This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33342e302f32342d3234203d3e2039313235.roa File: 352e3137322e33342e302f32342d3234203d3e2039313235.roa (raw, json) Hash identifier: RAN9lMPvOysWPWWpYvgt1Fg+quWQEXA7YA3+bIhvyXo= Subject key identifier: 3C:3A:59:DB:52:B6:A4:11:B2:90:E2:D9:BD:AC:A6:40:53:7C:32:25 Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Certificate serial: 11ECCE4DDC1D8658165E717282D5CE5D82FAFAB5 Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33342e302f32342d3234203d3e2039313235.roa Signing time: Tue 06 Jun 2023 09:21:40 +0000 ROA not before: Tue 06 Jun 2023 09:16:40 +0000 ROA not after: Tue 04 Jun 2024 09:21:40 +0000 asID: 9125 IP address blocks: 5.172.34.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 11:ec:ce:4d:dc:1d:86:58:16:5e:71:72:82:d5:ce:5d:82:fa:fa:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Validity Not Before: Jun 6 09:16:40 2023 GMT Not After : Jun 4 09:21:40 2024 GMT Subject: CN=3C3A59DB52B6A411B290E2D9BDACA640537C3225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:f7:fd:52:b9:a9:0e:01:63:f6:71:d6:db: a3:f5:cf:1d:7d:74:68:29:f3:04:bd:95:2d:bd:25: de:73:59:ee:0b:12:7a:d5:d4:80:83:33:af:77:cf: a1:fe:6d:ad:52:c9:71:8b:11:f9:f4:b3:af:c3:90: c0:3d:18:d0:c7:3b:48:ba:57:03:0d:47:60:45:92: 3f:12:87:ba:86:39:0f:2f:96:5a:61:c7:16:5d:10: c1:e3:f7:43:84:a0:1c:aa:0c:52:9c:6c:72:2b:64: 16:ba:19:a7:d2:70:c2:0a:c1:a4:e5:de:5c:52:bf: 11:fd:d0:6e:58:9d:bd:d3:d2:d9:58:7e:c4:d4:e3: 93:df:63:d9:35:f9:0f:b8:d3:81:85:5c:e7:d0:24: f7:c5:00:27:e1:68:ac:bf:8d:12:45:fd:7b:14:e5: 89:07:1d:f8:2d:bd:1e:5a:0f:25:9b:b6:86:48:3a: 4c:83:5a:21:6c:06:13:a2:09:ed:77:74:70:02:28: 8e:75:f0:c2:90:e5:21:ca:61:32:97:b7:c7:f7:1f: 82:52:26:13:cc:b6:9f:77:2d:da:2a:70:0c:3b:39: 30:aa:a9:23:47:26:12:4a:3c:ba:f4:2e:f2:f7:a8: ab:ad:58:0c:07:3c:58:a3:80:b2:bf:5a:e5:7a:6e: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3A:59:DB:52:B6:A4:11:B2:90:E2:D9:BD:AC:A6:40:53:7C:32:25 X509v3 Authority Key Identifier: keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33342e302f32342d3234203d3e2039313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.34.0/24 Signature Algorithm: sha256WithRSAEncryption 69:96:c5:74:9d:61:70:a4:8c:7a:fc:ef:aa:f4:09:69:80:a8: b9:16:27:db:c7:1c:4c:73:5c:e4:7d:33:37:b4:a1:c2:25:7e: 2c:c2:b8:b8:0e:01:50:ac:0e:2c:72:24:56:5e:02:f9:0b:5d: 56:f5:ed:8f:10:2e:7e:2e:f8:02:6e:1c:72:c2:4f:ea:64:5e: 1c:9d:78:cf:8b:4b:a3:68:74:34:42:93:60:ad:42:62:91:17: fe:b4:90:b8:b6:e8:30:f6:40:33:20:79:1a:6a:c5:7d:b2:25: 36:8c:cd:0b:77:18:da:64:e6:d9:aa:bd:6b:fa:0d:59:c3:14: 58:e4:d7:5d:03:a5:b1:4c:02:50:e2:13:4f:2c:8f:b2:7d:5b: 67:cd:8c:8c:c7:65:30:2f:6f:a8:f5:2d:73:75:ae:a9:bb:e2: ab:fc:eb:a4:f9:b0:9a:59:06:6a:60:39:9c:79:e7:e5:09:82: 2d:f1:c1:0b:4b:29:ee:1a:3f:b3:72:3d:ab:a8:da:bb:02:a1: f9:27:a4:e6:6d:11:ea:a4:f8:cd:ae:ff:53:c1:af:ad:51:14: 18:65:77:d6:98:5e:6c:e3:8e:13:86:d3:87:77:cd:55:0b:c8: 8d:59:95:63:45:43:51:cf:8a:39:3d:39:7f:04:b6:73:69:61: 96:f9:0b:d6 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUEezOTdwdhlgWXnFygtXOXYL6+rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2 YjdmZTQ4NDAeFw0yMzA2MDYwOTE2NDBaFw0yNDA2MDQwOTIxNDBaMDMxMTAvBgNV BAMTKDNDM0E1OURCNTJCNkE0MTFCMjkwRTJEOUJEQUNBNjQwNTM3QzMyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUQPf9UrmpDgFj9nHW26P1zx19 dGgp8wS9lS29Jd5zWe4LEnrV1ICDM693z6H+ba1SyXGLEfn0s6/DkMA9GNDHO0i6 VwMNR2BFkj8Sh7qGOQ8vllphxxZdEMHj90OEoByqDFKcbHIrZBa6GafScMIKwaTl 3lxSvxH90G5Ynb3T0tlYfsTU45PfY9k1+Q+404GFXOfQJPfFACfhaKy/jRJF/XsU 5YkHHfgtvR5aDyWbtoZIOkyDWiFsBhOiCe13dHACKI518MKQ5SHKYTKXt8f3H4JS JhPMtp93LdoqcAw7OTCqqSNHJhJKPLr0LvL3qKutWAwHPFijgLK/WuV6bowHAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUPDpZ21K2pBGykOLZvaymQFN8MiUwHwYDVR0j BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0 XzVJUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzUyZTMxMzczMjJlMzMzNDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABawiMA0G CSqGSIb3DQEBCwUAA4IBAQBplsV0nWFwpIx6/O+q9AlpgKi5FifbxxxMc1zkfTM3 tKHCJX4swri4DgFQrA4sciRWXgL5C11W9e2PEC5+LvgCbhxywk/qZF4cnXjPi0uj aHQ0QpNgrUJikRf+tJC4tugw9kAzIHkaasV9siU2jM0LdxjaZObZqr1r+g1ZwxRY 5NddA6WxTAJQ4hNPLI+yfVtnzYyMx2UwL2+o9S1zda6pu+Kr/Ouk+bCaWQZqYDmc eeflCYIt8cELSynuGj+zcj2rqNq7AqH5J6TmbRHqpPjNrv9Twa+tURQYZXfWmF5s 444ThtOHd81VC8iNWZVjRUNRz4o5PTl/BLZzaWGW+QvW -----END CERTIFICATE-----Generated at Wed Dec 17 16:42:29 2025 by rpki-client