This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/3138352e3231332e3234392e302f32342d3234203d3e2039323332.roa File: 3138352e3231332e3234392e302f32342d3234203d3e2039323332.roa (raw, json) Hash identifier: SHgSicKzdo612bC/djyFvsSHdXboo37i6D87g5Tb9dU= Subject key identifier: 2A:C8:B6:C3:EE:08:89:F7:9D:0F:D1:8D:F1:DD:4B:9C:2F:26:7A:EB Certificate issuer: /CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Certificate serial: 1D9E8C6C2C18C9F49B8F783653D2A7FDB880FE15 Authority key identifier: 58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/3138352e3231332e3234392e302f32342d3234203d3e2039323332.roa Signing time: Wed 08 Jan 2025 15:11:11 +0000 ROA not before: Wed 08 Jan 2025 15:06:11 +0000 ROA not after: Wed 07 Jan 2026 15:11:11 +0000 asID: 9232 IP address blocks: 185.213.249.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9e:8c:6c:2c:18:c9:f4:9b:8f:78:36:53:d2:a7:fd:b8:80:fe:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Validity Not Before: Jan 8 15:06:11 2025 GMT Not After : Jan 7 15:11:11 2026 GMT Subject: CN=2AC8B6C3EE0889F79D0FD18DF1DD4B9C2F267AEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:90:29:85:16:6d:eb:9f:dd:be:5d:f8:8a: 2c:a3:1e:45:9a:d0:17:83:1d:62:c6:e7:21:20:7b: c0:41:52:32:57:c8:8c:bf:77:44:fc:73:22:0b:b7: 31:8d:ae:52:8f:fa:d4:6a:29:c5:36:94:de:6e:af: b0:a3:00:2e:6f:f9:bd:44:0e:52:1e:2b:0a:04:8b: a5:47:37:db:02:b4:14:5d:d5:66:a4:49:e9:2f:38: d4:7b:14:73:f9:f9:06:5d:1b:f9:63:79:d0:1f:7b: 78:3a:b2:a5:79:37:01:be:2d:48:08:08:91:a4:78: 1a:f2:82:51:2f:69:81:9f:9d:f8:19:89:6e:30:94: f4:3e:7f:44:15:23:cf:82:33:f4:15:3e:36:e5:1b: 5a:d8:71:a9:ac:f7:6f:bd:a4:01:8b:05:95:b1:55: c7:6e:78:3a:86:aa:97:51:04:62:85:ed:80:ff:fe: d1:c8:30:2b:d0:28:b2:05:54:be:3a:34:cb:7f:59: cb:3c:27:9e:27:d1:b5:7a:64:1b:37:6c:52:ed:a7: 8a:27:98:9e:c8:2b:ee:87:28:df:b3:86:34:3f:cd: 3a:e7:c0:f2:8b:cb:3f:a7:22:f3:ff:ee:a4:51:40: 1e:66:0a:ef:3e:bf:d5:0e:c5:01:0d:de:36:b4:9f: 10:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C8:B6:C3:EE:08:89:F7:9D:0F:D1:8D:F1:DD:4B:9C:2F:26:7A:EB X509v3 Authority Key Identifier: keyid:58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/3138352e3231332e3234392e302f32342d3234203d3e2039323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.249.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:ec:4e:37:b7:09:e0:48:04:2d:a1:ca:b1:0b:d7:3f:65:d2: 3d:5c:75:5c:ff:03:c3:50:8a:bf:84:8d:92:2e:82:81:a0:16: 0e:da:8c:f6:89:97:5e:68:97:a4:c4:3e:4a:57:87:84:76:38: 96:c8:ff:9a:6f:fc:af:64:d3:8e:04:da:a9:5d:e2:9a:70:20: 9d:f4:25:88:20:1d:ad:c9:da:8f:c1:c4:df:4c:53:c8:0f:0e: 3e:5a:ed:41:85:9e:5c:cb:43:23:bc:10:c3:db:bd:65:17:d0: b1:c9:10:a3:83:1d:d2:bf:db:36:07:d0:d5:0a:90:38:9d:09: 6c:74:d5:b6:b8:d0:75:9f:7a:83:2f:55:d4:b5:3b:5d:64:01: b4:59:08:89:f1:43:11:cc:b1:05:8b:d2:a8:ea:eb:26:91:4f: 21:37:32:70:a2:54:25:ae:86:ee:1e:a5:72:df:1c:38:df:12: 56:74:0f:f5:9a:99:46:c5:fd:cb:c3:58:9f:ae:d9:c1:7b:b3: b8:32:19:34:21:78:84:02:96:d7:5b:2e:2f:75:87:00:41:58: 33:72:e0:02:01:84:f3:ad:e5:f2:75:a5:ff:c9:59:4d:ac:89: 24:83:57:98:d3:47:4f:ba:1c:43:5f:aa:37:3c:74:52:90:12: ef:a0:54:50 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHZ6MbCwYyfSbj3g2U9Kn/biA/hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3MWI2NTNmMzUyYmY0NWNhNDdkM2U2ZWY4YjU5ODA0 MzdmYTk2ZTAeFw0yNTAxMDgxNTA2MTFaFw0yNjAxMDcxNTExMTFaMDMxMTAvBgNV BAMTKDJBQzhCNkMzRUUwODg5Rjc5RDBGRDE4REYxREQ0QjlDMkYyNjdBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3S5AphRZt65/dvl34iiyjHkWa 0BeDHWLG5yEge8BBUjJXyIy/d0T8cyILtzGNrlKP+tRqKcU2lN5ur7CjAC5v+b1E DlIeKwoEi6VHN9sCtBRd1WakSekvONR7FHP5+QZdG/ljedAfe3g6sqV5NwG+LUgI CJGkeBryglEvaYGfnfgZiW4wlPQ+f0QVI8+CM/QVPjblG1rYcams92+9pAGLBZWx VcdueDqGqpdRBGKF7YD//tHIMCvQKLIFVL46NMt/Wcs8J54n0bV6ZBs3bFLtp4on mJ7IK+6HKN+zhjQ/zTrnwPKLyz+nIvP/7qRRQB5mCu8+v9UOxQEN3ja0nxA3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUKsi2w+4IifedD9GN8d1LnC8meuswHwYDVR0j BBgwFoAUWHG2U/NSv0XKR9Pm74tZgEN/qW4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzAvNTg3MUI2NTNGMzUyQkY0NUNBNDdEM0U2RUY4QjU5ODA0MzdGQTk2RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dIRzJVX05TdjBYS1I5UG03NHRaZ0VO X3FXNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzAvMzEzODM1MmUzMjMxMzMyZTMy MzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzIzMzMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA udX5MA0GCSqGSIb3DQEBCwUAA4IBAQCN7E43twngSAQtocqxC9c/ZdI9XHVc/wPD UIq/hI2SLoKBoBYO2oz2iZdeaJekxD5KV4eEdjiWyP+ab/yvZNOOBNqpXeKacCCd 9CWIIB2tydqPwcTfTFPIDw4+Wu1BhZ5cy0MjvBDD271lF9CxyRCjgx3Sv9s2B9DV CpA4nQlsdNW2uNB1n3qDL1XUtTtdZAG0WQiJ8UMRzLEFi9Ko6usmkU8hNzJwolQl robuHqVy3xw43xJWdA/1mplGxf3Lw1ifrtnBe7O4Mhk0IXiEApbXWy4vdYcAQVgz cuACAYTzreXydaX/yVlNrIkkg1eY00dPuhxDX6o3PHRSkBLvoFRQ -----END CERTIFICATE-----Generated at Wed Dec 24 11:12:31 2025 by rpki-client