This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33362e302f32332d3233203d3e2039313235.roa File: 352e3137322e33362e302f32332d3233203d3e2039313235.roa (raw, json) Hash identifier: Qys7L4Y8yDOwuu9Y1QILUJY5Tq0kJke8B0m/7aEzVv4= Subject key identifier: CA:1B:A7:D0:22:57:9D:DD:C0:24:D4:7D:F0:D7:A1:8B:C4:C6:0B:70 Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Certificate serial: 78D8C99F999148939D927F12F0A0C09E5C25901D Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33362e302f32332d3233203d3e2039313235.roa Signing time: Tue 06 Jun 2023 09:22:03 +0000 ROA not before: Tue 06 Jun 2023 09:17:03 +0000 ROA not after: Tue 04 Jun 2024 09:22:03 +0000 asID: 9125 IP address blocks: 5.172.36.0/23 maxlen: 23 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 78:d8:c9:9f:99:91:48:93:9d:92:7f:12:f0:a0:c0:9e:5c:25:90:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Validity Not Before: Jun 6 09:17:03 2023 GMT Not After : Jun 4 09:22:03 2024 GMT Subject: CN=CA1BA7D022579DDDC024D47DF0D7A18BC4C60B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a4:d5:12:1a:4d:4e:f7:52:ac:9a:fa:b0:19: 1c:1d:52:22:27:ab:9e:e9:6d:b5:d2:28:f1:eb:f2: 46:16:38:d5:01:5f:fa:b6:2b:69:69:a8:32:64:ba: f5:d7:85:ac:b1:bf:e4:6b:32:86:24:da:bb:cb:fb: 22:2c:35:d9:65:e8:c5:08:f3:5c:86:7c:53:3e:60: 0f:dd:b1:58:f7:42:06:dc:d2:81:b2:2f:30:a5:f2: 9d:cf:37:26:2d:73:f3:e1:30:e1:11:d5:bf:5b:64: 4e:8a:26:5b:3c:32:84:c2:28:64:e5:b2:01:ac:46: 1b:5c:76:49:f0:cb:2d:0f:b7:55:4c:11:fc:f6:0d: 84:55:75:f5:f5:2a:b4:56:ae:5b:b4:04:32:b6:e9: 53:f3:e2:9d:2b:37:47:62:1f:45:30:70:b7:07:3b: 57:a7:66:c5:42:a8:9e:5c:8f:78:32:ab:71:97:b0: 51:7d:83:be:6b:2d:83:0b:c7:94:50:fc:0e:8c:c8: 9a:86:8d:b3:b8:3c:94:89:0c:2f:df:54:36:59:45: 97:c1:98:3b:82:fb:e3:4c:e8:3b:fc:4d:89:55:79: f7:57:70:54:88:fb:bf:34:35:14:df:8e:d3:db:0d: 6d:4d:11:04:f5:65:e2:cc:13:33:94:a5:60:0d:76: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1B:A7:D0:22:57:9D:DD:C0:24:D4:7D:F0:D7:A1:8B:C4:C6:0B:70 X509v3 Authority Key Identifier: keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33362e302f32332d3233203d3e2039313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.36.0/23 Signature Algorithm: sha256WithRSAEncryption 80:93:ac:ef:24:05:bd:32:08:0b:72:e0:04:95:cd:92:ad:bb: 98:4e:f8:a7:a5:39:91:31:e6:99:09:10:8e:88:e2:5f:c8:ad: c4:0b:c6:06:7e:83:39:f0:45:9d:6d:3b:d7:d9:c5:ed:c6:de: e6:f1:f3:6b:de:ae:ae:8b:c5:59:52:35:3e:48:4b:70:e9:25: 5a:67:55:56:03:32:55:47:13:0a:78:36:90:eb:58:df:6e:b8: 88:2f:f3:37:63:e3:c2:4a:6b:89:70:9b:1d:f2:51:36:27:e0: 69:63:42:d5:aa:ab:61:59:d2:b6:8e:5e:4f:01:4e:68:c9:d7: 50:ef:bf:b4:79:5b:fd:12:83:29:1b:ec:92:e0:3f:30:9a:81: e7:e6:21:02:3f:48:a3:d3:b4:05:ac:1e:4b:95:9b:9a:32:fd: 14:53:e1:02:52:f3:bb:db:db:7b:70:f8:83:04:3c:0e:39:20: 07:42:f6:7e:58:36:85:2f:0a:d6:b1:b4:c9:8d:36:40:4b:02: 44:12:48:0c:5a:5c:2a:89:aa:99:88:9b:23:17:3c:5d:e0:88: e9:c9:76:bb:24:e7:70:7c:d5:f5:f6:df:5f:76:9d:17:8a:ac: 75:12:25:9f:eb:d9:dc:9e:cd:90:e2:39:2f:b8:8b:da:59:d5: 02:71:b9:89 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUeNjJn5mRSJOdkn8S8KDAnlwlkB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2 YjdmZTQ4NDAeFw0yMzA2MDYwOTE3MDNaFw0yNDA2MDQwOTIyMDNaMDMxMTAvBgNV BAMTKENBMUJBN0QwMjI1NzlERERDMDI0RDQ3REYwRDdBMThCQzRDNjBCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFpNUSGk1O91KsmvqwGRwdUiIn q57pbbXSKPHr8kYWONUBX/q2K2lpqDJkuvXXhayxv+RrMoYk2rvL+yIsNdll6MUI 81yGfFM+YA/dsVj3Qgbc0oGyLzCl8p3PNyYtc/PhMOER1b9bZE6KJls8MoTCKGTl sgGsRhtcdknwyy0Pt1VMEfz2DYRVdfX1KrRWrlu0BDK26VPz4p0rN0diH0UwcLcH O1enZsVCqJ5cj3gyq3GXsFF9g75rLYMLx5RQ/A6MyJqGjbO4PJSJDC/fVDZZRZfB mDuC++NM6Dv8TYlVefdXcFSI+780NRTfjtPbDW1NEQT1ZeLMEzOUpWANdr/BAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUyhun0CJXnd3AJNR98Nehi8TGC3AwHwYDVR0j BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0 XzVJUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzUyZTMxMzczMjJlMzMzNjJl MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBawkMA0G CSqGSIb3DQEBCwUAA4IBAQCAk6zvJAW9MggLcuAElc2SrbuYTvinpTmRMeaZCRCO iOJfyK3EC8YGfoM58EWdbTvX2cXtxt7m8fNr3q6ui8VZUjU+SEtw6SVaZ1VWAzJV RxMKeDaQ61jfbriIL/M3Y+PCSmuJcJsd8lE2J+BpY0LVqqthWdK2jl5PAU5oyddQ 77+0eVv9EoMpG+yS4D8wmoHn5iECP0ij07QFrB5LlZuaMv0UU+ECUvO729t7cPiD BDwOOSAHQvZ+WDaFLwrWsbTJjTZASwJEEkgMWlwqiaqZiJsjFzxd4IjpyXa7JOdw fNX19t9fdp0Xiqx1EiWf69ncns2Q4jkvuIvaWdUCcbmJ -----END CERTIFICATE-----Generated at Wed Dec 17 19:38:33 2025 by rpki-client