This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/TWNFCCObGkb6aNl1-64DYQpBWus.roa File: TWNFCCObGkb6aNl1-64DYQpBWus.roa (raw, json) Hash identifier: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY= Subject key identifier: 4D:63:45:08:23:9B:1A:46:FA:68:D9:75:FB:AE:03:61:0A:41:5A:EB Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908 Certificate serial: 019BB7D95C933EA1BFB6EF4CA9C37977D00E Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/TWNFCCObGkb6aNl1-64DYQpBWus.roa Signing time: Tue 13 Jan 2026 14:53:54 +0000 ROA not before: Tue 13 Jan 2026 14:53:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207084 IP address blocks: 5.42.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:d9:5c:93:3e:a1:bf:b6:ef:4c:a9:c3:79:77:d0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908 Validity Not Before: Jan 13 14:53:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d634508239b1a46fa68d975fbae03610a415aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:e6:b5:3f:9f:9f:b1:f0:e2:2f:82:f4:bd: 3d:f9:0a:60:71:8a:e2:88:8c:54:7f:d0:ad:6f:1b: 03:ca:9e:8a:50:0b:e5:bb:ec:d8:27:59:8c:14:3b: 27:6d:7c:eb:93:c1:8d:f3:97:6a:ae:12:39:94:1a: 99:4c:0e:32:dd:59:38:8f:c1:65:da:1d:0b:9b:ed: f0:07:64:c3:29:0b:db:48:38:ec:da:55:ae:18:c2: 0e:d7:bd:b3:d3:0e:25:f1:e6:f7:30:83:45:db:63: 2e:4f:12:48:b8:89:4b:78:9c:07:d5:35:39:4e:a0: 8c:6b:da:37:8f:b3:5a:e9:6f:be:06:c5:4d:8f:fe: 6d:90:72:61:ae:29:a7:71:03:93:8c:db:57:03:d7: 15:ca:61:cc:e7:4d:4b:50:73:c8:e2:de:60:65:89: c7:90:bd:45:80:ec:05:87:b6:8b:66:0b:6b:bb:d6: 4e:5b:57:ec:2b:59:d4:18:0b:01:5d:7d:4a:93:5e: 37:3e:a5:f5:49:70:0d:e3:3e:91:55:87:30:9c:be: f9:02:9b:b0:1c:a6:d2:d5:21:54:e4:a1:54:97:4b: b4:03:a4:c2:b6:2e:6d:a4:96:83:f4:df:d3:d4:7b: 39:b2:20:01:c3:42:8e:37:03:46:9d:2a:15:5c:74: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:63:45:08:23:9B:1A:46:FA:68:D9:75:FB:AE:03:61:0A:41:5A:EB X509v3 Authority Key Identifier: keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/TWNFCCObGkb6aNl1-64DYQpBWus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.151.0/24 Signature Algorithm: sha256WithRSAEncryption 46:cb:ff:2c:27:15:e3:8d:d0:a4:d0:fa:0d:09:a1:f6:df:a9: 57:49:7b:29:91:98:df:fc:35:58:26:7a:16:1f:c9:56:6c:c3: 7e:8d:20:7b:b6:6d:1a:4a:9f:eb:36:bb:ed:50:bc:5d:d9:07: e5:04:d0:5f:53:16:ed:71:8f:8a:2d:3c:f5:1f:c5:34:0a:4e: 26:14:11:d2:f5:35:56:fa:d3:6d:2f:2f:c1:f9:1e:bd:cd:f6: f8:b7:77:7b:9d:a9:45:a1:d4:53:a1:cf:2d:55:c2:84:2a:0b: 73:9e:14:ca:a6:96:7e:2f:6b:5e:31:c2:25:6c:44:5b:70:a3: c8:78:5e:45:e5:b5:6d:96:0d:7b:d6:4c:4d:8a:0e:84:ad:8e: 39:2e:7b:03:7e:c1:db:62:00:fa:87:0f:b5:5e:fd:d6:4a:94: ea:54:b4:87:3c:a2:33:48:9c:cd:84:29:36:94:fc:d5:11:8c: 35:91:b5:70:b9:1a:19:c1:ca:f5:a2:be:d5:ce:09:54:0f:74: c8:07:83:76:dd:da:57:bb:9c:05:88:fc:39:a2:58:ac:d6:56: 35:e2:b5:b7:c2:ff:31:64:17:5e:19:5d:e5:6f:1c:90:d4:be: 39:9f:cb:e8:df:38:c8:86:03:15:14:86:93:c9:fd:a5:a9:4a: 83:cb:5a:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu32VyTPqG/tu9MqcN5d9AOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4 M2Y5MDgwHhcNMjYwMTEzMTQ1MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDYzNDUwODIzOWIxYTQ2ZmE2OGQ5NzVmYmFlMDM2MTBhNDE1YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiPmtT+fn7Hw4i+C9L09+QpgcYri iIxUf9CtbxsDyp6KUAvlu+zYJ1mMFDsnbXzrk8GN85dqrhI5lBqZTA4y3Vk4j8Fl 2h0Lm+3wB2TDKQvbSDjs2lWuGMIO172z0w4l8eb3MINF22MuTxJIuIlLeJwH1TU5 TqCMa9o3j7Na6W++BsVNj/5tkHJhrimncQOTjNtXA9cVymHM501LUHPI4t5gZYnH kL1FgOwFh7aLZgtru9ZOW1fsK1nUGAsBXX1Kk143PqX1SXAN4z6RVYcwnL75Apuw HKbS1SFU5KFUl0u0A6TCti5tpJaD9N/T1Hs5siABw0KONwNGnSoVXHQmqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1jRQgjmxpG+mjZdfuuA2EKQVrrMB8GA1UdIwQY MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt NDMzZjVmYTRmOTAxLzEvVFdORkNDT2JHa2I2YU5sMS02NERZUXBCV3VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSqXMA0G CSqGSIb3DQEBCwUAA4IBAQBGy/8sJxXjjdCk0PoNCaH236lXSXspkZjf/DVYJnoW H8lWbMN+jSB7tm0aSp/rNrvtULxd2QflBNBfUxbtcY+KLTz1H8U0Ck4mFBHS9TVW +tNtLy/B+R69zfb4t3d7nalFodRToc8tVcKEKgtznhTKppZ+L2teMcIlbERbcKPI eF5F5bVtlg171kxNig6ErY45LnsDfsHbYgD6hw+1Xv3WSpTqVLSHPKIzSJzNhCk2 lPzVEYw1kbVwuRoZwcr1or7VzglUD3TIB4N23dpXu5wFiPw5olis1lY14rW3wv8x ZBdeGV3lbxyQ1L45n8vo3zjIhgMVFIaTyf2lqUqDy1r8 -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:17 2026 by rpki-client