This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/TWxdCOtntq25pTLJAvEP_1xcYrc.roa File: TWxdCOtntq25pTLJAvEP_1xcYrc.roa (raw, json) Hash identifier: o9ZYfiyKM5kSvSTLS4W9fPGT4mAsoMTcigDZP9HBUwk= Subject key identifier: 4D:6C:5D:08:EB:67:B6:AD:B9:A5:32:C9:02:F1:0F:FF:5C:5C:62:B7 Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9 Certificate serial: 019A9283BA0A3A0899207871F1C678DE5C87 Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/TWxdCOtntq25pTLJAvEP_1xcYrc.roa Signing time: Mon 17 Nov 2025 15:51:37 +0000 ROA not before: Mon 17 Nov 2025 15:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208609 IP address blocks: 45.92.68.0/23 maxlen: 23 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:83:ba:0a:3a:08:99:20:78:71:f1:c6:78:de:5c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9 Validity Not Before: Nov 17 15:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d6c5d08eb67b6adb9a532c902f10fff5c5c62b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:0e:31:de:b9:82:2d:f6:00:af:51:02:8a: ab:0c:17:ec:21:ac:fe:93:94:0b:20:66:de:4a:78: 63:dd:bb:70:e2:87:f9:e6:0e:ac:47:69:82:eb:8b: 1c:47:a5:24:ca:f0:fa:0b:9c:58:2d:1d:3c:5c:ee: 21:3f:35:6d:28:d6:89:a6:a2:5e:67:f3:a3:f6:65: 6b:4f:3b:d6:f6:bb:34:9b:4e:ed:b5:6e:80:3c:48: 6a:5e:37:ac:8b:a6:61:4a:6a:bb:bb:ec:ca:72:06: bc:85:f7:21:4b:f2:89:5b:e1:a1:18:50:48:ef:46: 4a:ae:bd:01:b3:99:69:ff:f9:ab:0d:d1:1e:2a:45: df:57:38:d8:08:fa:3e:19:f0:16:06:f3:b1:f9:20: c5:08:96:9e:36:86:e7:a9:30:78:2c:b9:fd:d8:33: ba:91:91:25:a4:58:5a:48:3f:2f:3f:cc:84:05:73: bb:21:8b:06:38:54:d6:e5:6d:6b:98:23:ab:00:3d: 96:fc:8c:e6:d5:12:3e:8d:62:be:08:b0:fa:31:e6: 5b:d7:2a:91:0c:1b:26:3a:53:9c:17:db:d7:7c:6b: 54:72:af:9b:78:74:66:08:a6:17:af:95:03:07:f6: 6f:44:7f:7e:62:53:87:e5:b2:37:f4:35:51:22:eb: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6C:5D:08:EB:67:B6:AD:B9:A5:32:C9:02:F1:0F:FF:5C:5C:62:B7 X509v3 Authority Key Identifier: keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/TWxdCOtntq25pTLJAvEP_1xcYrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.68.0/23 Signature Algorithm: sha256WithRSAEncryption 02:49:9a:4f:7f:4e:a4:d8:52:ea:45:4e:6f:55:54:b4:26:58: d3:4e:ff:96:a6:f3:fd:e7:e5:da:95:a9:13:dc:59:35:6f:b9: 2e:9f:6b:51:a1:0d:d0:3f:af:df:19:96:88:5a:4d:25:4e:84: b8:cc:d7:13:69:c8:59:64:aa:dc:ad:8e:6f:7a:f2:b8:b0:51: 3c:1b:a0:21:e8:c6:69:3d:eb:ad:e8:4b:d1:85:6d:5a:c1:ee: 92:bd:44:2c:f2:53:e0:e7:8b:e5:5d:af:d4:8d:c0:77:97:86: 0a:02:a0:b3:c7:9b:8f:f5:81:4a:fd:c1:ae:da:3f:10:a7:13: ed:b9:22:3c:3e:e9:fb:2e:29:04:e9:cf:e9:b6:b2:94:2b:3d: 12:2b:84:2b:0d:dd:a2:a5:7e:72:f6:76:ce:d3:b3:f3:da:c7: 0e:b1:27:88:88:f3:f6:07:51:3e:17:4b:34:5b:7d:34:68:31: 4f:eb:68:16:95:f6:47:4e:73:00:f7:46:6f:6d:0f:a3:71:77: 10:2c:86:67:8f:dd:0d:7d:1e:81:2b:08:b9:95:87:f7:dc:56: 6f:b9:da:82:99:30:69:1c:db:a3:0f:00:aa:3a:d3:7d:41:6d: 8a:39:85:63:0f:e9:4e:25:24:da:f8:8a:35:e7:47:e1:d5:28: ad:b4:fb:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqSg7oKOgiZIHhx8cZ43lyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNWRlYWZlYTNiYWQ5MjQ4MjE3YjE2MjllNDJjZmZjN2U0 OTFiZDkwHhcNMjUxMTE3MTU1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDZjNWQwOGViNjdiNmFkYjlhNTMyYzkwMmYxMGZmZjVjNWM2MmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjMOMd65gi32AK9RAoqrDBfsIaz+ k5QLIGbeSnhj3btw4of55g6sR2mC64scR6UkyvD6C5xYLR08XO4hPzVtKNaJpqJe Z/Oj9mVrTzvW9rs0m07ttW6APEhqXjesi6ZhSmq7u+zKcga8hfchS/KJW+GhGFBI 70ZKrr0Bs5lp//mrDdEeKkXfVzjYCPo+GfAWBvOx+SDFCJaeNobnqTB4LLn92DO6 kZElpFhaSD8vP8yEBXO7IYsGOFTW5W1rmCOrAD2W/Izm1RI+jWK+CLD6MeZb1yqR DBsmOlOcF9vXfGtUcq+beHRmCKYXr5UDB/ZvRH9+YlOH5bI39DVRIuum2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1sXQjrZ7atuaUyyQLxD/9cXGK3MB8GA1UdIwQY MBaAFJBd6v6jutkkghexYp5Cz/x+SRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0YzcV9xTzYyU1NDRjdGaW5rTFBfSDVKRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YTBlZjctZGQzNC00NjcxLWJmNTEt NWYyYzEwNTAzNzVkLzEvVFd4ZENPdG50cTI1cFRMSkF2RVBfMXhjWXJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YTBlZjctZGQzNC00NjcxLWJmNTEtNWYyYzEwNTAzNzVk LzEva0YzcV9xTzYyU1NDRjdGaW5rTFBfSDVKRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVxEMA0G CSqGSIb3DQEBCwUAA4IBAQACSZpPf06k2FLqRU5vVVS0JljTTv+WpvP95+XalakT 3Fk1b7kun2tRoQ3QP6/fGZaIWk0lToS4zNcTachZZKrcrY5vevK4sFE8G6Ah6MZp Peut6EvRhW1awe6SvUQs8lPg54vlXa/UjcB3l4YKAqCzx5uP9YFK/cGu2j8QpxPt uSI8Pun7LikE6c/ptrKUKz0SK4QrDd2ipX5y9nbO07Pz2scOsSeIiPP2B1E+F0s0 W300aDFP62gWlfZHTnMA90ZvbQ+jcXcQLIZnj90NfR6BKwi5lYf33FZvudqCmTBp HNujDwCqOtN9QW2KOYVjD+lOJSTa+Io150fh1SittPvY -----END CERTIFICATE-----Generated at Wed Dec 17 22:21:20 2025 by rpki-client