This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3233302e302f32342d3234203d3e20323037333838.roa File: 38352e3131372e3233302e302f32342d3234203d3e20323037333838.roa (raw, json) Hash identifier: H0fjuG9BaXSUJnbUiUuc2NH2CgEHouE/EPoQ+TIfGkM= Subject key identifier: 96:86:7D:47:79:83:DB:30:64:35:AC:E4:45:89:24:40:78:2F:F9:1D Certificate issuer: /CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Certificate serial: 6A2FA8F04826058B4DDAB2DF18CEDB3DA9B9E40C Authority key identifier: 58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3233302e302f32342d3234203d3e20323037333838.roa Signing time: Wed 08 Jan 2025 15:04:38 +0000 ROA not before: Wed 08 Jan 2025 14:59:38 +0000 ROA not after: Wed 07 Jan 2026 15:04:38 +0000 asID: 207388 IP address blocks: 85.117.230.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2f:a8:f0:48:26:05:8b:4d:da:b2:df:18:ce:db:3d:a9:b9:e4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Validity Not Before: Jan 8 14:59:38 2025 GMT Not After : Jan 7 15:04:38 2026 GMT Subject: CN=96867D477983DB306435ACE445892440782FF91D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:f4:ab:6d:97:5c:29:ef:07:d0:6c:2e:ed: 68:51:1c:d4:71:93:66:e1:89:a0:2e:72:7d:cd:2e: 97:f0:be:ab:50:02:7d:eb:d0:5b:78:d3:96:69:e2: fb:fd:77:c7:e4:01:be:3b:40:ca:7e:e7:f5:76:4f: cc:6c:80:63:94:6b:ad:d2:97:68:70:fd:c1:1a:cd: 7a:66:d1:ba:43:8d:a8:f9:a0:09:c5:18:ef:98:b0: 6f:94:7b:09:47:05:59:91:6f:3d:c5:42:ad:9b:6c: 0b:3a:23:e9:2a:02:8c:49:a1:a1:14:b3:82:4c:2e: 9e:08:35:ed:ef:13:c6:2f:e6:4c:7a:16:02:4c:84: 8a:42:94:10:3c:90:ad:d8:4f:9f:70:25:8b:ab:84: 9b:6d:8f:90:ab:42:90:69:34:37:7e:96:a4:35:80: d0:e5:e0:4a:5c:de:26:8f:02:11:dc:d0:b1:28:57: 2f:e5:84:d9:6f:72:a7:1e:fb:fc:56:19:36:6e:b9: 55:c8:77:6c:f1:8f:d6:6a:05:e6:57:d9:e5:5c:0c: eb:f7:53:e4:91:0f:ce:7f:9b:da:16:12:2c:b0:0d: 57:79:02:cc:ce:0e:ef:3e:b8:bb:3f:ce:c3:6a:24: 64:28:ae:d6:76:7c:61:04:bc:cf:51:9c:53:34:2d: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:86:7D:47:79:83:DB:30:64:35:AC:E4:45:89:24:40:78:2F:F9:1D X509v3 Authority Key Identifier: keyid:58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3233302e302f32342d3234203d3e20323037333838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.230.0/24 Signature Algorithm: sha256WithRSAEncryption 40:27:f7:ca:19:b4:08:8f:8f:3b:f7:db:33:de:10:ae:0c:1a: 84:09:09:82:a7:db:3e:67:c8:31:50:af:a7:a4:0b:a1:b1:fb: 41:0f:e5:b5:49:23:af:31:2e:0e:ee:76:de:dc:fc:33:45:82: 4f:7e:27:2d:e5:71:52:29:0d:7d:70:19:c9:e0:81:05:c8:ee: c3:49:eb:09:7f:c6:ff:f9:93:3a:f0:51:16:4c:28:f6:0c:de: 8e:70:3c:19:f1:6b:89:8f:7a:99:c3:50:70:6d:bd:af:19:90: 2e:bb:00:b0:15:26:99:f4:17:c7:19:83:7f:59:af:f5:97:e4: 96:b3:b3:f0:ef:49:31:56:14:c0:09:92:b6:3e:ea:e6:95:8a: c0:b3:47:e5:12:e7:45:7c:58:af:e2:21:0d:ca:94:a0:4b:08: e0:0f:68:97:30:2b:6b:ff:56:83:af:38:7a:89:89:cd:fd:7f: e6:a5:f8:35:c1:93:f8:b7:13:5d:bd:57:b6:c7:cc:58:7d:ab: 31:d4:f7:ca:ab:3a:23:98:47:d0:b9:92:f5:a5:4a:ef:12:a4: 95:4a:6e:7f:1d:9b:2d:63:15:d0:ed:dd:38:c5:a2:91:dd:02: f5:2e:78:a7:df:67:df:af:b0:b0:f6:57:8e:b2:46:28:f2:9a: 1e:0f:76:fc -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUai+o8EgmBYtN2rLfGM7bPam55AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3MWI2NTNmMzUyYmY0NWNhNDdkM2U2ZWY4YjU5ODA0 MzdmYTk2ZTAeFw0yNTAxMDgxNDU5MzhaFw0yNjAxMDcxNTA0MzhaMDMxMTAvBgNV BAMTKDk2ODY3RDQ3Nzk4M0RCMzA2NDM1QUNFNDQ1ODkyNDQwNzgyRkY5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVp/SrbZdcKe8H0Gwu7WhRHNRx k2bhiaAucn3NLpfwvqtQAn3r0Ft405Zp4vv9d8fkAb47QMp+5/V2T8xsgGOUa63S l2hw/cEazXpm0bpDjaj5oAnFGO+YsG+UewlHBVmRbz3FQq2bbAs6I+kqAoxJoaEU s4JMLp4INe3vE8Yv5kx6FgJMhIpClBA8kK3YT59wJYurhJttj5CrQpBpNDd+lqQ1 gNDl4Epc3iaPAhHc0LEoVy/lhNlvcqce+/xWGTZuuVXId2zxj9ZqBeZX2eVcDOv3 U+SRD85/m9oWEiywDVd5AszODu8+uLs/zsNqJGQortZ2fGEEvM9RnFM0LYexAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUloZ9R3mD2zBkNazkRYkkQHgv+R0wHwYDVR0j BBgwFoAUWHG2U/NSv0XKR9Pm74tZgEN/qW4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzAvNTg3MUI2NTNGMzUyQkY0NUNBNDdEM0U2RUY4QjU5ODA0MzdGQTk2RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dIRzJVX05TdjBYS1I5UG03NHRaZ0VO X3FXNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzAvMzgzNTJlMzEzMTM3MmUzMjMz MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMzM4Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABVdeYwDQYJKoZIhvcNAQELBQADggEBAEAn98oZtAiPjzv32zPeEK4MGoQJCYKn 2z5nyDFQr6ekC6Gx+0EP5bVJI68xLg7udt7c/DNFgk9+Jy3lcVIpDX1wGcnggQXI 7sNJ6wl/xv/5kzrwURZMKPYM3o5wPBnxa4mPepnDUHBtva8ZkC67ALAVJpn0F8cZ g39Zr/WX5Jazs/DvSTFWFMAJkrY+6uaVisCzR+US50V8WK/iIQ3KlKBLCOAPaJcw K2v/VoOvOHqJic39f+al+DXBk/i3E129V7bHzFh9qzHU98qrOiOYR9C5kvWlSu8S pJVKbn8dmy1jFdDt3TjFopHdAvUueKffZ9+vsLD2V46yRijymh4Pdvw= -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:35 2025 by rpki-client