSXzPycBOG938ihkwWWu8W0pYtM/zBJgPP/POl s/oft0gVvawKrBbv2it5Uf3cyNxEN1L/HgX04r3ImGTNkCuJr2Co -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:37 2025 by rpki-client