This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36382e302f32332d3233203d3e2039313235.roa File: 38392e32332e36382e302f32332d3233203d3e2039313235.roa (raw, json) Hash identifier: P0J+dH3g7IVvNZA964+NoCzyS73UNWw09gzYpo0nJ1c= Subject key identifier: 13:01:C5:70:22:60:38:F7:DE:44:E1:C6:A2:EC:6E:8B:B9:73:03:52 Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Certificate serial: 313B350C7FEAD4BE1B93B206251B689B5D8E56E4 Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36382e302f32332d3233203d3e2039313235.roa Signing time: Tue 06 Jun 2023 09:22:41 +0000 ROA not before: Tue 06 Jun 2023 09:17:41 +0000 ROA not after: Tue 04 Jun 2024 09:22:41 +0000 asID: 9125 IP address blocks: 89.23.68.0/23 maxlen: 23 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 31:3b:35:0c:7f:ea:d4:be:1b:93:b2:06:25:1b:68:9b:5d:8e:56:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484 Validity Not Before: Jun 6 09:17:41 2023 GMT Not After : Jun 4 09:22:41 2024 GMT Subject: CN=1301C570226038F7DE44E1C6A2EC6E8BB9730352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:b4:55:9a:e4:19:20:19:8b:44:7a:2f:41: 99:52:a3:8b:e6:e1:15:42:22:56:9d:23:d9:c6:7c: 1d:43:7b:5e:df:f5:da:b3:3d:04:d7:d6:93:cb:d5: e5:d7:77:82:b7:34:20:eb:2c:2d:89:db:91:35:94: 08:81:5b:0d:9f:6c:2b:14:6a:2b:8e:bd:5f:81:e5: 24:ad:24:dc:fd:3e:d2:04:17:1e:1c:83:a3:3f:08: af:a5:da:e6:47:6e:e2:4e:52:0e:b8:ba:b9:ab:34: ba:b8:63:9e:74:0a:8d:60:a4:b7:ab:1b:37:f6:15: 8a:0f:33:c5:b0:c8:d9:2a:3d:99:9b:29:5b:34:e8: bc:ee:f2:5e:38:ed:3f:2a:34:6a:cc:ca:dc:63:b0: ca:b8:f1:95:82:7b:5c:e3:ba:9b:96:a9:ad:b7:f6: 6e:6f:7c:a8:4e:70:02:e1:fb:ad:f6:7d:0f:a4:7a: 63:d0:23:aa:57:d3:8a:a1:fa:37:27:18:87:20:af: bf:37:d5:bb:c2:07:18:65:78:22:f5:e2:13:91:dd: 09:33:c3:1a:1d:50:e5:49:37:f7:f4:05:07:3c:76: 96:e7:0a:af:37:5a:cc:f2:a2:cc:a5:8c:ff:03:72: fc:4a:2f:c1:dd:c1:78:a3:97:78:29:0f:7b:4d:c2: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:C5:70:22:60:38:F7:DE:44:E1:C6:A2:EC:6E:8B:B9:73:03:52 X509v3 Authority Key Identifier: keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36382e302f32332d3233203d3e2039313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.68.0/23 Signature Algorithm: sha256WithRSAEncryption 91:e5:82:a1:e3:b1:23:61:48:20:b5:cc:11:7e:66:e4:b7:84: 0a:94:86:32:00:cc:f6:e9:69:fe:db:e5:6e:71:0e:c2:5e:cf: 3f:87:0e:b2:8a:39:53:f4:35:85:f6:10:93:c7:5a:96:37:9e: 12:94:a3:eb:66:05:42:be:00:b9:8a:e3:f7:a1:a9:be:cf:f6: 79:5f:fc:2a:52:fb:40:f5:b5:21:af:2e:59:32:a3:b7:a9:e6: 26:14:0a:75:ed:03:04:bf:fd:2e:2e:e0:1f:63:99:40:44:59: 59:a1:ae:18:25:ce:cc:ac:61:e5:87:bb:0f:b4:11:9c:20:12: 53:8d:48:31:50:b4:ea:2e:58:46:b4:2b:04:45:0f:8c:7c:b0: cc:ad:22:43:6f:7e:2a:ad:7b:91:f3:08:5d:7c:42:5d:b4:40: 1b:a2:04:cb:52:96:ad:5e:73:4b:37:07:17:20:d1:5d:51:58: 76:0f:2e:ae:9c:ed:15:a0:a4:1e:9e:5a:fb:fb:3d:81:25:38: b8:7d:c9:48:1d:17:db:9a:ed:dd:2d:22:77:69:52:7d:19:c5: 1a:42:32:10:16:43:3c:37:e8:00:36:a0:82:0c:b1:34:ba:1e: e8:3f:af:bf:ec:f5:5a:03:01:ba:fb:0e:88:70:36:a6:8d:8e: 03:92:37:7d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUMTs1DH/q1L4bk7IGJRtom12OVuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2 YjdmZTQ4NDAeFw0yMzA2MDYwOTE3NDFaFw0yNDA2MDQwOTIyNDFaMDMxMTAvBgNV BAMTKDEzMDFDNTcwMjI2MDM4RjdERTQ0RTFDNkEyRUM2RThCQjk3MzAzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkbRVmuQZIBmLRHovQZlSo4vm 4RVCIladI9nGfB1De17f9dqzPQTX1pPL1eXXd4K3NCDrLC2J25E1lAiBWw2fbCsU aiuOvV+B5SStJNz9PtIEFx4cg6M/CK+l2uZHbuJOUg64urmrNLq4Y550Co1gpLer Gzf2FYoPM8WwyNkqPZmbKVs06Lzu8l447T8qNGrMytxjsMq48ZWCe1zjupuWqa23 9m5vfKhOcALh+632fQ+kemPQI6pX04qh+jcnGIcgr7831bvCBxhleCL14hOR3Qkz wxodUOVJN/f0BQc8dpbnCq83WszyosyljP8DcvxKL8HdwXijl3gpD3tNwgrdAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUEwHFcCJgOPfeROHGouxui7lzA1IwHwYDVR0j BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0 XzVJUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzgzOTJlMzIzMzJlMzYzODJl MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWRdEMA0G CSqGSIb3DQEBCwUAA4IBAQCR5YKh47EjYUggtcwRfmbkt4QKlIYyAMz26Wn+2+Vu cQ7CXs8/hw6yijlT9DWF9hCTx1qWN54SlKPrZgVCvgC5iuP3oam+z/Z5X/wqUvtA 9bUhry5ZMqO3qeYmFAp17QMEv/0uLuAfY5lARFlZoa4YJc7MrGHlh7sPtBGcIBJT jUgxULTqLlhGtCsERQ+MfLDMrSJDb34qrXuR8whdfEJdtEAbogTLUpatXnNLNwcX INFdUVh2Dy6unO0VoKQenlr7+z2BJTi4fclIHRfbmu3dLSJ3aVJ9GcUaQjIQFkM8 N+gANqCCDLE0uh7oP6+/7PVaAwG6+w6IcDamjY4Dkjd9 -----END CERTIFICATE-----Generated at Wed Dec 17 19:24:01 2025 by rpki-client