This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3233312e302f32342d3234203d3e2039323332.roa File: 38352e3131372e3233312e302f32342d3234203d3e2039323332.roa (raw, json) Hash identifier: QQJINO9I4oJqSbe5I9je48A8dSFRbl1PRcdDiTyPatI= Subject key identifier: 47:07:79:E7:50:1A:07:C4:88:54:28:B1:CA:D9:7A:87:26:78:3C:B8 Certificate issuer: /CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Certificate serial: 48BB4ED83B5D69CD4FF9EEB94788C79F3E25A4C1 Authority key identifier: 58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3233312e302f32342d3234203d3e2039323332.roa Signing time: Wed 08 Jan 2025 15:11:11 +0000 ROA not before: Wed 08 Jan 2025 15:06:11 +0000 ROA not after: Wed 07 Jan 2026 15:11:11 +0000 asID: 9232 IP address blocks: 85.117.231.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 48:bb:4e:d8:3b:5d:69:cd:4f:f9:ee:b9:47:88:c7:9f:3e:25:a4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e Validity Not Before: Jan 8 15:06:11 2025 GMT Not After : Jan 7 15:11:11 2026 GMT Subject: CN=470779E7501A07C4885428B1CAD97A8726783CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:88:4e:8a:57:7f:6e:2e:1f:e6:1e:d7:8a: cc:be:37:0d:d7:a2:fd:1e:ab:e0:1e:44:57:fb:ee: 0b:12:dc:62:64:ec:05:75:68:31:73:2c:36:07:50: 84:fd:fc:e4:ca:e3:d0:0c:dd:ca:6a:85:60:ca:2a: bf:d3:5e:5c:8f:39:36:89:9f:c6:37:96:e3:37:ce: a5:0a:42:11:90:8f:71:70:25:09:61:a4:6d:6f:bf: 14:40:21:cd:1c:6a:3a:63:bb:81:8a:65:af:15:be: 3a:c9:fe:55:d1:ee:1a:8e:aa:fa:64:ec:18:7a:f6: c2:5c:92:3f:e5:85:ad:b7:98:80:da:4f:7c:48:c9: 27:95:d1:6a:cf:1a:4b:bb:73:6d:b9:db:07:42:8a: 9d:e5:72:18:7a:5a:75:53:87:73:e1:bf:44:73:f1: ec:f4:c4:a7:e7:72:25:8a:bc:4a:70:63:db:0d:30: 5e:30:c2:ad:1e:c3:67:b3:08:c7:f4:d2:ec:90:8e: 28:c1:b3:33:01:68:f3:42:ef:15:f8:39:e7:78:08: da:42:81:10:49:4e:62:ee:4a:08:28:56:60:64:7a: 3a:67:bc:2a:2d:62:8d:60:83:4c:df:24:58:ee:73: b9:ba:ae:df:b0:35:d2:c0:15:32:e0:54:37:44:b8: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:79:E7:50:1A:07:C4:88:54:28:B1:CA:D9:7A:87:26:78:3C:B8 X509v3 Authority Key Identifier: keyid:58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3233312e302f32342d3234203d3e2039323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.231.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:e5:21:23:7f:e6:cd:b3:fc:1a:27:4a:ad:cf:c4:41:9b:9b: db:b4:5b:e0:6a:0f:2e:76:09:28:54:3b:c6:bb:1f:d6:f2:37: 21:70:d9:dc:64:34:0d:d8:e2:3a:ea:f7:fe:ee:69:39:1b:b3: 53:27:68:14:6a:1c:ef:63:73:51:14:72:c7:c0:2e:da:f1:4b: ee:3c:00:5c:e8:d1:df:57:6a:94:d9:a4:26:c3:11:a7:66:1b: df:b8:f0:90:64:fc:c4:2e:d5:9f:48:1d:f0:a9:5f:e9:8a:28: 1b:ad:6c:6a:1d:c5:81:a5:d7:d0:b9:b6:59:87:d3:3e:65:d8: 6e:3a:c2:28:2f:69:3c:7f:1b:c5:89:49:0f:65:bf:a3:b3:96: 69:d6:72:75:9d:be:4a:cb:f2:2e:65:66:7c:bc:ac:1a:47:f6: 0c:3e:64:25:d8:e1:9d:a8:63:40:df:b2:36:48:f7:a4:e6:1b: 00:14:94:bd:cd:13:6c:95:ed:01:74:0c:b3:24:50:08:7f:43: 34:09:ef:82:80:ea:d7:24:62:ec:7b:04:c7:6f:8f:67:1e:9d: c6:cd:ca:6c:63:20:53:e3:00:51:a5:74:00:03:5c:7a:52:97: 97:bc:5d:e1:7b:d4:12:57:21:9f:07:3b:fc:4f:68:ba:6e:a4: 55:1b:12:b4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSLtO2Dtdac1P+e65R4jHnz4lpMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3MWI2NTNmMzUyYmY0NWNhNDdkM2U2ZWY4YjU5ODA0 MzdmYTk2ZTAeFw0yNTAxMDgxNTA2MTFaFw0yNjAxMDcxNTExMTFaMDMxMTAvBgNV BAMTKDQ3MDc3OUU3NTAxQTA3QzQ4ODU0MjhCMUNBRDk3QTg3MjY3ODNDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22YhOild/bi4f5h7Xisy+Nw3X ov0eq+AeRFf77gsS3GJk7AV1aDFzLDYHUIT9/OTK49AM3cpqhWDKKr/TXlyPOTaJ n8Y3luM3zqUKQhGQj3FwJQlhpG1vvxRAIc0cajpju4GKZa8VvjrJ/lXR7hqOqvpk 7Bh69sJckj/lha23mIDaT3xIySeV0WrPGku7c2252wdCip3lchh6WnVTh3Phv0Rz 8ez0xKfnciWKvEpwY9sNMF4wwq0ew2ezCMf00uyQjijBszMBaPNC7xX4Oed4CNpC gRBJTmLuSggoVmBkejpnvCotYo1gg0zfJFjuc7m6rt+wNdLAFTLgVDdEuPfdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQURwd551AaB8SIVCixytl6hyZ4PLgwHwYDVR0j BBgwFoAUWHG2U/NSv0XKR9Pm74tZgEN/qW4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzAvNTg3MUI2NTNGMzUyQkY0NUNBNDdEM0U2RUY4QjU5ODA0MzdGQTk2RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dIRzJVX05TdjBYS1I5UG03NHRaZ0VO X3FXNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzAvMzgzNTJlMzEzMTM3MmUzMjMz MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMyMzMzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFV1 5zANBgkqhkiG9w0BAQsFAAOCAQEAPuUhI3/mzbP8GidKrc/EQZub27Rb4GoPLnYJ KFQ7xrsf1vI3IXDZ3GQ0DdjiOur3/u5pORuzUydoFGoc72NzURRyx8Au2vFL7jwA XOjR31dqlNmkJsMRp2Yb37jwkGT8xC7Vn0gd8Klf6YooG61sah3FgaXX0Lm2WYfT PmXYbjrCKC9pPH8bxYlJD2W/o7OWadZydZ2+SsvyLmVmfLysGkf2DD5kJdjhnahj QN+yNkj3pOYbABSUvc0TbJXtAXQMsyRQCH9DNAnvgoDq1yRi7HsEx2+PZx6dxs3K bGMgU+MAUaV0AANcelKXl7xd4XvUElchnwc7/E9oum6kVRsStA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:20 2025 by rpki-client