This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/tw9KOMExOeSDBdFskgfTK6sa4AU.roa
File: tw9KOMExOeSDBdFskgfTK6sa4AU.roa (raw, json)
Hash identifier: dKKeZeFLB80jdbP8ogbRHnu5mvq79sWDL34NWiCVUeo=
Subject key identifier: B7:0F:4A:38:C1:31:39:E4:83:05:D1:6C:92:07:D3:2B:AB:1A:E0:05
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 019B7BA51AFE1645587CEE00BA0DDC3BEB32
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/tw9KOMExOeSDBdFskgfTK6sa4AU.roa
Signing time: Thu 01 Jan 2026 22:19:36 +0000
ROA not before: Thu 01 Jan 2026 22:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203618
IP address blocks: 185.92.230.0/23 maxlen: 23
185.92.230.0/24 maxlen: 24
185.92.231.0/24 maxlen: 24
194.179.132.0/23 maxlen: 23
194.179.132.0/24 maxlen: 24
194.179.133.0/24 maxlen: 24
202.92.212.0/24 maxlen: 24
2a03:8d60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:1a:fe:16:45:58:7c:ee:00:ba:0d:dc:3b:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Jan 1 22:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b70f4a38c13139e48305d16c9207d32bab1ae005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:39:23:4f:94:ac:00:41:eb:39:03:78:30:
ee:ab:81:01:1d:0c:6e:87:54:71:4a:8d:11:b6:d2:
6e:2c:b2:ff:f2:52:11:1d:a6:55:0a:69:59:c9:cb:
bd:68:2d:ca:6a:6b:12:b1:71:83:f6:e3:ec:61:c7:
86:08:5d:fd:62:9d:b4:af:94:50:2f:58:ea:0a:ae:
52:77:9b:ee:d8:33:f1:15:d5:0c:7f:79:d5:43:c8:
fc:df:9c:22:81:62:5e:fb:5b:a6:88:82:f8:03:f4:
3e:0e:b9:33:53:c7:22:38:85:fd:5f:d4:93:13:ad:
58:4d:c7:f3:30:61:26:b5:7a:7c:e6:b2:8b:1e:af:
d7:23:9f:22:5d:0b:f0:1e:10:e7:4f:57:15:e9:9d:
91:5d:22:b1:18:81:87:61:69:35:d3:f0:f0:7a:9d:
de:35:7a:2e:3c:76:e8:ab:38:a9:cc:70:2a:ab:88:
a8:6b:43:0b:8a:a1:ee:55:36:34:a4:5f:44:6d:9d:
12:c1:32:1d:9f:d9:8c:11:57:fc:66:ea:b7:f5:50:
64:49:81:e1:99:2c:d5:46:e1:1f:c0:42:5d:eb:e4:
9d:c2:02:b3:2d:ee:4e:aa:87:2e:75:5c:fb:75:93:
75:f5:3c:d3:fa:11:a7:08:ec:aa:5b:45:40:c0:c5:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0F:4A:38:C1:31:39:E4:83:05:D1:6C:92:07:D3:2B:AB:1A:E0:05
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/tw9KOMExOeSDBdFskgfTK6sa4AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.230.0/23
194.179.132.0/23
202.92.212.0/24
IPv6:
2a03:8d60::/48
Signature Algorithm: sha256WithRSAEncryption
24:a1:5f:0b:7b:59:f4:b6:78:4e:7d:dd:3a:66:aa:39:b2:87:
cb:66:a5:30:86:19:6f:30:96:db:fe:d8:d0:73:be:b2:6c:26:
cc:e2:eb:4c:4e:8a:39:6f:8c:f4:ce:73:a9:e9:2d:96:f5:96:
e2:00:03:3d:49:a1:9c:e4:c5:e6:eb:94:df:54:b8:52:36:ea:
cd:e6:85:6c:aa:42:86:4a:ba:00:82:e7:37:8e:5f:96:3e:a7:
02:48:c1:54:4e:51:7f:d3:6a:0b:46:a3:e6:87:21:e5:3c:b8:
7c:6a:c9:e1:eb:4e:86:29:90:91:91:8c:da:65:7d:d5:cf:49:
e9:9c:f6:b1:12:d5:47:7e:98:55:b4:ea:7d:2d:c6:13:68:32:
32:72:40:a0:fb:33:35:6a:02:d4:3b:a2:08:e2:ed:5d:4e:d9:
e4:2f:d8:2c:a3:8b:06:d1:21:bf:6b:f7:5b:0a:cf:0c:0a:ec:
9c:fd:9f:fd:81:91:44:72:cd:6c:95:57:0a:a1:bd:7f:3f:07:
27:1a:8a:08:cc:cd:f3:17:b6:d6:17:1b:f5:eb:4a:24:10:dc:
b0:47:01:cc:3f:8f:71:7d:e2:81:e3:ce:b6:3d:32:28:bc:dd:
4e:6e:10:e0:5a:9e:88:99:f3:fd:17:b9:13:8f:20:c0:46:fe:
be:28:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:02:20 2026 by rpki-client