This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/rzRkpabW392oagemieZb-ufJNvQ.roa File: rzRkpabW392oagemieZb-ufJNvQ.roa (raw, json) Hash identifier: dkk52+Fs1zTx06BhMBDVpZtpxNa2IwHtUDyCEXA1hng= Subject key identifier: AF:34:64:A5:A6:D6:DF:DD:A8:6A:07:A6:89:E6:5B:FA:E7:C9:36:F4 Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Certificate serial: 019AEE445F4F4EE8BC7C502D6CC299D8E757 Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/rzRkpabW392oagemieZb-ufJNvQ.roa Signing time: Fri 05 Dec 2025 11:27:29 +0000 ROA not before: Fri 05 Dec 2025 11:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15404 IP address blocks: 193.29.144.0/20 maxlen: 20 193.29.150.0/23 maxlen: 23 193.29.152.0/22 maxlen: 22 193.29.156.0/23 maxlen: 23 193.29.159.0/24 maxlen: 24 194.99.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:44:5f:4f:4e:e8:bc:7c:50:2d:6c:c2:99:d8:e7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Validity Not Before: Dec 5 11:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=af3464a5a6d6dfdda86a07a689e65bfae7c936f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:22:e2:69:0b:e6:d8:49:ba:d2:3e:52:20: 9b:69:32:ef:c2:d8:30:57:c5:cf:80:c5:e6:0f:96: 91:86:99:24:62:11:59:78:9a:f2:1f:ff:6d:06:42: 2c:44:a0:17:a1:a0:a3:88:fd:38:65:57:13:a0:4e: df:56:03:71:46:01:31:80:50:74:10:76:10:61:04: b9:0e:3f:bf:9e:e0:a1:d6:10:d7:12:9a:1e:f9:59: fe:11:a7:3d:b0:fd:5a:b1:68:98:eb:d1:b1:ff:df: 0a:fc:d8:1f:66:2d:89:c1:39:bd:59:77:80:3f:e7: 8a:10:ec:7e:8b:46:5a:41:4f:e9:79:16:bc:85:51: 32:6d:9a:38:cf:ae:58:3e:c1:47:41:55:ce:a5:f1: cd:d3:cd:5a:39:3b:9f:cc:16:d1:b0:f5:a1:ef:ac: d7:15:62:e3:28:77:17:b3:58:e0:66:bd:74:4c:52: d5:a1:91:84:03:81:4b:dd:2e:70:24:c3:76:82:73: b8:46:05:41:66:21:0b:2a:64:d6:72:ba:d1:66:4b: f3:de:a1:3d:58:60:b8:21:64:fe:aa:58:2a:3a:67: ba:9a:17:4d:76:99:f3:05:5d:a8:d8:f1:36:54:a5: b7:a6:72:a0:74:e2:5b:7a:2f:53:df:75:5c:5e:64: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:64:A5:A6:D6:DF:DD:A8:6A:07:A6:89:E6:5B:FA:E7:C9:36:F4 X509v3 Authority Key Identifier: keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/rzRkpabW392oagemieZb-ufJNvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.144.0/20 194.99.120.0/21 Signature Algorithm: sha256WithRSAEncryption 38:ec:d6:99:db:67:36:8c:e2:02:04:e8:2f:10:e1:d3:70:3f: 36:51:25:b1:ee:2e:73:41:28:e0:de:2c:7d:30:b3:25:86:b4: de:93:ea:7a:3a:bb:13:a6:60:14:74:00:b6:bb:2e:f0:af:13: 59:3a:94:6d:27:cd:89:01:c7:cd:d2:fe:33:1b:ff:55:2a:ca: ee:35:78:92:d9:e1:7f:9f:7b:b1:7b:a4:bb:a0:f4:25:25:16: 00:99:51:6e:1a:13:22:24:14:33:9a:72:ff:96:57:e4:f6:1c: 9a:da:6a:6a:33:65:9a:13:e5:6e:1a:f5:70:ce:06:54:6c:9d: 10:16:ac:9f:a9:5a:31:b8:b0:f4:43:fb:c5:eb:64:35:4b:3c: c6:6d:4f:ea:d3:19:f3:a2:bb:6f:55:cf:85:79:5c:35:f7:57: 16:80:46:6d:4b:84:43:69:59:cf:a1:8c:c4:94:a9:f2:51:c3: bb:79:cd:1e:73:49:2b:00:9d:ff:e9:1a:32:ad:ea:28:4b:ef: 03:f4:f1:c2:51:d7:30:f0:4c:ce:32:bc:9c:6b:10:83:c0:f6: 23:15:f8:f0:8b:d3:3c:77:2e:a7:8e:c9:de:d7:9a:dd:b8:da: 2d:4c:ed:6b:5d:f5:5d:32:91:e9:29:2c:11:51:88:3e:ca:f8: 56:ee:27:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZruRF9PTui8fFAtbMKZ2OdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj NDAxZWQwHhcNMjUxMjA1MTEyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjM0NjRhNWE2ZDZkZmRkYTg2YTA3YTY4OWU2NWJmYWU3YzkzNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WQi4mkL5thJutI+UiCbaTLvwtgw V8XPgMXmD5aRhpkkYhFZeJryH/9tBkIsRKAXoaCjiP04ZVcToE7fVgNxRgExgFB0 EHYQYQS5Dj+/nuCh1hDXEpoe+Vn+Eac9sP1asWiY69Gx/98K/NgfZi2JwTm9WXeA P+eKEOx+i0ZaQU/peRa8hVEybZo4z65YPsFHQVXOpfHN081aOTufzBbRsPWh76zX FWLjKHcXs1jgZr10TFLVoZGEA4FL3S5wJMN2gnO4RgVBZiELKmTWcrrRZkvz3qE9 WGC4IWT+qlgqOme6mhdNdpnzBV2o2PE2VKW3pnKgdOJbei9T33VcXmRtrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK80ZKWm1t/dqGoHponmW/rnyTb0MB8GA1UdIwQY MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt ZGRiMGIxNDhlNDZiLzEvcnpSa3BhYlczOTJvYWdlbWllWmItdWZKTnZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEwR2QAwQD wmN4MA0GCSqGSIb3DQEBCwUAA4IBAQA47NaZ22c2jOICBOgvEOHTcD82USWx7i5z QSjg3ix9MLMlhrTek+p6OrsTpmAUdAC2uy7wrxNZOpRtJ82JAcfN0v4zG/9VKsru NXiS2eF/n3uxe6S7oPQlJRYAmVFuGhMiJBQzmnL/llfk9hya2mpqM2WaE+VuGvVw zgZUbJ0QFqyfqVoxuLD0Q/vF62Q1SzzGbU/q0xnzortvVc+FeVw191cWgEZtS4RD aVnPoYzElKnyUcO7ec0ec0krAJ3/6RoyreooS+8D9PHCUdcw8EzOMrycaxCDwPYj Ffjwi9M8dy6njsne15rduNotTO1rXfVdMpHpKSwRUYg+yvhW7idq -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:46 2025 by rpki-client