This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/TwHtCTFt01-DoJiRnIPLzu06kO0.roa File: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (raw, json) Hash identifier: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4= Subject key identifier: 4F:01:ED:09:31:6D:D3:5F:83:A0:98:91:9C:83:CB:CE:ED:3A:90:ED Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37E2B1DE07E668613F7D87E901D2AC Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/TwHtCTFt01-DoJiRnIPLzu06kO0.roa Signing time: Fri 02 Jan 2026 10:19:10 +0000 ROA not before: Fri 02 Jan 2026 10:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207695 IP address blocks: 2a14:6781:1800::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e2:b1:de:07:e6:68:61:3f:7d:87:e9:01:d2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f01ed09316dd35f83a098919c83cbceed3a90ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:bd:3e:7f:a6:ea:bb:63:74:c4:d1:d3:a7: 01:2c:2d:65:c8:de:ee:ea:03:45:f2:2e:21:21:07: e5:41:1b:b2:79:3e:f9:b9:6c:41:9d:92:2b:dc:a1: 2d:9b:c8:23:02:c5:fc:57:33:9c:7c:5c:63:d1:92: 24:6c:ca:a3:3b:b6:28:48:d7:ac:ce:4e:61:06:36: 63:10:1d:7b:63:31:fd:ff:94:7b:e1:82:66:17:c3: 3f:a1:c3:18:ce:1b:4f:86:da:be:e8:3d:4b:16:e0: 96:7d:fa:53:9a:fa:df:2f:16:07:47:7f:10:8e:5b: 77:d4:2a:ff:8e:41:53:70:41:9e:e7:2d:d5:14:9a: 43:35:d3:c5:64:9d:63:76:4d:87:49:29:a9:57:d2: 86:bd:06:f5:38:92:11:ba:00:bc:0a:97:4c:e7:a8: 0b:46:f8:33:3a:1b:a8:f6:d3:fe:d6:b9:ef:0e:5f: 35:81:d9:b9:53:54:bb:ce:51:42:18:db:02:47:49: c4:1c:ee:24:1f:93:a6:49:a8:b8:70:6d:55:e7:fc: 76:dd:54:88:4c:6e:2a:40:80:49:20:91:11:9f:fa: 70:50:f3:74:c0:61:8d:df:fc:e3:35:e1:52:c4:c0: 8f:0f:06:70:38:6e:e5:d7:e1:c2:ee:79:4e:9a:f1: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:01:ED:09:31:6D:D3:5F:83:A0:98:91:9C:83:CB:CE:ED:3A:90:ED X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/TwHtCTFt01-DoJiRnIPLzu06kO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6781:1800::/38 Signature Algorithm: sha256WithRSAEncryption 09:b0:f5:e9:b8:c8:8f:dc:37:fd:e5:00:d1:8c:8e:84:c6:10: 5f:b1:69:8a:5a:61:a2:23:b9:10:46:fa:a9:48:52:03:02:fe: 10:24:62:70:04:38:2f:27:cb:79:52:f3:7e:b0:85:ce:ac:8b: 97:a7:c6:7f:eb:1d:26:f4:f9:c4:8d:33:8e:c2:c9:45:35:ec: 86:b3:c6:67:66:a3:40:a4:b1:f1:21:03:0d:66:6b:45:45:bc: 92:1e:e7:84:12:6e:f8:19:72:00:4f:4e:2c:e6:41:81:d8:4e: 0d:91:09:ad:c6:c3:d2:bb:df:ba:c4:9f:0f:fc:dd:8b:83:4b: be:32:5d:ea:ba:21:59:3e:45:8f:4c:dd:94:3c:54:ba:51:63: 4e:fa:45:f8:f0:4b:83:a6:54:a4:f7:d7:1a:b8:4e:16:d7:00: 9b:c9:a1:df:97:81:1b:d4:c1:22:88:66:84:bd:b5:83:4d:ac: 02:5e:e2:a1:80:4a:a8:a8:ec:d8:c1:a4:39:ae:6c:38:d9:e0: c7:99:b8:f7:26:27:bd:19:7b:a3:14:f0:33:a7:53:2a:ca:d2: e4:59:7a:f0:1f:4e:1f:35:1f:b0:39:c4:fd:db:ce:7e:39:ec: 82:0c:1e:34:79:40:f9:49:37:f1:bb:f5:31:9a:a8:cc:b9:3f: 65:99:69:50 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+N+Kx3gfmaGE/fYfpAdKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjAxZWQwOTMxNmRkMzVmODNhMDk4OTE5YzgzY2JjZWVkM2E5MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh29Pn+m6rtjdMTR06cBLC1lyN7u 6gNF8i4hIQflQRuyeT75uWxBnZIr3KEtm8gjAsX8VzOcfFxj0ZIkbMqjO7YoSNes zk5hBjZjEB17YzH9/5R74YJmF8M/ocMYzhtPhtq+6D1LFuCWffpTmvrfLxYHR38Q jlt31Cr/jkFTcEGe5y3VFJpDNdPFZJ1jdk2HSSmpV9KGvQb1OJIRugC8CpdM56gL RvgzOhuo9tP+1rnvDl81gdm5U1S7zlFCGNsCR0nEHO4kH5OmSai4cG1V5/x23VSI TG4qQIBJIJERn/pwUPN0wGGN3/zjNeFSxMCPDwZwOG7l1+HC7nlOmvEapwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFE8B7QkxbdNfg6CYkZyDy87tOpDtMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvVHdIdENURnQwMS1Eb0ppUm5JUEx6dTA2a08wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhRngRgw DQYJKoZIhvcNAQELBQADggEBAAmw9em4yI/cN/3lANGMjoTGEF+xaYpaYaIjuRBG +qlIUgMC/hAkYnAEOC8ny3lS836whc6si5enxn/rHSb0+cSNM47CyUU17Iazxmdm o0CksfEhAw1ma0VFvJIe54QSbvgZcgBPTizmQYHYTg2RCa3Gw9K737rEnw/83YuD S74yXeq6IVk+RY9M3ZQ8VLpRY076RfjwS4OmVKT31xq4ThbXAJvJod+XgRvUwSKI ZoS9tYNNrAJe4qGASqio7NjBpDmubDjZ4MeZuPcmJ70Ze6MU8DOnUyrK0uRZevAf Th81H7A5xP3bzn457IIMHjR5QPlJN/G79TGaqMy5P2WZaVA= -----END CERTIFICATE-----Generated at Sun Jan 18 12:03:50 2026 by rpki-client