This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33332e302f32342d3234203d3e2039313235.roa File: 352e3137322e33332e302f32342d3234203d3e2039313235.roa (raw, json) Hash identifier: ARqGjvybXsLTRLtqldyNEsMtaBp8LvNDf1S7L3bHf9s= Subject key identifier: A4:B9:65:C2:61:21:AF:4D:66:62:70:13:68:62:7C:C6:39:EA:04:D9 Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Certificate serial: 7358D93DE778321199B4F6E661F4C15B55952692 Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33332e302f32342d3234203d3e2039313235.roa Signing time: Tue 06 Jun 2023 09:21:33 +0000 ROA not before: Tue 06 Jun 2023 09:16:33 +0000 ROA not after: Tue 04 Jun 2024 09:21:33 +0000 asID: 9125 IP address blocks: 5.172.33.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 73:58:d9:3d:e7:78:32:11:99:b4:f6:e6:61:f4:c1:5b:55:95:26:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Validity Not Before: Jun 6 09:16:33 2023 GMT Not After : Jun 4 09:21:33 2024 GMT Subject: CN=A4B965C26121AF4D6662701368627CC639EA04D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:d5:99:18:cf:8b:82:dc:2e:1b:2b:73:0a: dd:42:85:56:4d:f7:7e:88:d5:af:7a:07:c8:31:75: 45:d0:c4:ac:8b:4e:68:43:d1:02:6c:d4:86:d6:5a: 7b:f5:7f:df:bb:da:64:5d:98:32:1f:c2:dc:04:08: a2:4b:46:6c:4e:bb:6a:be:1b:25:0d:aa:88:82:85: 44:74:9b:c7:6e:b6:2f:07:7e:b7:92:ac:a4:48:e9: 33:ce:1b:73:f8:32:ed:3e:c2:d3:60:e3:6d:50:fa: 3c:b5:07:02:13:5f:79:e9:b0:03:fc:86:7e:a5:0e: 0b:dd:7d:9e:9b:dc:a0:43:b6:31:92:9f:0a:e8:b9: 91:f7:90:b9:fb:44:ca:50:fa:33:36:d2:1f:2c:f9: 21:e1:6b:e5:7a:5d:de:d0:52:eb:0b:ce:0f:9d:b7: d2:d9:a3:f4:19:d5:00:f7:2f:9d:ad:ad:60:24:ee: 64:32:c3:81:a1:80:97:4d:e3:96:5e:ee:68:6a:b2: e9:cf:0c:d3:e9:49:b5:ad:c4:b1:95:a0:9a:21:a7: c3:db:32:99:ba:a5:fa:fa:36:ae:33:3e:57:42:83: e9:3b:62:9d:50:0f:fe:c1:ea:fd:59:a5:16:26:d1: 10:60:6d:cb:3c:87:af:22:07:ef:91:1d:54:26:30: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B9:65:C2:61:21:AF:4D:66:62:70:13:68:62:7C:C6:39:EA:04:D9 X509v3 Authority Key Identifier: keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33332e302f32342d3234203d3e2039313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.33.0/24 Signature Algorithm: sha256WithRSAEncryption 74:f4:2b:dd:6b:64:d7:e9:15:14:94:ed:0d:99:57:aa:80:91: 71:05:b2:1e:c6:8e:44:b5:27:d3:f4:c6:e0:61:51:ed:70:3c: 8c:eb:2b:cc:68:e2:b9:60:5a:a0:63:20:0a:bc:bc:32:d4:53: 2e:df:0b:51:0b:bc:1f:fb:3b:7f:1c:4e:d3:a7:b7:f0:2f:b1: ea:36:b1:5d:b3:69:69:ff:f8:72:a8:e0:6d:48:28:67:97:83: b1:72:25:61:1d:bd:ea:43:53:3a:69:6d:4c:73:ea:74:71:8a: 15:f3:e1:b8:08:6e:b6:95:d8:1d:5d:95:35:f3:00:84:b3:cc: bf:03:9e:a4:cb:1f:69:56:b6:84:9d:7c:7a:1c:27:d5:a0:7c: 6b:04:eb:5d:5d:34:20:51:ce:6a:35:8b:a7:55:cd:87:3a:c0: f4:94:ad:dc:5a:ab:2b:07:94:0c:e0:0e:57:3d:d3:17:1d:cc: 33:5f:47:cd:1c:7d:77:9c:44:a9:0f:fe:f0:1e:3f:6b:07:b4: d8:b6:65:be:72:08:ea:c6:6c:54:3c:8e:ae:e0:be:36:ab:44: 45:75:cd:4d:cb:dd:be:e1:f0:2f:21:b9:37:fe:0c:a9:a0:21: f8:d5:2f:7f:b1:e8:5a:a2:61:cf:57:ca:74:e0:ef:8e:25:40: 44:f0:af:2a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUc1jZPed4MhGZtPbmYfTBW1WVJpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2 YjdmZTQ4NDAeFw0yMzA2MDYwOTE2MzNaFw0yNDA2MDQwOTIxMzNaMDMxMTAvBgNV BAMTKEE0Qjk2NUMyNjEyMUFGNEQ2NjYyNzAxMzY4NjI3Q0M2MzlFQTA0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+9WZGM+LgtwuGytzCt1ChVZN 936I1a96B8gxdUXQxKyLTmhD0QJs1IbWWnv1f9+72mRdmDIfwtwECKJLRmxOu2q+ GyUNqoiChUR0m8duti8HfreSrKRI6TPOG3P4Mu0+wtNg421Q+jy1BwITX3npsAP8 hn6lDgvdfZ6b3KBDtjGSnwrouZH3kLn7RMpQ+jM20h8s+SHha+V6Xd7QUusLzg+d t9LZo/QZ1QD3L52trWAk7mQyw4GhgJdN45Ze7mhqsunPDNPpSbWtxLGVoJohp8Pb Mpm6pfr6Nq4zPldCg+k7Yp1QD/7B6v1ZpRYm0RBgbcs8h68iB++RHVQmMILbAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUpLllwmEhr01mYnATaGJ8xjnqBNkwHwYDVR0j BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0 XzVJUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzUyZTMxMzczMjJlMzMzMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABawhMA0G CSqGSIb3DQEBCwUAA4IBAQB09Cvda2TX6RUUlO0NmVeqgJFxBbIexo5EtSfT9Mbg YVHtcDyM6yvMaOK5YFqgYyAKvLwy1FMu3wtRC7wf+zt/HE7Tp7fwL7HqNrFds2lp //hyqOBtSChnl4OxciVhHb3qQ1M6aW1Mc+p0cYoV8+G4CG62ldgdXZU18wCEs8y/ A56kyx9pVraEnXx6HCfVoHxrBOtdXTQgUc5qNYunVc2HOsD0lK3cWqsrB5QM4A5X PdMXHcwzX0fNHH13nESpD/7wHj9rB7TYtmW+cgjqxmxUPI6u4L42q0RFdc1Ny92+ 4fAvIbk3/gypoCH41S9/sehaomHPV8p04O+OJUBE8K8q -----END CERTIFICATE-----Generated at Wed Dec 17 17:57:08 2025 by rpki-client