This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TW90mnms21o_iQeC0qku3QpPNMk.roa File: TW90mnms21o_iQeC0qku3QpPNMk.roa (raw, json) Hash identifier: YeS8BlggUmGQNWTQTf/FnMbNPhkRIfLuRnm9Z1/bRJk= Subject key identifier: 4D:6F:74:9A:79:AC:DB:5A:3F:89:07:82:D2:A9:2E:DD:0A:4F:34:C9 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130784EDA6FB7C7B270E1332E73B2F Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TW90mnms21o_iQeC0qku3QpPNMk.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214915 IP address blocks: 5.175.180.0/24 maxlen: 24 77.90.16.0/24 maxlen: 24 77.90.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:07:84:ed:a6:fb:7c:7b:27:0e:13:32:e7:3b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d6f749a79acdb5a3f890782d2a92edd0a4f34c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:52:e1:b4:27:fd:00:bd:c4:65:39:d0:d3: 99:a7:3a:60:23:5a:24:97:52:18:b5:b7:f7:e7:eb: 6f:ab:23:66:88:d7:11:a4:cd:df:8d:7f:7e:db:9d: af:40:e6:90:e9:cf:fc:c7:89:72:77:41:61:11:61: 1d:c8:6a:e1:03:ff:5d:22:86:7f:e3:83:99:ac:5c: a2:3e:3a:8a:54:4d:5a:2d:a3:dd:e8:d7:9b:fb:10: 7a:70:0b:85:f5:bc:0b:01:ce:f9:08:d2:bf:7d:8c: 15:56:f1:d5:58:db:e1:99:a0:fe:39:c5:94:c4:fe: ce:fd:32:47:4f:5f:f9:f7:93:30:65:b2:a6:16:cd: ac:15:72:ee:f6:9c:f2:1f:80:5c:46:2a:89:07:99: 3b:e6:1c:9f:b2:ce:0e:f6:d8:c1:9a:a5:9f:57:4e: 60:30:45:3a:bc:30:b8:51:00:e2:f0:ce:22:a8:97: 86:95:67:ea:f2:c3:10:a8:f0:3f:d6:63:b5:52:81: aa:ab:ff:51:65:22:9c:b3:c6:bd:00:84:12:7e:63: ce:65:e6:48:1c:b8:08:a7:b5:a8:e1:2d:4e:19:8f: 41:07:ec:21:f4:2d:57:20:24:3a:ff:0d:65:57:93: 2b:a0:27:a5:e6:1b:7d:86:57:97:bc:de:08:95:a3: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6F:74:9A:79:AC:DB:5A:3F:89:07:82:D2:A9:2E:DD:0A:4F:34:C9 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TW90mnms21o_iQeC0qku3QpPNMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.180.0/24 77.90.16.0/24 77.90.27.0/24 Signature Algorithm: sha256WithRSAEncryption b0:cd:e5:a5:65:81:6f:cd:65:33:59:de:84:b5:35:84:e7:c1: b5:7d:3e:27:b5:8e:c6:8d:8d:91:a7:8d:84:09:58:59:43:d7: b7:fc:2b:4a:c0:2c:90:74:1a:ef:c7:bf:0d:19:2f:ae:88:f1: 2e:ee:e9:16:f1:6f:90:90:47:5b:ea:5d:9e:a7:d7:cb:fe:e1: 8f:ed:f0:30:7c:9a:d2:6f:d6:d0:ec:9c:19:0d:bd:d7:3f:4b: a2:33:b8:27:21:92:aa:01:8a:a8:9c:61:06:28:54:4b:36:a4: f3:85:12:a5:c5:49:7b:fe:74:e4:d5:fb:26:37:8f:3d:d3:c5: 5c:a2:3e:20:49:51:57:43:0f:fb:35:14:81:2e:64:e2:52:09: 31:03:96:ff:52:42:cb:0a:50:19:ab:f6:5c:07:63:18:76:6d: 4e:27:76:0b:1f:65:42:5c:9d:e9:7f:7d:ba:64:6b:db:c0:05: 18:02:1b:3e:3d:b7:34:94:24:a6:69:6d:96:92:dd:91:b2:7c: 7e:db:b1:32:f1:59:f7:4c:64:df:fa:8b:43:69:d6:17:38:9f: 94:28:62:fb:2e:32:2e:39:70:fb:c9:e7:7b:f0:b6:95:dd:5c: 38:e0:b5:06:aa:51:0b:5a:6b:bf:0c:02:68:14:f3:39:c3:fc: 47:4a:50:28 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EweE7ab7fHsnDhMy5zsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDZmNzQ5YTc5YWNkYjVhM2Y4OTA3ODJkMmE5MmVkZDBhNGYzNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYpS4bQn/QC9xGU50NOZpzpgI1ok l1IYtbf35+tvqyNmiNcRpM3fjX9+252vQOaQ6c/8x4lyd0FhEWEdyGrhA/9dIoZ/ 44OZrFyiPjqKVE1aLaPd6Neb+xB6cAuF9bwLAc75CNK/fYwVVvHVWNvhmaD+OcWU xP7O/TJHT1/595MwZbKmFs2sFXLu9pzyH4BcRiqJB5k75hyfss4O9tjBmqWfV05g MEU6vDC4UQDi8M4iqJeGlWfq8sMQqPA/1mO1UoGqq/9RZSKcs8a9AIQSfmPOZeZI HLgIp7Wo4S1OGY9BB+wh9C1XICQ6/w1lV5MroCel5ht9hleXvN4IlaO2uwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE1vdJp5rNtaP4kHgtKpLt0KTzTJMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVFc5MG1ubXMyMW9faVFlQzBxa3UzUXBQTk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa+0AwQA TVoQAwQATVobMA0GCSqGSIb3DQEBCwUAA4IBAQCwzeWlZYFvzWUzWd6EtTWE58G1 fT4ntY7GjY2Rp42ECVhZQ9e3/CtKwCyQdBrvx78NGS+uiPEu7ukW8W+QkEdb6l2e p9fL/uGP7fAwfJrSb9bQ7JwZDb3XP0uiM7gnIZKqAYqonGEGKFRLNqTzhRKlxUl7 /nTk1fsmN48908Vcoj4gSVFXQw/7NRSBLmTiUgkxA5b/UkLLClAZq/ZcB2MYdm1O J3YLH2VCXJ3pf326ZGvbwAUYAhs+Pbc0lCSmaW2Wkt2Rsnx+27Ey8Vn3TGTf+otD adYXOJ+UKGL7LjIuOXD7yed78LaV3Vw44LUGqlELWmu/DAJoFPM5w/xHSlAo -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:16 2026 by rpki-client