This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa File: TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa (raw, json) Hash identifier: 7Vooj87eGlBm2XvcSGagn83xkeJCxQE8AEsJBuPCxmA= Subject key identifier: 4D:65:B1:4F:E9:C2:92:6B:4F:1E:76:06:9F:A7:56:76:15:0C:CC:63 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B7910189FE449648218A88A477972C880 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48715 IP address blocks: 78.110.120.0/22 maxlen: 24 80.71.149.0/24 maxlen: 24 88.135.36.0/22 maxlen: 22 88.135.36.0/24 maxlen: 24 88.135.37.0/24 maxlen: 24 88.135.38.0/24 maxlen: 24 88.135.39.0/24 maxlen: 24 91.236.168.0/23 maxlen: 23 91.236.168.0/24 maxlen: 24 91.236.169.0/24 maxlen: 24 91.247.171.0/24 maxlen: 24 130.193.77.0/24 maxlen: 24 152.89.44.0/22 maxlen: 22 152.89.44.0/24 maxlen: 24 152.89.45.0/24 maxlen: 24 152.89.46.0/24 maxlen: 24 152.89.47.0/24 maxlen: 24 185.18.212.0/22 maxlen: 22 185.18.212.0/24 maxlen: 24 185.18.213.0/24 maxlen: 24 185.18.214.0/24 maxlen: 24 185.18.215.0/24 maxlen: 24 185.36.228.0/24 maxlen: 24 185.51.200.0/22 maxlen: 22 185.51.200.0/24 maxlen: 24 185.51.201.0/24 maxlen: 24 185.51.202.0/24 maxlen: 24 185.51.203.0/24 maxlen: 24 185.58.240.0/22 maxlen: 24 185.112.149.0/24 maxlen: 24 185.112.150.0/23 maxlen: 23 185.112.150.0/24 maxlen: 24 185.112.151.0/24 maxlen: 24 185.121.130.0/23 maxlen: 23 185.121.130.0/24 maxlen: 24 185.121.131.0/24 maxlen: 24 185.128.136.0/22 maxlen: 24 185.128.136.0/24 maxlen: 24 185.128.137.0/24 maxlen: 24 185.128.138.0/24 maxlen: 24 185.128.139.0/24 maxlen: 24 185.141.104.0/22 maxlen: 22 185.141.104.0/24 maxlen: 24 185.141.105.0/24 maxlen: 24 185.141.106.0/24 maxlen: 24 185.141.107.0/24 maxlen: 24 185.141.132.0/22 maxlen: 22 185.141.132.0/24 maxlen: 24 185.141.133.0/24 maxlen: 24 185.141.134.0/24 maxlen: 24 185.141.135.0/24 maxlen: 24 185.170.8.0/24 maxlen: 24 185.173.129.0/24 maxlen: 24 185.173.130.0/24 maxlen: 24 185.206.231.0/24 maxlen: 24 185.213.195.0/24 maxlen: 24 185.234.14.0/24 maxlen: 24 185.235.245.0/24 maxlen: 24 185.252.200.0/24 maxlen: 24 188.209.152.0/23 maxlen: 23 188.209.152.0/24 maxlen: 24 188.209.153.0/24 maxlen: 24 195.110.38.0/23 maxlen: 23 195.211.44.0/22 maxlen: 22 195.211.44.0/24 maxlen: 24 195.211.45.0/24 maxlen: 24 195.211.46.0/24 maxlen: 24 195.211.47.0/24 maxlen: 24 213.109.199.0/24 maxlen: 24 2a0a:5e80::/29 maxlen: 29 2a0a:5e80::/48 maxlen: 48 2a0a:5e80::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:18:9f:e4:49:64:82:18:a8:8a:47:79:72:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d65b14fe9c2926b4f1e76069fa75676150ccc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:c5:9e:7f:76:ac:d9:5b:fc:ea:b9:a7:cb: a2:7b:b3:1c:24:1e:31:e5:3e:22:3b:28:1f:42:38: 14:ad:2b:a3:ac:f9:3a:4f:f0:00:a2:66:69:05:0e: e3:99:2d:34:5d:62:96:79:ef:84:41:b1:5b:79:19: e0:5b:44:f7:5f:62:4b:55:82:4c:0a:20:76:6f:02: 21:31:b2:40:b7:3c:af:99:46:f5:76:e6:ed:fc:99: 60:55:9b:2e:16:41:92:da:cd:ef:df:cd:27:23:10: 95:52:1b:9b:5b:fa:36:37:20:34:f5:3b:74:80:62: 7d:bb:08:7a:2d:22:6d:a2:46:c8:32:8b:dd:fb:7a: e0:c5:ba:cd:2b:77:b4:c7:fc:db:42:e2:53:5a:86: 86:3c:c1:b1:c3:b3:fe:81:fa:cd:a8:7a:d3:51:be: ee:a6:75:8e:aa:85:8b:2c:2f:ad:2e:b8:98:a0:30: 83:81:88:77:3b:21:8c:a8:5b:3d:bf:b2:f1:fd:48: e6:2a:6a:09:fa:d2:f4:23:1b:7b:cb:62:0d:60:b5: c2:97:8a:ac:68:1d:d0:3f:db:9e:c0:30:41:70:ee: bf:91:09:9b:52:d1:ec:00:39:b7:86:27:0e:cb:dd: 1c:e1:76:57:c6:b5:6b:50:2e:81:28:df:eb:f9:da: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:B1:4F:E9:C2:92:6B:4F:1E:76:06:9F:A7:56:76:15:0C:CC:63 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.120.0/22 80.71.149.0/24 88.135.36.0/22 91.236.168.0/23 91.247.171.0/24 130.193.77.0/24 152.89.44.0/22 185.18.212.0/22 185.36.228.0/24 185.51.200.0/22 185.58.240.0/22 185.112.149.0-185.112.151.255 185.121.130.0/23 185.128.136.0/22 185.141.104.0/22 185.141.132.0/22 185.170.8.0/24 185.173.129.0-185.173.130.255 185.206.231.0/24 185.213.195.0/24 185.234.14.0/24 185.235.245.0/24 185.252.200.0/24 188.209.152.0/23 195.110.38.0/23 195.211.44.0/22 213.109.199.0/24 IPv6: 2a0a:5e80::/29 Signature Algorithm: sha256WithRSAEncryption 71:e8:f3:8e:1e:e8:83:fb:34:ae:ed:23:98:e2:0f:b0:06:89: b3:1c:f1:f6:ee:dd:be:1d:92:3b:68:e1:7c:b9:ec:b5:ee:15: bd:39:c9:7c:fa:7c:e2:15:86:30:d8:ac:77:c4:7f:68:e5:b6: da:15:c9:c4:f1:52:0d:03:9f:1c:d9:29:14:ae:0d:fe:55:20: 5e:4a:f7:8e:55:78:03:d8:f1:28:00:b8:4a:32:a2:b7:33:82: 34:70:8c:92:ae:ce:7f:37:26:a2:01:a1:10:fd:2c:3b:4b:60: af:28:da:f9:3f:cd:47:a2:2e:f9:f5:08:1e:df:45:1d:c0:71: 85:95:03:97:3e:6d:f1:cd:d3:09:cb:eb:0f:07:d6:e3:ef:bb: 36:21:12:60:f4:4c:6f:8d:11:a7:1c:7b:1a:ab:a5:c7:c7:4b: 11:dd:c1:24:95:23:6d:69:f1:3b:96:03:1d:ad:0a:32:fe:92: b5:78:d9:d6:a4:d2:96:23:57:42:f3:1d:6d:52:ae:e9:51:ca: b5:ab:9b:f3:9b:e0:f1:99:5d:ae:f4:bc:98:70:4e:12:70:ff: be:7e:0a:a7:9e:a1:6c:fc:73:2e:d7:cf:ed:52:dc:58:1e:28: 41:e6:ce:74:7c:fd:98:d6:64:7c:23:57:38:f4:b8:ce:8d:46: c2:0a:5b:cc -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt5EBif5Elkghioikd5csiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDY1YjE0ZmU5YzI5MjZiNGYxZTc2MDY5ZmE3NTY3NjE1MGNjYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVPFnn92rNlb/Oq5p8uie7McJB4x 5T4iOygfQjgUrSujrPk6T/AAomZpBQ7jmS00XWKWee+EQbFbeRngW0T3X2JLVYJM CiB2bwIhMbJAtzyvmUb1dubt/JlgVZsuFkGS2s3v380nIxCVUhubW/o2NyA09Tt0 gGJ9uwh6LSJtokbIMovd+3rgxbrNK3e0x/zbQuJTWoaGPMGxw7P+gfrNqHrTUb7u pnWOqoWLLC+tLriYoDCDgYh3OyGMqFs9v7Lx/UjmKmoJ+tL0Ixt7y2INYLXCl4qs aB3QP9uewDBBcO6/kQmbUtHsADm3hicOy90c4XZXxrVrUC6BKN/r+doNswIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFE1lsU/pwpJrTx52Bp+nVnYVDMxjMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvVFdXeFQtbkNrbXRQSG5ZR242ZFdkaFVNekdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCBuQQCAAEwgbIDBAJO bngDBABQR5UDBAJYhyQDBAFb7KgDBABb96sDBACCwU0DBAKYWSwDBAK5EtQDBAC5 JOQDBAK5M8gDBAK5OvAwDAMEALlwlQMEA7lwkAMEAbl5ggMEArmAiAMEArmNaAME ArmNhAMEALmqCDAMAwQAua2BAwQAua2CAwQAuc7nAwQAudXDAwQAueoOAwQAuev1 AwQAufzIAwQBvNGYAwQBw24mAwQCw9MsAwQA1W3HMA0EAgACMAcDBQMqCl6AMA0G CSqGSIb3DQEBCwUAA4IBAQBx6POOHuiD+zSu7SOY4g+wBomzHPH27t2+HZI7aOF8 uey17hW9Ocl8+nziFYYw2Kx3xH9o5bbaFcnE8VINA58c2SkUrg3+VSBeSveOVXgD 2PEoALhKMqK3M4I0cIySrs5/NyaiAaEQ/Sw7S2CvKNr5P81Hoi759Qge30UdwHGF lQOXPm3xzdMJy+sPB9bj77s2IRJg9ExvjRGnHHsaq6XHx0sR3cEklSNtafE7lgMd rQoy/pK1eNnWpNKWI1dC8x1tUq7pUcq1q5vzm+DxmV2u9LyYcE4ScP++fgqnnqFs /HMu18/tUtxYHihB5s50fP2Y1mR8I1c49LjOjUbCClvM -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:02 2026 by rpki-client