This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/3tnysXSWwHO1pVPMNTsKAFmbFYA.roa File: 3tnysXSWwHO1pVPMNTsKAFmbFYA.roa (raw, json) Hash identifier: M1MYIv2ti+oy8ugPTOoaH1dKP2qImhnFM+vIoNAp6YU= Subject key identifier: DE:D9:F2:B1:74:96:C0:73:B5:A5:53:CC:35:3B:0A:00:59:9B:15:80 Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Certificate serial: 019B089C259A32E39A0AE3D9976157D5D9D9 Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/3tnysXSWwHO1pVPMNTsKAFmbFYA.roa Signing time: Wed 10 Dec 2025 14:13:29 +0000 ROA not before: Wed 10 Dec 2025 14:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15404 IP address blocks: 193.29.144.0/20 maxlen: 20 193.29.146.0/23 maxlen: 23 193.29.150.0/23 maxlen: 23 193.29.152.0/22 maxlen: 22 193.29.156.0/23 maxlen: 23 193.29.159.0/24 maxlen: 24 194.99.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:9c:25:9a:32:e3:9a:0a:e3:d9:97:61:57:d5:d9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Validity Not Before: Dec 10 14:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ded9f2b17496c073b5a553cc353b0a00599b1580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:13:60:02:5b:a4:75:63:ed:58:85:67:84: 0f:bb:20:45:96:0c:39:34:8f:06:6c:df:e6:a4:e6: 87:41:6e:a1:88:19:5e:f4:9d:fa:b9:43:61:40:aa: fb:fe:fb:75:d3:8c:4e:2b:6f:8f:9a:70:a8:47:61: e5:f0:79:21:fc:59:56:04:ce:76:f4:0c:7a:f3:f9: 41:9b:a7:57:75:31:32:7c:48:04:aa:ef:73:a6:1e: 8c:94:f8:ce:03:68:e1:4f:c6:39:8e:79:e3:ea:26: be:81:e3:71:89:bc:c6:ae:6c:f0:62:9b:ed:d6:52: 6d:a4:3a:5b:13:51:c3:14:f6:15:93:ce:87:53:60: 5e:bc:8c:53:e3:70:28:fc:7d:9c:33:0e:bc:75:9c: a3:83:e6:0d:d0:37:ad:e3:7d:77:5c:6c:6f:65:6e: 76:cd:63:e5:9c:ed:23:dc:27:33:60:b8:f1:18:8e: 60:87:7d:d1:4b:f8:6b:1e:5d:19:be:6c:93:7f:4a: 80:01:c8:a2:38:30:d6:19:16:b8:ef:fc:53:b1:96: 91:c0:1d:6c:9b:5c:47:0c:fb:42:99:fe:0e:cb:cf: 49:84:03:9e:94:26:4b:33:ca:87:bc:32:30:fa:22: ed:c7:12:b1:61:95:66:4f:d7:d3:00:38:77:42:f6: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D9:F2:B1:74:96:C0:73:B5:A5:53:CC:35:3B:0A:00:59:9B:15:80 X509v3 Authority Key Identifier: keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/3tnysXSWwHO1pVPMNTsKAFmbFYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.144.0/20 194.99.120.0/21 Signature Algorithm: sha256WithRSAEncryption bf:fa:65:2a:c0:ae:de:be:60:9b:e8:e5:28:a1:47:08:28:19: ce:37:28:fd:99:92:a8:6d:48:93:01:eb:91:26:95:e2:e0:fc: 7a:23:3e:db:a2:69:30:54:73:93:cb:c9:e1:37:2c:7a:83:2c: 3b:82:c6:6d:5b:71:f1:0d:c8:4e:45:87:c3:81:c2:25:30:c3: 4d:02:2f:23:67:ee:de:a4:ed:97:42:5e:da:02:29:9e:35:7a: bb:a6:c7:69:0f:45:71:15:24:34:f9:db:38:e5:68:78:78:37: 4d:bb:f3:91:0d:34:b3:91:08:39:e2:15:56:90:c4:2c:6e:24: a8:81:46:48:6c:22:e8:58:69:27:6e:cc:4e:31:e4:4d:7a:23: 21:40:f7:89:88:6a:ee:cf:47:d9:22:03:2f:27:cc:e1:35:77: 1c:3d:39:07:98:ad:45:1a:a6:52:e2:ff:e5:da:88:f1:74:73: df:12:36:19:9a:93:9c:3e:49:d0:7e:ec:a6:38:0f:8e:fe:77: fe:0c:13:0f:3b:fb:38:a4:1b:a3:87:cb:9c:c2:cb:12:c4:39: 6b:e9:b7:38:b2:b9:ed:c9:74:41:da:01:6a:9d:a4:12:21:50: bd:c0:ca:f8:f8:46:e9:99:71:90:21:67:81:dd:5f:84:6e:1e: cb:fe:57:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsInCWaMuOaCuPZl2FX1dnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj NDAxZWQwHhcNMjUxMjEwMTQxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQ5ZjJiMTc0OTZjMDczYjVhNTUzY2MzNTNiMGEwMDU5OWIxNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub0TYAJbpHVj7ViFZ4QPuyBFlgw5 NI8GbN/mpOaHQW6hiBle9J36uUNhQKr7/vt104xOK2+PmnCoR2Hl8Hkh/FlWBM52 9Ax68/lBm6dXdTEyfEgEqu9zph6MlPjOA2jhT8Y5jnnj6ia+geNxibzGrmzwYpvt 1lJtpDpbE1HDFPYVk86HU2BevIxT43Ao/H2cMw68dZyjg+YN0Det4313XGxvZW52 zWPlnO0j3CczYLjxGI5gh33RS/hrHl0ZvmyTf0qAAciiODDWGRa47/xTsZaRwB1s m1xHDPtCmf4Oy89JhAOelCZLM8qHvDIw+iLtxxKxYZVmT9fTADh3QvYpyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN7Z8rF0lsBztaVTzDU7CgBZmxWAMB8GA1UdIwQY MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt ZGRiMGIxNDhlNDZiLzEvM3RueXNYU1d3SE8xcFZQTU5Uc0tBRm1iRllBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEwR2QAwQD wmN4MA0GCSqGSIb3DQEBCwUAA4IBAQC/+mUqwK7evmCb6OUooUcIKBnONyj9mZKo bUiTAeuRJpXi4Px6Iz7bomkwVHOTy8nhNyx6gyw7gsZtW3HxDchORYfDgcIlMMNN Ai8jZ+7epO2XQl7aAimeNXq7psdpD0VxFSQ0+ds45Wh4eDdNu/ORDTSzkQg54hVW kMQsbiSogUZIbCLoWGknbsxOMeRNeiMhQPeJiGruz0fZIgMvJ8zhNXccPTkHmK1F GqZS4v/l2ojxdHPfEjYZmpOcPknQfuymOA+O/nf+DBMPO/s4pBujh8ucwssSxDlr 6bc4srntyXRB2gFqnaQSIVC9wMr4+EbpmXGQIWeB3V+Ebh7L/ldg -----END CERTIFICATE-----Generated at Sat Dec 20 12:05:32 2025 by rpki-client