This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3230382e302f32322d3232203d3e2039313235.roa File: 3231372e3136392e3230382e302f32322d3232203d3e2039313235.roa (raw, json) Hash identifier: AcqSZWVMWc6gPJImp4sCj2x+BC/o+jeqKBkxg5rc2xs= Subject key identifier: 0D:EF:7B:C8:84:01:7C:03:30:FC:DF:5E:78:B5:34:31:69:AD:21:1B Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Certificate serial: 6E43D9E9D9A5E9180743FD66568DF9DAE5E6D90A Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3230382e302f32322d3232203d3e2039313235.roa Signing time: Tue 06 Jun 2023 09:20:35 +0000 ROA not before: Tue 06 Jun 2023 09:15:35 +0000 ROA not after: Tue 04 Jun 2024 09:20:35 +0000 asID: 9125 IP address blocks: 217.169.208.0/22 maxlen: 22 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 6e:43:d9:e9:d9:a5:e9:18:07:43:fd:66:56:8d:f9:da:e5:e6:d9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Validity Not Before: Jun 6 09:15:35 2023 GMT Not After : Jun 4 09:20:35 2024 GMT Subject: CN=0DEF7BC884017C0330FCDF5E78B5343169AD211B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:1e:07:80:34:cc:3c:ff:76:9f:95:64:58: 88:6f:ca:bf:7f:f3:c6:e1:87:4a:31:a9:bc:8a:9a: c2:f2:40:25:85:a0:3e:34:c0:b0:a5:86:68:aa:14: 1c:d1:93:11:d8:6c:4c:ea:50:48:ce:dc:4d:f7:fa: 0c:f9:bd:79:c0:1e:28:b8:92:98:3b:a4:da:94:1b: 40:c6:af:43:2f:4f:79:f1:8a:9d:03:2f:e7:fa:f5: 84:3a:a7:1d:e2:60:90:1e:91:71:c6:cd:1a:11:1c: db:92:52:90:b0:bd:aa:db:da:e9:84:fd:6e:0d:72: da:3b:75:f1:25:89:23:be:04:96:8d:55:0f:99:03: dc:5c:40:5d:24:54:33:26:d4:40:a3:c3:27:8a:80: e2:af:ae:a2:ee:99:a0:34:e4:4e:b5:0e:66:9c:50: f6:1d:80:77:75:8f:c4:c6:09:a9:77:df:67:d7:1b: ec:30:e4:f8:36:cb:53:04:d0:08:d0:fd:93:40:79: 9b:11:44:28:eb:5c:6b:46:27:3a:46:2d:62:de:48: a2:c8:e5:bf:a3:2d:76:15:fe:a4:55:34:e6:f9:02: 64:07:01:f0:4f:b0:58:74:0c:0b:b2:27:c9:d1:f9: fa:41:f3:39:af:b4:dc:bb:1d:5b:e0:ca:7d:09:60: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EF:7B:C8:84:01:7C:03:30:FC:DF:5E:78:B5:34:31:69:AD:21:1B X509v3 Authority Key Identifier: keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3230382e302f32322d3232203d3e2039313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.169.208.0/22 Signature Algorithm: sha256WithRSAEncryption 87:e4:26:25:c3:52:3c:61:76:4e:ca:49:11:34:b1:78:56:19: 3d:db:e0:a8:12:48:97:5a:67:45:89:7f:91:56:94:6b:f0:af: 55:c5:71:51:e3:af:82:53:1c:be:69:43:94:73:7d:16:7f:a6: 6d:f0:58:2e:63:78:40:94:49:e5:42:af:28:2e:46:77:1e:a7: df:bc:81:f4:2f:bb:5f:b1:d8:b7:32:ba:a7:d2:37:20:3b:87: 9d:9d:cc:df:b3:ea:5b:7c:df:a3:75:60:ea:6f:d8:8a:69:5e: 0c:f3:b2:2a:85:90:e6:47:c0:97:94:d1:84:cb:19:51:b2:88: 86:35:69:87:2b:92:2b:d7:97:6b:fb:94:14:b7:bc:cd:60:e5: 0f:ec:7c:df:d5:9d:7f:c4:57:12:8a:8a:ec:72:34:f0:2d:c6: d5:06:77:ae:f3:e9:95:6b:74:e3:79:53:5c:7b:5c:19:39:9e: c0:f9:7c:f8:ce:a8:ef:fa:f0:01:46:31:55:36:1b:33:e1:30: 97:49:54:34:4f:42:b4:b8:8b:6a:33:38:02:39:7f:6a:55:7c: a1:0f:f8:49:bc:7d:b4:a4:56:9b:e7:0f:4a:1e:9f:82:5e:8e: cc:eb:0d:c5:5c:11:19:e5:17:14:5e:c1:d5:20:9d:f9:11:ea: c9:cd:8c:59 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbkPZ6dml6RgHQ/1mVo352uXm2QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2 YjdmZTQ4NDAeFw0yMzA2MDYwOTE1MzVaFw0yNDA2MDQwOTIwMzVaMDMxMTAvBgNV BAMTKDBERUY3QkM4ODQwMTdDMDMzMEZDREY1RTc4QjUzNDMxNjlBRDIxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/R4HgDTMPP92n5VkWIhvyr9/ 88bhh0oxqbyKmsLyQCWFoD40wLClhmiqFBzRkxHYbEzqUEjO3E33+gz5vXnAHii4 kpg7pNqUG0DGr0MvT3nxip0DL+f69YQ6px3iYJAekXHGzRoRHNuSUpCwvarb2umE /W4Ncto7dfEliSO+BJaNVQ+ZA9xcQF0kVDMm1ECjwyeKgOKvrqLumaA05E61Dmac UPYdgHd1j8TGCal332fXG+ww5Pg2y1ME0AjQ/ZNAeZsRRCjrXGtGJzpGLWLeSKLI 5b+jLXYV/qRVNOb5AmQHAfBPsFh0DAuyJ8nR+fpB8zmvtNy7HVvgyn0JYFh9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUDe97yIQBfAMw/N9eeLU0MWmtIRswHwYDVR0j BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0 XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzIzMTM3MmUzMTM2MzkyZTMy MzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 2anQMA0GCSqGSIb3DQEBCwUAA4IBAQCH5CYlw1I8YXZOykkRNLF4Vhk92+CoEkiX WmdFiX+RVpRr8K9VxXFR46+CUxy+aUOUc30Wf6Zt8FguY3hAlEnlQq8oLkZ3Hqff vIH0L7tfsdi3Mrqn0jcgO4ednczfs+pbfN+jdWDqb9iKaV4M87IqhZDmR8CXlNGE yxlRsoiGNWmHK5Ir15dr+5QUt7zNYOUP7Hzf1Z1/xFcSiorscjTwLcbVBneu8+mV a3TjeVNce1wZOZ7A+Xz4zqjv+vABRjFVNhsz4TCXSVQ0T0K0uItqMzgCOX9qVXyh D/hJvH20pFab5w9KHp+CXo7M6w3FXBEZ5RcUXsHVIJ35EerJzYxZ -----END CERTIFICATE-----Generated at Thu Dec 18 09:54:55 2025 by rpki-client