This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TWXs5hBGzKY-Avh99YwTkBoMYOo.roa File: TWXs5hBGzKY-Avh99YwTkBoMYOo.roa (raw, json) Hash identifier: DdQJ4vLLnUuXb6kb5wocMuWnNFJIN7HZwudpVJNKrNk= Subject key identifier: 4D:65:EC:E6:10:46:CC:A6:3E:02:F8:7D:F5:8C:13:90:1A:0C:60:EA Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACDA9FB1117703FD4FBCE061C26FD Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TWXs5hBGzKY-Avh99YwTkBoMYOo.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213200 IP address blocks: 109.176.202.0/24 maxlen: 24 217.144.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cd:a9:fb:11:17:70:3f:d4:fb:ce:06:1c:26:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d65ece61046cca63e02f87df58c13901a0c60ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:19:b7:67:cf:46:33:54:59:10:c1:25:c2: b8:88:a8:6d:d7:93:76:2d:d7:c3:7d:8d:72:59:26: c1:35:c3:ba:5b:fc:01:6d:18:f5:a8:a7:dc:84:6e: 84:83:90:3d:8e:86:38:37:93:36:aa:36:a5:29:8c: 5c:0e:b8:e3:99:d8:e5:2a:ad:a2:9d:be:90:d6:4d: 2f:c1:2c:eb:f5:08:c4:92:d8:0f:3f:62:ed:fc:d2: ee:8d:3b:74:20:8c:96:04:a4:39:44:0f:58:6c:22: 60:5a:03:31:b0:4f:2c:a6:22:ae:48:71:1d:e6:b1: f3:ca:2a:a2:21:0e:b1:01:cb:7b:38:04:b2:df:a5: f7:88:f7:7f:b7:80:2b:0d:57:f7:fd:d5:cd:a1:7a: 34:7e:04:e1:3e:97:62:de:fe:54:b4:79:a6:91:3a: 5e:2f:6e:a7:f1:8f:64:cb:ae:87:72:e9:4f:a7:86: 28:54:21:c3:de:03:dd:01:a2:fa:45:6f:c7:89:92: b9:7b:70:5a:37:63:58:26:10:91:59:03:f6:f3:e6: 18:30:c0:cf:e2:20:aa:bb:df:6c:2f:bd:46:93:d3: 59:87:ba:52:91:4c:35:e8:f6:22:59:d3:f1:5f:6b: 80:25:74:6c:d6:2b:11:35:a1:b2:ac:81:50:d9:97: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:EC:E6:10:46:CC:A6:3E:02:F8:7D:F5:8C:13:90:1A:0C:60:EA X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TWXs5hBGzKY-Avh99YwTkBoMYOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.202.0/24 217.144.154.0/24 Signature Algorithm: sha256WithRSAEncryption 57:95:62:83:15:5b:f2:5b:a3:11:96:93:08:d8:fd:81:8e:0f: c2:e5:81:20:06:60:61:78:6d:20:23:0c:52:78:d0:73:65:f2: a6:d5:9a:4e:8a:73:41:6e:fa:15:e1:a3:8c:3c:73:3f:54:69: 2b:60:85:46:7e:6c:7d:6c:47:5c:0f:8a:49:9e:40:27:be:83: 20:55:38:92:05:2e:5c:04:a3:e0:3c:2c:52:a6:73:16:bd:ca: 67:98:39:57:09:46:94:60:1b:20:88:8e:db:2e:3c:55:b4:1d: cd:33:2f:16:af:e8:95:bb:1d:ec:65:bc:79:10:83:7f:be:d3: c5:8e:d9:c4:3d:56:ee:92:db:bf:ea:0b:5b:bc:bd:1f:04:3e: 8e:16:00:08:ed:d3:d7:ab:69:c5:22:2b:ce:59:e6:a7:89:83: bc:fb:6b:02:26:d5:11:0c:72:4f:92:f9:8e:90:ff:32:59:e3: a0:fe:a2:87:94:32:92:a6:54:c1:f2:6f:29:4a:b3:d9:e6:a4: 67:95:af:b4:6b:b1:81:3e:d1:33:0f:fd:5b:db:fd:bc:fc:b3: ae:0f:76:e8:27:f2:00:50:56:23:bd:ed:ba:66:fb:a2:50:36: dd:86:c7:8d:a1:a8:ed:6c:8b:45:59:1b:fb:48:84:d5:a6:43: dc:7d:dc:f4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Ws2p+xEXcD/U+84GHCb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDY1ZWNlNjEwNDZjY2E2M2UwMmY4N2RmNThjMTM5MDFhMGM2MGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzcZt2fPRjNUWRDBJcK4iKht15N2 LdfDfY1yWSbBNcO6W/wBbRj1qKfchG6Eg5A9joY4N5M2qjalKYxcDrjjmdjlKq2i nb6Q1k0vwSzr9QjEktgPP2Lt/NLujTt0IIyWBKQ5RA9YbCJgWgMxsE8spiKuSHEd 5rHzyiqiIQ6xAct7OASy36X3iPd/t4ArDVf3/dXNoXo0fgThPpdi3v5UtHmmkTpe L26n8Y9ky66HculPp4YoVCHD3gPdAaL6RW/HiZK5e3BaN2NYJhCRWQP28+YYMMDP 4iCqu99sL71Gk9NZh7pSkUw16PYiWdPxX2uAJXRs1isRNaGyrIFQ2ZdHrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE1l7OYQRsymPgL4ffWME5AaDGDqMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVFdYczVoQkd6S1ktQXZoOTlZd1RrQm9NWU9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbbDKAwQA 2ZCaMA0GCSqGSIb3DQEBCwUAA4IBAQBXlWKDFVvyW6MRlpMI2P2Bjg/C5YEgBmBh eG0gIwxSeNBzZfKm1ZpOinNBbvoV4aOMPHM/VGkrYIVGfmx9bEdcD4pJnkAnvoMg VTiSBS5cBKPgPCxSpnMWvcpnmDlXCUaUYBsgiI7bLjxVtB3NMy8Wr+iVux3sZbx5 EIN/vtPFjtnEPVbuktu/6gtbvL0fBD6OFgAI7dPXq2nFIivOWeaniYO8+2sCJtUR DHJPkvmOkP8yWeOg/qKHlDKSplTB8m8pSrPZ5qRnla+0a7GBPtEzD/1b2/28/LOu D3boJ/IAUFYjve26ZvuiUDbdhseNoajtbItFWRv7SITVpkPcfdz0 -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:47 2026 by rpki-client