This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3235302e302f32342d3234203d3e2039313235.roa File: 3130392e3131312e3235302e302f32342d3234203d3e2039313235.roa (raw, json) Hash identifier: lWaV4TgM9A8UcWiQKM2euplHp7udRtyVF2gTOJ25ltc= Subject key identifier: B2:C8:D8:38:E4:3C:25:DE:0B:D4:3C:17:62:17:A1:BF:F2:CD:00:DD Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Certificate serial: 4BFEB03EB76BCDF43313F90719D63BD9690A65D6 Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3235302e302f32342d3234203d3e2039313235.roa Signing time: Tue 06 Jun 2023 09:12:50 +0000 ROA not before: Tue 06 Jun 2023 09:07:50 +0000 ROA not after: Tue 04 Jun 2024 09:12:50 +0000 asID: 9125 IP address blocks: 109.111.250.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fe:b0:3e:b7:6b:cd:f4:33:13:f9:07:19:d6:3b:d9:69:0a:65:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Validity Not Before: Jun 6 09:07:50 2023 GMT Not After : Jun 4 09:12:50 2024 GMT Subject: CN=B2C8D838E43C25DE0BD43C176217A1BFF2CD00DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:16:4b:fa:62:22:f1:34:9d:7d:f4:c6:8f: ae:7e:d3:a9:22:7e:0d:cd:6a:01:38:66:49:1f:5d: ac:d5:fd:4e:c5:e0:64:b7:d2:8f:e5:0a:14:21:a9: 77:88:74:7f:1b:36:5a:e8:9e:3b:78:fb:32:f3:14: 18:e2:d0:49:7d:c2:c2:83:e5:d6:1d:f5:bd:11:ba: fe:7d:cf:d1:76:fb:c8:15:17:47:ed:44:6c:42:95: 76:bf:db:ca:74:1b:60:17:fd:28:f2:1d:67:f2:02: 58:88:ca:d9:56:5d:a3:06:f2:a7:42:c0:50:d4:9e: 3e:8a:25:1a:d7:c7:53:bc:98:72:4b:f0:9b:36:dc: 80:ae:1a:07:60:80:9a:0d:1f:a6:bd:e1:d6:94:6d: 8a:a7:3b:c4:e2:0b:4a:f0:5c:db:33:ef:30:61:e7: 7b:3c:68:37:53:9b:7e:ba:31:d7:80:30:e6:f4:11: 5c:4a:da:48:d2:55:54:9c:32:e9:bc:49:a3:0d:7d: a0:24:02:f2:7a:28:c1:c1:8d:2f:35:18:ce:1d:7b: 43:db:a5:b8:4b:cd:44:c2:53:ea:00:52:60:82:17: d9:3b:87:18:e6:9a:2f:7d:8d:af:8f:b8:cc:b7:57: b8:59:53:c7:33:47:90:dc:2c:89:68:db:60:24:c7: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:D8:38:E4:3C:25:DE:0B:D4:3C:17:62:17:A1:BF:F2:CD:00:DD X509v3 Authority Key Identifier: keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3235302e302f32342d3234203d3e2039313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.111.250.0/24 Signature Algorithm: sha256WithRSAEncryption 45:14:08:d5:c2:3f:2f:31:86:de:99:e0:56:16:7d:d7:05:e4: 64:d1:c3:cc:3d:68:aa:b7:f4:03:3b:db:0e:fd:7f:f1:0b:fd: ce:75:f9:37:48:f9:41:ae:26:ec:fe:12:71:6b:39:a7:9f:a2: 32:8f:f4:3e:46:46:97:a8:1d:7b:3c:28:d1:0c:69:56:da:c3: cc:ac:b8:24:c3:4f:ba:53:94:ac:b7:31:93:bf:ac:15:3d:90: f8:11:cd:3e:ec:d6:31:51:14:9f:53:e7:08:a9:ce:c3:50:1a: b2:e9:e6:fe:2a:5a:06:44:d8:17:17:7e:bc:fc:23:34:cd:56: 20:28:66:66:36:fb:d4:b7:70:33:c6:39:9b:14:be:b0:27:7c: bf:64:2a:b7:40:ae:60:c2:18:60:84:19:b6:11:95:aa:5d:59: e3:83:c5:1e:a4:79:96:b3:04:19:7d:1c:1e:9a:a0:fd:ee:f3: 75:38:6c:da:cf:db:1b:7f:44:16:f7:e1:5e:5b:ea:8c:65:b5: 0f:76:ab:4e:13:c9:6e:e4:df:6e:e3:86:b6:43:3a:3a:26:8c: 1b:17:34:3d:37:20:87:d6:50:e6:04:d1:ce:9a:a7:4e:9c:0c: 0d:18:13:fe:43:cf:5a:04:c3:a4:b7:52:a6:a9:ec:77:1e:76: cf:78:a5:b4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUS/6wPrdrzfQzE/kHGdY72WkKZdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2 YjdmZTQ4NDAeFw0yMzA2MDYwOTA3NTBaFw0yNDA2MDQwOTEyNTBaMDMxMTAvBgNV BAMTKEIyQzhEODM4RTQzQzI1REUwQkQ0M0MxNzYyMTdBMUJGRjJDRDAwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3RZL+mIi8TSdffTGj65+06ki fg3NagE4ZkkfXazV/U7F4GS30o/lChQhqXeIdH8bNlronjt4+zLzFBji0El9wsKD 5dYd9b0Ruv59z9F2+8gVF0ftRGxClXa/28p0G2AX/SjyHWfyAliIytlWXaMG8qdC wFDUnj6KJRrXx1O8mHJL8Js23ICuGgdggJoNH6a94daUbYqnO8TiC0rwXNsz7zBh 53s8aDdTm366MdeAMOb0EVxK2kjSVVScMum8SaMNfaAkAvJ6KMHBjS81GM4de0Pb pbhLzUTCU+oAUmCCF9k7hxjmmi99ja+PuMy3V7hZU8czR5DcLIlo22Akx+gHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUssjYOOQ8Jd4L1DwXYhehv/LNAN0wHwYDVR0j BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0 XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzMDM5MmUzMTMxMzEyZTMy MzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA bW/6MA0GCSqGSIb3DQEBCwUAA4IBAQBFFAjVwj8vMYbemeBWFn3XBeRk0cPMPWiq t/QDO9sO/X/xC/3Odfk3SPlBribs/hJxazmnn6Iyj/Q+RkaXqB17PCjRDGlW2sPM rLgkw0+6U5SstzGTv6wVPZD4Ec0+7NYxURSfU+cIqc7DUBqy6eb+KloGRNgXF368 /CM0zVYgKGZmNvvUt3AzxjmbFL6wJ3y/ZCq3QK5gwhhghBm2EZWqXVnjg8UepHmW swQZfRwemqD97vN1OGzaz9sbf0QW9+FeW+qMZbUPdqtOE8lu5N9u44a2Qzo6Jowb FzQ9NyCH1lDmBNHOmqdOnAwNGBP+Q89aBMOkt1Kmqex3HnbPeKW0 -----END CERTIFICATE-----Generated at Thu Dec 18 12:57:03 2025 by rpki-client