This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/TWT9W3DXJ-dZxjJQAE97-jeVzik.roa File: TWT9W3DXJ-dZxjJQAE97-jeVzik.roa (raw, json) Hash identifier: NuWvDNT5j64qkROJmNnrF3uPdv6iEhConb08RZf+VeY= Subject key identifier: 4D:64:FD:5B:70:D7:27:E7:59:C6:32:50:00:4F:7B:FA:37:95:CE:29 Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054 Certificate serial: 019B7D5C67B8D58F923263518E4DD79F026A Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/TWT9W3DXJ-dZxjJQAE97-jeVzik.roa Signing time: Fri 02 Jan 2026 06:19:26 +0000 ROA not before: Fri 02 Jan 2026 06:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9177 IP address blocks: 46.172.96.0/20 maxlen: 24 81.161.208.0/20 maxlen: 24 83.97.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:67:b8:d5:8f:92:32:63:51:8e:4d:d7:9f:02:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054 Validity Not Before: Jan 2 06:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d64fd5b70d727e759c63250004f7bfa3795ce29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:9d:6b:5f:08:24:a8:6f:10:87:c8:24:8b: 63:67:fa:d5:9e:01:b9:40:d7:6b:3c:d8:d7:f3:15: ee:b7:4e:9b:c6:5b:86:40:e6:19:2e:fc:e1:bd:19: f9:a4:30:f4:04:53:53:b1:8e:ee:f5:89:c6:58:e6: ac:cf:cd:a8:e8:d1:d7:18:c9:25:39:55:2a:83:6c: 03:4f:d1:65:e1:9e:2d:e1:f2:6d:42:07:07:ae:c2: 7f:9e:66:f9:0e:f4:5f:98:71:be:92:02:6b:69:2a: 68:6f:1e:b6:27:cc:9b:f6:d5:84:48:cb:00:0a:9f: 3c:f3:d2:e3:fc:43:b0:39:cf:cf:2b:68:60:cc:fa: cc:e5:3e:e6:69:38:8e:18:dc:2d:6a:41:0e:dd:7c: 00:df:cd:95:a8:af:03:46:12:91:6c:c9:e6:fb:99: ec:38:37:f2:92:9c:c6:72:d7:58:40:7d:e9:02:4f: 10:2a:ba:92:35:b7:ec:b5:28:16:de:7b:86:f9:44: 16:1e:28:bf:40:e8:de:fa:91:20:6e:38:4f:3a:6b: bd:e9:1e:ea:3a:33:cf:7c:ff:f3:ff:e4:f6:97:60: 29:9e:9a:8d:2f:f5:17:17:07:94:61:d9:2c:d9:b6: 5c:8d:9c:0e:81:ef:7a:3b:3c:e9:2f:80:38:b1:59: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:64:FD:5B:70:D7:27:E7:59:C6:32:50:00:4F:7B:FA:37:95:CE:29 X509v3 Authority Key Identifier: keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/TWT9W3DXJ-dZxjJQAE97-jeVzik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.96.0/20 81.161.208.0/20 83.97.0.0/21 Signature Algorithm: sha256WithRSAEncryption b3:8b:85:f8:eb:51:d9:93:c7:a1:9a:9d:c8:51:65:da:ae:d3: bf:0c:7f:f1:c2:ff:03:58:65:3c:09:66:5d:f8:c4:32:fa:90: cc:08:86:fe:90:8b:44:3d:71:67:9f:2b:61:08:7e:03:42:cf: cd:98:f9:3c:46:2b:42:ca:cc:5c:2d:99:79:0d:35:f2:d7:98: 5d:40:07:2e:f0:a8:b1:54:05:28:c1:38:df:41:ab:39:27:e8: 5a:e7:e2:62:2b:85:8a:a5:1f:7d:50:98:e5:b7:03:76:30:d2: 9c:2b:91:f7:b7:d7:e2:d1:23:26:c0:68:2a:b3:22:dc:af:88: 5a:a6:c2:4f:4a:ad:82:ad:0f:b4:e8:fd:6e:e2:71:f8:d9:b6: f0:c7:9b:b7:0b:73:67:d7:79:d0:23:72:69:f1:16:be:2c:c3: 6c:f3:7d:50:47:cf:e1:c4:e3:b9:a4:8d:c4:78:12:86:eb:8f: b1:7d:78:df:3e:4a:e2:28:57:7d:d2:b4:91:bb:23:53:79:fd: db:4a:f8:5b:51:4b:42:7f:97:5a:41:87:42:24:d7:9e:84:02: 34:77:c0:32:fd:8e:d2:06:02:08:0d:94:93:b2:00:55:74:5f: b0:25:e3:c7:c3:a2:8d:ac:66:af:1f:fa:87:14:c2:ab:64:91: 20:a2:c1:34 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XGe41Y+SMmNRjk3XnwJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDIwZWI1ZDk0ZjBmYWI4NjJlMDg0MDQxNGY0MzJiNzg1 ZTYwNTQwHhcNMjYwMTAyMDYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDY0ZmQ1YjcwZDcyN2U3NTljNjMyNTAwMDRmN2JmYTM3OTVjZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RCda18IJKhvEIfIJItjZ/rVngG5 QNdrPNjX8xXut06bxluGQOYZLvzhvRn5pDD0BFNTsY7u9YnGWOasz82o6NHXGMkl OVUqg2wDT9Fl4Z4t4fJtQgcHrsJ/nmb5DvRfmHG+kgJraSpobx62J8yb9tWESMsA Cp8889Lj/EOwOc/PK2hgzPrM5T7maTiOGNwtakEO3XwA382VqK8DRhKRbMnm+5ns ODfykpzGctdYQH3pAk8QKrqSNbfstSgW3nuG+UQWHii/QOje+pEgbjhPOmu96R7q OjPPfP/z/+T2l2ApnpqNL/UXFweUYdks2bZcjZwOge96OzzpL4A4sVmdAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE1k/Vtw1yfnWcYyUABPe/o3lc4pMB8GA1UdIwQY MBaAFMVCDrXZTw+rhi4IQEFPQyt4XmBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wOWM1MzgtYjI2MC00NGFiLTkxNjYt NDI1OGVlNGRlOTFlLzEvVFdUOVczRFhKLWRaeGpKUUFFOTctamVWemlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8wOWM1MzgtYjI2MC00NGFiLTkxNjYtNDI1OGVlNGRlOTFl LzEveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELqxgAwQE UaHQAwQDU2EAMA0GCSqGSIb3DQEBCwUAA4IBAQCzi4X461HZk8ehmp3IUWXartO/ DH/xwv8DWGU8CWZd+MQy+pDMCIb+kItEPXFnnythCH4DQs/NmPk8RitCysxcLZl5 DTXy15hdQAcu8KixVAUowTjfQas5J+ha5+JiK4WKpR99UJjltwN2MNKcK5H3t9fi 0SMmwGgqsyLcr4hapsJPSq2CrQ+06P1u4nH42bbwx5u3C3Nn13nQI3Jp8Ra+LMNs 831QR8/hxOO5pI3EeBKG64+xfXjfPkriKFd90rSRuyNTef3bSvhbUUtCf5daQYdC JNeehAI0d8Ay/Y7SBgIIDZSTsgBVdF+wJePHw6KNrGavH/qHFMKrZJEgosE0 -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:03 2026 by rpki-client