This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34342e302f32342d3234203d3e2039313235.roa
File: 3138352e3135372e34342e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: QNwu72leKQkK58l3N3gl1/Dy+xPNT8XJCZIf4GuSDCw=
Subject key identifier: 41:BC:82:06:1A:04:79:6A:1C:FB:8A:7C:90:04:16:54:27:B3:84:67
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 20AEF06788B134E214A41CD0CE74FCD073E67272
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34342e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:19:50 +0000
ROA not before: Tue 06 Jun 2023 09:14:50 +0000
ROA not after: Tue 04 Jun 2024 09:19:50 +0000
asID: 9125
IP address blocks: 185.157.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ae:f0:67:88:b1:34:e2:14:a4:1c:d0:ce:74:fc:d0:73:e6:72:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:14:50 2023 GMT
Not After : Jun 4 09:19:50 2024 GMT
Subject: CN=41BC82061A04796A1CFB8A7C9004165427B38467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:4f:2e:42:28:04:83:41:86:ea:b8:ea:29:
a7:f8:41:8c:59:82:d5:f1:6e:bf:8c:13:a5:e9:a9:
03:2f:d3:ca:3a:b1:1a:21:b7:e4:29:8b:c8:c9:fc:
a6:21:88:2a:22:a3:cb:1a:72:61:62:2e:6c:16:23:
d6:da:b7:08:00:18:f8:67:53:f0:33:f6:e2:5a:b8:
c7:05:7e:6b:e7:8d:85:59:d2:78:63:23:8d:e0:58:
1f:40:3c:51:0b:7b:5d:22:fa:54:ab:1e:3a:cc:47:
11:aa:7e:12:d7:3c:f1:7f:8e:4a:3d:66:06:89:0c:
0c:54:69:68:2f:f2:13:0f:b8:3b:16:cd:b7:e1:75:
a2:f9:c6:ed:2a:d5:d8:87:fb:a9:48:2b:d2:9b:82:
6d:d7:80:91:32:1e:ec:6c:40:14:18:b9:8e:3b:99:
bf:1f:29:d1:4a:cd:02:5d:7a:2f:e9:7d:46:2a:b8:
74:8b:3c:d7:f1:1a:c6:63:58:30:a2:06:6a:77:47:
e8:ce:ee:4c:65:8c:94:76:f8:e3:ba:7c:9a:ae:cd:
8a:a8:a6:41:9b:68:26:2f:55:1d:87:c4:e4:b4:f7:
13:92:d1:2d:e9:e2:ef:4d:45:52:3a:e5:5e:32:7d:
d5:bf:17:1e:64:df:6a:6e:f7:20:43:2a:74:62:57:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BC:82:06:1A:04:79:6A:1C:FB:8A:7C:90:04:16:54:27:B3:84:67
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34342e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:54:d3:60:07:4f:8c:20:d1:84:44:e6:fb:65:95:f0:33:7b:
92:f5:06:2f:1e:84:f7:09:ef:87:57:f2:92:da:c7:2b:bf:7a:
b5:c8:40:7a:df:31:fe:7a:de:a7:e1:dc:61:52:9d:91:4f:e3:
64:5e:da:38:94:d1:42:27:c2:d1:0a:3c:78:30:4d:87:45:4e:
67:0c:03:5a:fb:48:21:b2:84:a0:7f:28:57:3d:d5:e1:6b:cf:
8b:80:98:bc:ce:d1:9c:51:db:7b:49:36:10:a2:89:54:f5:40:
a5:42:c3:52:fb:1d:ee:ad:10:32:a4:08:20:87:3a:ef:8d:df:
4f:53:2a:72:88:50:55:d6:78:32:03:ec:5e:50:2e:50:62:a1:
82:f0:64:41:0e:42:15:b4:a7:17:9c:bb:0b:d4:37:1f:72:b2:
c7:83:5e:ac:26:94:b0:20:53:d4:28:4c:37:4c:ad:0e:67:86:
51:26:70:42:9e:5b:72:67:99:04:fb:31:1a:7e:19:ea:ce:99:
0e:98:ae:ba:af:81:cb:44:d1:3e:43:a2:e6:f7:da:08:4f:40:
3c:78:f3:f6:ef:5c:36:e3:bb:41:97:2f:90:5c:62:37:4e:8f:
d9:a0:97:7f:02:3d:04:4c:72:b7:40:e9:19:3e:1b:08:b3:ff:
e7:bb:bc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 21:07:21 2025 by rpki-client