This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa File: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (raw, json) Hash identifier: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg= Subject key identifier: B7:0F:C1:AA:96:73:C6:1D:BA:47:53:79:60:20:0E:59:6C:8E:AC:24 Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec Certificate serial: 019B791073AA5D17803A39260A76D09CA693 Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56332 IP address blocks: 91.220.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:73:aa:5d:17:80:3a:39:26:0a:76:d0:9c:a6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b70fc1aa9673c61dba47537960200e596c8eac24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:f9:fc:4b:fc:18:0d:8c:39:78:18:0d:95: 27:b6:8f:3a:04:9e:85:91:3d:a5:68:95:d6:1e:aa: de:5a:08:3e:f8:1f:02:60:3d:fe:f0:29:61:67:bd: 5d:8a:5a:a2:9e:d4:fe:73:d9:5c:21:1d:5b:57:ef: de:d0:61:61:70:f8:4b:21:4c:48:94:5c:7d:cf:a5: 1f:e3:5e:b4:d3:19:55:8b:00:9b:c3:89:49:aa:ba: 5d:75:bd:6a:88:dd:a2:93:3a:4f:ab:bd:b3:c5:ec: ea:b4:d1:d4:94:5f:fb:74:90:ea:f6:0c:a4:78:a3: 0e:7e:7e:4d:cf:17:2b:2c:da:77:06:fa:ef:a0:dd: e9:54:b4:96:93:76:d0:5c:1e:0e:20:b8:11:de:01: 51:1a:52:43:38:0f:ab:3b:9c:9d:a0:e0:32:ad:9b: 52:78:d7:0c:b5:b6:3a:ff:d8:b6:f0:05:97:f2:2a: ed:a7:0d:81:6f:f6:dc:05:da:a2:e7:77:50:9f:ef: d4:60:ac:56:a8:9d:03:53:98:55:4f:74:ac:9f:f0: 83:94:82:df:d7:a6:09:21:76:8a:1b:ce:ef:08:05: 8e:33:4b:66:b7:a1:0d:55:51:f1:ee:2f:af:36:c9: 72:19:9c:d4:05:24:cd:50:85:00:cc:37:43:46:83: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0F:C1:AA:96:73:C6:1D:BA:47:53:79:60:20:0E:59:6C:8E:AC:24 X509v3 Authority Key Identifier: keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.239.0/24 Signature Algorithm: sha256WithRSAEncryption 89:79:ec:7b:3d:95:1b:28:fa:5d:f4:10:7e:8f:c7:ca:f6:21: 49:6d:30:f3:2f:da:fe:6f:1a:6e:9b:57:18:87:42:8e:f2:bb: 7a:33:90:86:cd:2e:ce:66:57:29:45:4c:70:ec:ba:08:af:a2: 15:96:5b:69:c6:55:28:89:bd:4b:5b:d8:c9:2d:64:55:55:22: 06:e2:ed:7b:a1:45:0a:64:73:dd:d6:31:5f:81:e8:b6:0e:ef: 3f:cc:ed:81:23:0a:b8:32:c7:37:8d:21:25:40:79:8d:db:a0: c2:41:57:ad:ac:9d:91:ff:90:19:b4:27:24:87:00:97:88:e1: 2e:f3:d5:d0:c8:03:0c:90:1f:16:e0:b1:a4:3b:0d:17:40:42: 6b:c4:65:74:b5:bc:f7:88:95:e6:fb:5a:bd:a6:b7:c7:94:e5: b5:ba:54:6f:53:57:3c:49:fb:ca:2e:08:9a:85:4d:83:75:6b: 59:79:ef:01:a6:ee:56:10:6e:09:46:30:de:4f:80:cb:52:61: e6:aa:e2:ec:56:f0:d0:6f:4c:36:3a:e1:79:dc:fd:7b:83:8a: 02:12:fb:49:be:ba:69:be:0d:8c:34:34:23:12:d1:b0:9b:c9: 0f:29:af:cb:42:6e:84:be:b7:d3:f1:ba:ab:67:8b:29:96:94: 61:c8:2e:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHOqXReAOjkmCnbQnKaTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl NjNmZWMwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzBmYzFhYTk2NzNjNjFkYmE0NzUzNzk2MDIwMGU1OTZjOGVhYzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRD5/Ev8GA2MOXgYDZUnto86BJ6F kT2laJXWHqreWgg++B8CYD3+8ClhZ71dilqintT+c9lcIR1bV+/e0GFhcPhLIUxI lFx9z6Uf41600xlViwCbw4lJqrpddb1qiN2ikzpPq72zxezqtNHUlF/7dJDq9gyk eKMOfn5NzxcrLNp3BvrvoN3pVLSWk3bQXB4OILgR3gFRGlJDOA+rO5ydoOAyrZtS eNcMtbY6/9i28AWX8irtpw2Bb/bcBdqi53dQn+/UYKxWqJ0DU5hVT3Ssn/CDlILf 16YJIXaKG87vCAWOM0tmt6ENVVHx7i+vNslyGZzUBSTNUIUAzDdDRoPmgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLcPwaqWc8YdukdTeWAgDllsjqwkMB8GA1UdIwQY MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt YmEwMzIzMjM3NDRjLzEvdHdfQnFwWnp4aDI2UjFONVlDQU9XV3lPckNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9zvMA0G CSqGSIb3DQEBCwUAA4IBAQCJeex7PZUbKPpd9BB+j8fK9iFJbTDzL9r+bxpum1cY h0KO8rt6M5CGzS7OZlcpRUxw7LoIr6IVlltpxlUoib1LW9jJLWRVVSIG4u17oUUK ZHPd1jFfgei2Du8/zO2BIwq4Msc3jSElQHmN26DCQVetrJ2R/5AZtCckhwCXiOEu 89XQyAMMkB8W4LGkOw0XQEJrxGV0tbz3iJXm+1q9prfHlOW1ulRvU1c8SfvKLgia hU2DdWtZee8Bpu5WEG4JRjDeT4DLUmHmquLsVvDQb0w2OuF53P17g4oCEvtJvrpp vg2MNDQjEtGwm8kPKa/LQm6EvrfT8bqrZ4splpRhyC5b -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:54 2026 by rpki-client