This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/twfqByHh14E1PhLe1eBQEbxkFtc.roa File: twfqByHh14E1PhLe1eBQEbxkFtc.roa (raw, json) Hash identifier: L/mg/edVn6vLMggD9bZRqZbVoFCL8f6bFstrsmocwZo= Subject key identifier: B7:07:EA:07:21:E1:D7:81:35:3E:12:DE:D5:E0:50:11:BC:64:16:D7 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019A69390E2B13F9E2F1B9FBB4C0578109F1 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/twfqByHh14E1PhLe1eBQEbxkFtc.roa Signing time: Sun 09 Nov 2025 15:25:37 +0000 ROA not before: Sun 09 Nov 2025 15:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209630 IP address blocks: 91.92.41.0/24 maxlen: 24 93.152.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:69:39:0e:2b:13:f9:e2:f1:b9:fb:b4:c0:57:81:09:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Nov 9 15:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b707ea0721e1d781353e12ded5e05011bc6416d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:11:13:c3:96:14:75:db:dd:55:1f:4a:d5: 51:a0:29:6d:c4:c5:d2:0d:03:bd:69:db:53:5c:ad: 1a:cf:ba:c2:31:fe:0d:10:09:13:cc:e2:df:14:93: dd:cb:c8:5b:4a:41:f6:d0:a8:69:09:36:72:1a:a6: 2f:f7:56:4e:9f:2c:b0:04:4a:5b:4c:df:08:e6:81: 75:52:cb:81:5b:7b:83:77:d9:b4:78:b8:39:6c:72: e0:7b:79:0b:3c:e7:d7:f0:52:78:f2:3d:be:26:86: d6:cf:8f:85:33:f6:38:05:d7:38:29:a9:73:21:aa: 55:91:4b:5a:3f:ca:30:f3:b2:bc:cd:27:e7:d9:29: 90:b9:cd:e7:7f:7d:c1:70:9f:9b:23:75:d8:14:bb: e7:f7:8e:52:dc:e9:d6:ab:da:3c:91:ca:d3:e1:61: 01:41:ef:46:0f:4b:61:bd:f3:5f:0a:db:e7:ef:0d: 55:c7:03:0d:a8:4e:ea:0a:0c:f7:78:ba:92:65:74: 55:62:43:f7:b1:60:ba:21:b2:26:ef:db:1f:be:29: 1a:4d:07:e3:1b:74:ae:23:94:75:f0:da:6c:a6:22: 40:14:9d:a9:68:06:38:63:ba:44:e1:62:d6:f4:d7: 48:3e:d2:09:91:5f:b6:bd:e7:7b:1b:1c:db:65:aa: f5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:07:EA:07:21:E1:D7:81:35:3E:12:DE:D5:E0:50:11:BC:64:16:D7 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/twfqByHh14E1PhLe1eBQEbxkFtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.41.0/24 93.152.233.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:3b:89:d0:5b:4c:b8:ae:28:44:ca:34:56:b5:cf:b6:7a:64: 43:1b:47:d8:36:c5:a7:c4:f2:60:9e:d1:a3:cc:da:2e:aa:f5: 68:43:5e:ae:05:4b:fc:4b:7f:58:44:5a:5e:b4:08:73:bc:87: 85:49:c8:e4:2c:e5:91:f5:b3:df:85:ef:fc:a5:64:9c:e1:2c: f1:bb:a2:79:ff:69:0b:be:91:61:ec:ed:87:38:08:52:19:60: b9:10:46:9d:11:bf:69:67:0c:34:8f:24:2c:86:06:a0:71:7b: 9e:16:70:d9:43:4f:03:28:8b:02:3b:4b:70:fb:af:9b:23:b2: b8:19:bc:1b:88:e3:e1:4b:3c:e0:68:f5:66:ad:91:83:1b:d3: 4a:69:19:90:50:27:3d:dc:98:1b:b2:02:03:f5:14:b7:15:49: ce:46:f2:cc:b0:9b:a6:84:bd:99:34:80:20:13:24:e7:7a:b3: df:96:6a:e9:5c:60:79:91:c1:4f:ff:b1:f1:d6:d8:54:f9:24: cf:f7:0c:3f:67:33:15:b2:30:47:fc:85:3a:ab:ae:7b:9d:1b: 45:7a:47:a9:b4:2d:ed:8a:79:7c:04:55:57:36:12:ca:b6:f1: dd:98:9b:b2:91:a6:9d:0e:48:d3:36:5e:25:fd:2d:71:30:06: bf:06:f7:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZppOQ4rE/ni8bn7tMBXgQnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMTA5MTUyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzA3ZWEwNzIxZTFkNzgxMzUzZTEyZGVkNWUwNTAxMWJjNjQxNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI8RE8OWFHXb3VUfStVRoCltxMXS DQO9adtTXK0az7rCMf4NEAkTzOLfFJPdy8hbSkH20KhpCTZyGqYv91ZOnyywBEpb TN8I5oF1UsuBW3uDd9m0eLg5bHLge3kLPOfX8FJ48j2+JobWz4+FM/Y4Bdc4Kalz IapVkUtaP8ow87K8zSfn2SmQuc3nf33BcJ+bI3XYFLvn945S3OnWq9o8kcrT4WEB Qe9GD0thvfNfCtvn7w1VxwMNqE7qCgz3eLqSZXRVYkP3sWC6IbIm79sfvikaTQfj G3SuI5R18NpspiJAFJ2paAY4Y7pE4WLW9NdIPtIJkV+2ved7GxzbZar1PQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLcH6gch4deBNT4S3tXgUBG8ZBbXMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvdHdmcUJ5SGgxNEUxUGhMZTFlQlFFYnhrRnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1wpAwQA XZjpMA0GCSqGSIb3DQEBCwUAA4IBAQAMO4nQW0y4rihEyjRWtc+2emRDG0fYNsWn xPJgntGjzNouqvVoQ16uBUv8S39YRFpetAhzvIeFScjkLOWR9bPfhe/8pWSc4Szx u6J5/2kLvpFh7O2HOAhSGWC5EEadEb9pZww0jyQshgagcXueFnDZQ08DKIsCO0tw +6+bI7K4GbwbiOPhSzzgaPVmrZGDG9NKaRmQUCc93JgbsgID9RS3FUnORvLMsJum hL2ZNIAgEyTnerPflmrpXGB5kcFP/7Hx1thU+STP9ww/ZzMVsjBH/IU6q657nRtF ekeptC3tinl8BFVXNhLKtvHdmJuykaadDkjTNl4l/S1xMAa/Bvdi -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:24 2025 by rpki-client