This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa File: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (raw, json) Hash identifier: NFu1M8jrUmC2CVFR9DfPzBrBPHJkYSipVLf4gO4io10= Subject key identifier: 03:61:10:2F:5B:69:8F:16:E6:C2:70:38:E8:1D:3B:31:98:96:1F:39 Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4 Certificate serial: 21A1E8B808EB1832CFDBBBAC94992E0AEDC20F21 Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa Signing time: Mon 10 Jun 2024 10:24:39 +0000 ROA not before: Mon 10 Jun 2024 10:19:39 +0000 ROA not after: Mon 09 Jun 2025 10:24:39 +0000 asID: 211321 IP address blocks: 185.49.142.0/23 maxlen: 23 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 21:a1:e8:b8:08:eb:18:32:cf:db:bb:ac:94:99:2e:0a:ed:c2:0f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4 Validity Not Before: Jun 10 10:19:39 2024 GMT Not After : Jun 9 10:24:39 2025 GMT Subject: CN=0361102F5B698F16E6C27038E81D3B3198961F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:3c:16:9a:b2:ff:62:8b:82:b6:be:6c:03: 45:63:1e:05:18:e1:9c:2c:7e:9d:06:a5:5c:79:a3: 48:a7:9d:18:ac:5c:c2:d5:00:46:8e:c8:45:21:55: c1:37:67:53:b4:42:a7:19:b7:ab:d9:5a:47:ad:6c: c2:98:bc:6f:5b:2d:c9:d3:90:09:a0:dc:ed:02:ed: 6a:51:6b:ac:7d:c3:c1:c0:2b:d4:3e:8e:f5:0b:2a: 3c:b2:18:52:1c:50:54:ad:1e:d7:fd:81:2c:17:2a: 5f:6a:b5:e0:48:76:e7:64:2c:07:da:83:14:7f:62: ac:b8:7b:b4:05:38:fb:f5:a0:b5:96:20:7d:44:5d: 20:4c:5e:f8:56:76:f0:6f:a5:4c:de:81:b9:bc:a1: fb:c9:48:73:10:39:f5:a3:10:62:19:de:8a:71:a6: eb:b1:06:c5:30:b0:90:cf:35:90:f0:1e:58:09:db: 8b:d9:b0:4a:90:c3:96:26:fd:cc:c2:dc:22:74:f6: 02:a3:14:98:8e:93:44:db:5a:dc:06:db:e0:13:a8: 3b:81:c6:d8:f6:cc:6c:41:94:ad:72:ff:b3:26:ee: 18:d0:3f:4a:05:d8:a9:e7:a1:90:5b:28:7c:d5:40: 07:ff:b5:2a:40:d4:55:a3:f9:57:1c:63:15:9b:e9: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:61:10:2F:5B:69:8F:16:E6:C2:70:38:E8:1D:3B:31:98:96:1F:39 X509v3 Authority Key Identifier: keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.142.0/23 Signature Algorithm: sha256WithRSAEncryption 16:d7:fa:36:cc:71:ae:4c:5e:87:61:f8:66:1a:88:5f:ce:db: c2:17:59:fa:46:ed:49:3d:68:f3:9a:cf:0f:e2:e5:37:62:f9: bb:14:a9:8a:a1:d8:03:00:74:c1:c3:13:61:b8:64:65:a4:a3: ae:7c:be:ba:49:23:2a:d2:da:48:32:27:c9:33:34:df:11:49: e9:73:2b:cb:64:4a:9c:9a:3d:de:73:c1:4d:c3:cb:06:15:29: f2:06:70:3b:89:6b:57:73:46:c2:d6:89:fe:67:a3:13:78:bd: 5f:92:67:cb:79:10:f7:d8:57:fd:7e:dc:19:ba:02:b9:2a:71: c5:56:df:8a:29:f5:5f:0a:5a:78:c9:e0:4a:34:16:55:24:54: 51:0e:c0:cf:e6:c7:88:f4:59:21:71:6f:27:f8:d7:e0:fb:b9: e6:80:db:76:43:40:49:bc:2d:aa:15:ad:0d:08:20:87:57:04: f2:5c:75:6e:74:bd:56:58:89:0e:de:19:87:73:19:9f:0c:37: e7:ac:17:94:25:34:df:8b:2d:6a:1f:11:85:91:98:5a:78:c1: f2:cf:d4:98:93:df:a9:e3:17:94:e0:f3:a0:52:ca:b6:10:bf: c2:61:a5:ec:2f:0f:a3:a4:bc:5c:01:9b:51:8f:2e:d5:ea:6f: 20:d9:78:7a -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUIaHouAjrGDLP27uslJkuCu3CDyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmU3NGQzYmJhMzNhMDkxNmYxMDIwNzg1NGE4ZmMyYjdk NGE4MjhkNDAeFw0yNDA2MTAxMDE5MzlaFw0yNTA2MDkxMDI0MzlaMDMxMTAvBgNV BAMTKDAzNjExMDJGNUI2OThGMTZFNkMyNzAzOEU4MUQzQjMxOTg5NjFGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXzwWmrL/YouCtr5sA0VjHgUY 4Zwsfp0GpVx5o0innRisXMLVAEaOyEUhVcE3Z1O0QqcZt6vZWketbMKYvG9bLcnT kAmg3O0C7WpRa6x9w8HAK9Q+jvULKjyyGFIcUFStHtf9gSwXKl9qteBIdudkLAfa gxR/Yqy4e7QFOPv1oLWWIH1EXSBMXvhWdvBvpUzegbm8ofvJSHMQOfWjEGIZ3opx puuxBsUwsJDPNZDwHlgJ24vZsEqQw5Ym/czC3CJ09gKjFJiOk0TbWtwG2+ATqDuB xtj2zGxBlK1y/7Mm7hjQP0oF2KnnoZBbKHzVQAf/tSpA1FWj+VccYxWb6ZsFAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUA2EQL1tpjxbmwnA46B07MZiWHzkwHwYDVR0j BBgwFoAUvnTTu6M6CRbxAgeFSo/Ct9SoKNQwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzAvQkU3NEQzQkJBMzNBMDkxNkYxMDIwNzg1NEE4RkMyQjdE NEE4MjhENC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZuVFR1Nk02Q1JieEFn ZUZTb19DdDlTb0tOUS5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv MC8zMTM4MzUyZTM0MzkyZTMxMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzEzMTMzMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbkxjjANBgkqhkiG9w0BAQsFAAOCAQEAFtf6 Nsxxrkxeh2H4ZhqIX87bwhdZ+kbtST1o85rPD+LlN2L5uxSpiqHYAwB0wcMTYbhk ZaSjrny+ukkjKtLaSDInyTM03xFJ6XMry2RKnJo93nPBTcPLBhUp8gZwO4lrV3NG wtaJ/mejE3i9X5Jny3kQ99hX/X7cGboCuSpxxVbfiin1XwpaeMngSjQWVSRUUQ7A z+bHiPRZIXFvJ/jX4Pu55oDbdkNASbwtqhWtDQggh1cE8lx1bnS9VliJDt4Zh3MZ nww356wXlCU034stah8RhZGYWnjB8s/UmJPfqeMXlODzoFLKthC/wmGl7C8Po6S8 XAGbUY8u1epvINl4eg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:24 2025 by rpki-client