This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/3138352e3231332e3234382e302f32342d3234203d3e2039323332.roa File: 3138352e3231332e3234382e302f32342d3234203d3e2039323332.roa (raw, json) Hash identifier: wNymsS049LVrW/E2XYrvfCsgvXtusEepwxn1VWQ+FSo= Subject key identifier: B9:7B:FA:48:E9:63:89:A7:FF:2C:E4:4F:77:15:9B:16:C1:B3:67:D7 Certificate issuer: /CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Certificate serial: 4A734CF012F34EA4A94F0E38DAAC3C1E47702073 Authority key identifier: 58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/3138352e3231332e3234382e302f32342d3234203d3e2039323332.roa Signing time: Wed 08 Jan 2025 15:11:12 +0000 ROA not before: Wed 08 Jan 2025 15:06:12 +0000 ROA not after: Wed 07 Jan 2026 15:11:12 +0000 asID: 9232 IP address blocks: 185.213.248.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 4a:73:4c:f0:12:f3:4e:a4:a9:4f:0e:38:da:ac:3c:1e:47:70:20:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Validity Not Before: Jan 8 15:06:12 2025 GMT Not After : Jan 7 15:11:12 2026 GMT Subject: CN=B97BFA48E96389A7FF2CE44F77159B16C1B367D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:47:71:28:ca:81:32:d0:3a:2b:43:d9:4a: b8:77:32:57:69:7a:f2:0c:35:1a:ed:5d:ba:01:0d: 97:89:e2:69:38:17:54:10:ec:74:ed:4a:f2:d8:07: cb:a0:3f:ce:09:7a:98:01:b1:18:39:3d:90:4f:b5: 20:4c:88:f1:b2:3f:d0:5e:e4:a0:ad:59:8b:8c:af: 8e:54:fe:65:3e:0f:b3:26:b8:ba:83:00:aa:39:01: c5:34:51:30:72:a5:f4:79:75:ee:58:6c:59:c9:91: 1d:d5:7e:48:ac:e3:6b:47:ea:c5:1a:0b:b0:55:5b: 98:bb:88:cf:e4:46:c5:00:a6:d1:f1:b3:32:9d:5d: e9:43:fe:e3:48:98:9b:fb:b6:a0:c6:3c:e8:88:1f: 47:5d:bd:6d:c7:95:a2:7e:c5:b4:42:70:81:e2:71: f5:43:36:00:dc:62:79:46:24:47:12:30:3f:d1:5f: 66:ab:db:46:55:8e:7c:07:cd:62:44:87:17:83:d0: 18:cb:aa:80:f5:7a:59:c8:9c:01:cd:1f:86:4a:34: 33:6a:79:59:83:b1:b0:25:67:a5:6d:5c:9b:8b:e4: 6c:99:ca:f6:1e:fd:c8:42:7e:a4:7a:18:1a:88:64: 5f:74:d4:75:9e:b7:b6:c5:e9:10:ec:61:5c:b5:d0: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:FA:48:E9:63:89:A7:FF:2C:E4:4F:77:15:9B:16:C1:B3:67:D7 X509v3 Authority Key Identifier: keyid:58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/3138352e3231332e3234382e302f32342d3234203d3e2039323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.248.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:7b:11:19:0b:bf:77:41:4e:20:35:02:be:30:6e:3d:69:1f: 77:ee:54:8c:57:2c:f9:be:9d:24:82:46:d7:5f:57:9e:3f:5b: 1a:e0:31:ac:c7:d0:32:c3:20:15:af:6f:92:1a:75:3c:c8:c6: e7:4f:c9:e0:9d:fd:6b:55:53:73:e7:13:05:fb:2d:8d:38:07: 4a:32:1e:f2:2e:5d:5b:83:be:0e:85:02:7a:5a:63:2d:5b:ca: b6:7a:a1:c5:bb:b2:b4:e0:31:bd:9a:c7:e4:30:26:e9:b6:51: ed:f9:48:73:cd:59:cd:45:e7:0d:11:0f:3a:52:41:47:67:69: e9:20:57:98:a0:13:dc:b2:56:d2:b9:11:77:65:eb:62:30:58: 56:56:73:02:36:fa:3a:8b:73:5d:98:e7:5b:03:2e:78:17:68: de:01:a7:06:55:20:27:4c:c1:66:bf:cb:b4:f4:56:b9:40:0a: 13:89:a2:1e:34:6c:b9:c1:1a:3e:b9:b5:95:41:31:a4:2d:d7: 8f:03:d2:45:69:0c:5d:20:bf:5e:b5:2a:18:09:83:05:65:c0: 0d:c0:1f:ec:c6:f8:ec:d6:e8:f0:d7:57:dc:3a:eb:4e:00:b4: 53:d6:6d:b6:c2:fe:e3:94:b8:53:00:c7:e6:75:72:d5:e4:00: 43:33:7a:5d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSnNM8BLzTqSpTw442qw8HkdwIHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3MWI2NTNmMzUyYmY0NWNhNDdkM2U2ZWY4YjU5ODA0 MzdmYTk2ZTAeFw0yNTAxMDgxNTA2MTJaFw0yNjAxMDcxNTExMTJaMDMxMTAvBgNV BAMTKEI5N0JGQTQ4RTk2Mzg5QTdGRjJDRTQ0Rjc3MTU5QjE2QzFCMzY3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GUdxKMqBMtA6K0PZSrh3Mldp evIMNRrtXboBDZeJ4mk4F1QQ7HTtSvLYB8ugP84JepgBsRg5PZBPtSBMiPGyP9Be 5KCtWYuMr45U/mU+D7MmuLqDAKo5AcU0UTBypfR5de5YbFnJkR3Vfkis42tH6sUa C7BVW5i7iM/kRsUAptHxszKdXelD/uNImJv7tqDGPOiIH0ddvW3HlaJ+xbRCcIHi cfVDNgDcYnlGJEcSMD/RX2ar20ZVjnwHzWJEhxeD0BjLqoD1elnInAHNH4ZKNDNq eVmDsbAlZ6VtXJuL5GyZyvYe/chCfqR6GBqIZF901HWet7bF6RDsYVy10JVHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUuXv6SOljiaf/LORPdxWbFsGzZ9cwHwYDVR0j BBgwFoAUWHG2U/NSv0XKR9Pm74tZgEN/qW4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzAvNTg3MUI2NTNGMzUyQkY0NUNBNDdEM0U2RUY4QjU5ODA0MzdGQTk2RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dIRzJVX05TdjBYS1I5UG03NHRaZ0VO X3FXNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzAvMzEzODM1MmUzMjMxMzMyZTMy MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzIzMzMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA udX4MA0GCSqGSIb3DQEBCwUAA4IBAQBMexEZC793QU4gNQK+MG49aR937lSMVyz5 vp0kgkbXX1eeP1sa4DGsx9AywyAVr2+SGnU8yMbnT8ngnf1rVVNz5xMF+y2NOAdK Mh7yLl1bg74OhQJ6WmMtW8q2eqHFu7K04DG9msfkMCbptlHt+UhzzVnNRecNEQ86 UkFHZ2npIFeYoBPcslbSuRF3ZetiMFhWVnMCNvo6i3NdmOdbAy54F2jeAacGVSAn TMFmv8u09Fa5QAoTiaIeNGy5wRo+ubWVQTGkLdePA9JFaQxdIL9etSoYCYMFZcAN wB/sxvjs1ujw11fcOutOALRT1m22wv7jlLhTAMfmdXLV5ABDM3pd -----END CERTIFICATE-----Generated at Wed Dec 24 03:00:58 2025 by rpki-client