This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3232382e302f32342d3234203d3e20323037333838.roa File: 38352e3131372e3232382e302f32342d3234203d3e20323037333838.roa (raw, json) Hash identifier: I14fctrRSCFvwJIkLp97vZXABreG93JFjlyQRevXjhw= Subject key identifier: F4:27:22:D7:DB:CC:71:58:F2:08:46:F9:AD:11:F7:A3:EA:DD:09:7B Certificate issuer: /CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Certificate serial: 82ECCF7B2859D5D9F57C9FA45A908B98EAB5D8 Authority key identifier: 58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3232382e302f32342d3234203d3e20323037333838.roa Signing time: Thu 09 Jan 2025 20:11:12 +0000 ROA not before: Thu 09 Jan 2025 20:06:12 +0000 ROA not after: Thu 08 Jan 2026 20:11:12 +0000 asID: 207388 IP address blocks: 85.117.228.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 82:ec:cf:7b:28:59:d5:d9:f5:7c:9f:a4:5a:90:8b:98:ea:b5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Validity Not Before: Jan 9 20:06:12 2025 GMT Not After : Jan 8 20:11:12 2026 GMT Subject: CN=F42722D7DBCC7158F20846F9AD11F7A3EADD097B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:78:4e:96:12:ab:35:5e:13:1f:c4:07:00:e8: 29:9b:db:7c:be:f2:42:06:4c:b2:7f:7c:93:da:eb: 44:ac:69:a0:67:08:e1:79:48:06:31:00:08:b8:32: 22:cf:b6:4d:39:42:91:c5:c7:1b:37:25:0e:a2:1a: 55:ab:af:0b:af:86:71:b6:a7:36:1c:fa:aa:a2:85: 0b:e1:9b:f0:0a:52:47:3e:64:38:62:1b:69:a2:e5: 05:44:14:ab:44:08:4c:e5:fa:49:e1:94:89:09:d8: 72:e0:c9:43:4f:1c:82:64:55:fc:e1:9f:c3:be:83: fc:31:fa:82:a1:3b:8d:48:04:7c:a7:fc:3b:b9:50: 1d:ea:39:e6:40:ee:b8:58:82:e0:44:2a:38:88:88: e4:39:91:d2:51:19:be:41:84:80:b2:7a:bb:0a:ea: 2f:5b:65:a4:09:78:76:f2:f3:f6:90:7e:ec:b6:09: b1:98:7b:d4:9d:34:d2:37:fc:0f:25:f9:58:75:c7: cd:ea:bc:66:15:11:20:d1:7e:a8:b3:0b:88:ae:60: a9:19:84:2e:91:7f:da:88:66:63:ec:4a:f1:49:53: a0:92:4b:c8:d0:09:87:e4:75:b4:0c:c4:00:75:a6: 12:fb:e0:80:e5:96:e6:23:db:8c:d5:a9:f0:82:f2: 27:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:27:22:D7:DB:CC:71:58:F2:08:46:F9:AD:11:F7:A3:EA:DD:09:7B X509v3 Authority Key Identifier: keyid:58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3232382e302f32342d3234203d3e20323037333838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.228.0/24 Signature Algorithm: sha256WithRSAEncryption 96:8d:3c:26:fa:ee:7f:2d:71:8b:ff:50:f1:6e:c4:5f:0e:29: 82:2e:61:32:5a:80:7f:55:5a:6a:75:35:be:06:04:90:2f:77: c4:6c:18:1b:9a:73:82:8e:0c:81:1c:4f:95:9c:9b:43:44:7f: 5d:82:d0:5c:3e:30:de:88:b9:a0:c2:43:78:63:57:2c:1e:09: b8:8e:dc:14:f6:ff:7a:d6:57:91:9f:3d:d8:e6:db:e9:3f:af: 1d:e0:11:be:2a:d6:96:82:7e:c0:11:c8:ef:77:ec:09:98:63: cc:e5:1e:c3:67:39:0b:80:6f:62:9c:1e:58:5d:07:65:73:81: d7:dc:88:02:3d:82:70:28:a9:8f:53:6e:a0:d7:25:c5:0e:d5: ee:a9:ad:4b:2e:28:0d:1a:f8:8e:48:88:bc:00:51:b7:8a:39: 2b:be:7b:c5:d1:1b:7a:3c:d4:08:44:1d:d6:bb:2c:19:fe:a6: ac:50:d4:07:b4:40:85:87:27:37:31:97:59:f4:16:38:3e:45: 53:ad:7e:12:6f:53:79:c3:c4:ca:2b:3e:68:d3:ad:cf:4c:ac: 12:df:3a:d8:79:0b:98:6b:97:e5:93:ca:b3:8c:b9:38:32:c3: 84:6d:e0:75:f8:dd:ed:85:6a:ff:22:1e:e1:d5:b7:5f:b5:03: bc:f8:c2:3e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUAILsz3soWdXZ9XyfpFqQi5jqtdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3MWI2NTNmMzUyYmY0NWNhNDdkM2U2ZWY4YjU5ODA0 MzdmYTk2ZTAeFw0yNTAxMDkyMDA2MTJaFw0yNjAxMDgyMDExMTJaMDMxMTAvBgNV BAMTKEY0MjcyMkQ3REJDQzcxNThGMjA4NDZGOUFEMTFGN0EzRUFERDA5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoeE6WEqs1XhMfxAcA6Cmb23y+ 8kIGTLJ/fJPa60SsaaBnCOF5SAYxAAi4MiLPtk05QpHFxxs3JQ6iGlWrrwuvhnG2 pzYc+qqihQvhm/AKUkc+ZDhiG2mi5QVEFKtECEzl+knhlIkJ2HLgyUNPHIJkVfzh n8O+g/wx+oKhO41IBHyn/Du5UB3qOeZA7rhYguBEKjiIiOQ5kdJRGb5BhICyersK 6i9bZaQJeHby8/aQfuy2CbGYe9SdNNI3/A8l+Vh1x83qvGYVESDRfqizC4iuYKkZ hC6Rf9qIZmPsSvFJU6CSS8jQCYfkdbQMxAB1phL74IDlluYj24zVqfCC8iehAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU9Cci19vMcVjyCEb5rRH3o+rdCXswHwYDVR0j BBgwFoAUWHG2U/NSv0XKR9Pm74tZgEN/qW4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzAvNTg3MUI2NTNGMzUyQkY0NUNBNDdEM0U2RUY4QjU5ODA0MzdGQTk2RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dIRzJVX05TdjBYS1I5UG03NHRaZ0VO X3FXNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzAvMzgzNTJlMzEzMTM3MmUzMjMy MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMzM4Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABVdeQwDQYJKoZIhvcNAQELBQADggEBAJaNPCb67n8tcYv/UPFuxF8OKYIuYTJa gH9VWmp1Nb4GBJAvd8RsGBuac4KODIEcT5Wcm0NEf12C0Fw+MN6IuaDCQ3hjVywe CbiO3BT2/3rWV5GfPdjm2+k/rx3gEb4q1paCfsARyO937AmYY8zlHsNnOQuAb2Kc HlhdB2VzgdfciAI9gnAoqY9TbqDXJcUO1e6prUsuKA0a+I5IiLwAUbeKOSu+e8XR G3o81AhEHda7LBn+pqxQ1Ae0QIWHJzcxl1n0Fjg+RVOtfhJvU3nDxMorPmjTrc9M rBLfOth5C5hrl+WTyrOMuTgyw4Rt4HX43e2Fav8iHuHVt1+1A7z4wj4= -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:35 2025 by rpki-client