This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/tw6AZDGGpP9NxVAB2it1NsPBTW4.roa File: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (raw, json) Hash identifier: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM= Subject key identifier: B7:0E:80:64:31:86:A4:FF:4D:C5:50:01:DA:2B:75:36:C3:C1:4D:6E Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B7EA736DEC47B32125E5C0EA22D8C30A9 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/tw6AZDGGpP9NxVAB2it1NsPBTW4.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215443 IP address blocks: 91.204.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:36:de:c4:7b:32:12:5e:5c:0e:a2:2d:8c:30:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b70e80643186a4ff4dc55001da2b7536c3c14d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:9a:3e:89:2d:52:74:82:16:63:56:78:02: 0f:e7:04:63:21:78:6c:f2:4c:8a:43:d2:c1:29:8d: 49:84:cf:ac:c0:9c:e0:f2:57:bd:22:44:3a:3c:48: ca:79:9a:2d:10:d2:6f:e0:4a:fe:7c:5c:6d:31:56: cb:8b:42:9a:34:73:27:b6:8f:cb:57:ab:0d:2e:47: 48:68:dd:f4:fd:6a:13:3e:07:6a:53:77:f5:98:92: f8:b3:4e:ab:95:5a:a1:6e:96:5f:d8:c2:18:9f:77: 46:59:48:d6:40:79:56:af:54:50:80:93:b6:24:59: df:71:3c:a2:d3:df:ea:7e:9a:76:2e:ab:4c:12:87: 0c:60:a2:2f:05:e8:f1:b3:d6:d2:3e:d0:fe:1b:83: 6b:d3:89:33:af:0a:aa:ad:b7:58:b0:be:b1:7e:e4: 15:d4:ca:db:32:57:84:d7:65:b5:63:16:db:02:bf: de:4e:47:48:ee:1e:b8:59:b0:aa:67:a7:88:31:c2: 09:96:9a:98:8d:b5:61:08:4b:eb:08:33:b9:06:fe: ae:9e:af:6f:0a:dd:66:48:10:5a:13:c2:5d:4d:1a: e5:6e:53:6c:bb:cf:de:23:81:63:a0:a6:5c:98:e1: 0f:51:5c:b1:8c:31:87:c0:a6:88:66:2e:bc:6a:02: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0E:80:64:31:86:A4:FF:4D:C5:50:01:DA:2B:75:36:C3:C1:4D:6E X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/tw6AZDGGpP9NxVAB2it1NsPBTW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.131.0/24 Signature Algorithm: sha256WithRSAEncryption cd:7d:3c:d5:29:71:93:3b:09:0e:30:0b:f3:b1:f1:83:19:4b: 66:db:2a:0c:e1:f3:df:01:b1:aa:92:b1:de:fc:68:bf:27:c9: b8:49:d3:2e:e0:df:f6:55:5b:ce:6a:a3:81:f7:b7:d2:40:ba: 12:ae:a7:86:42:25:22:ba:69:52:9f:0c:35:dc:3b:cf:57:eb: 33:6b:fc:7d:47:79:90:d1:ef:34:2d:9c:55:49:95:15:0f:53: 6e:eb:4b:07:62:23:a8:d1:04:46:18:ef:be:38:05:75:96:cd: 05:50:5d:6e:e3:36:2e:25:b9:9a:0e:3d:f4:fc:96:ce:74:cb: 1d:3c:c6:0d:87:e8:08:0f:79:d8:c8:81:77:69:03:0f:22:06: 0f:71:13:84:ce:f2:28:5a:af:d2:80:f2:d0:49:c4:75:64:d4: 27:49:9a:ac:0c:6b:58:0a:f3:14:b3:f2:ba:fe:c6:e6:7a:00: 4d:e3:9e:9a:ae:fc:84:70:55:ca:30:c8:da:1d:7b:fd:ef:94: 6e:6c:55:3b:78:4c:a7:b3:73:4c:d9:30:b7:29:cd:07:e4:5e: 48:7e:94:49:99:96:03:a0:a8:42:49:ba:a5:8c:0e:fa:e5:36: 58:1e:57:c5:41:4c:32:66:0e:2b:72:4d:78:5a:89:ae:3c:6e: 9e:e8:dc:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzbexHsyEl5cDqItjDCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzBlODA2NDMxODZhNGZmNGRjNTUwMDFkYTJiNzUzNmMzYzE0ZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuaaPoktUnSCFmNWeAIP5wRjIXhs 8kyKQ9LBKY1JhM+swJzg8le9IkQ6PEjKeZotENJv4Er+fFxtMVbLi0KaNHMnto/L V6sNLkdIaN30/WoTPgdqU3f1mJL4s06rlVqhbpZf2MIYn3dGWUjWQHlWr1RQgJO2 JFnfcTyi09/qfpp2LqtMEocMYKIvBejxs9bSPtD+G4Nr04kzrwqqrbdYsL6xfuQV 1MrbMleE12W1YxbbAr/eTkdI7h64WbCqZ6eIMcIJlpqYjbVhCEvrCDO5Bv6unq9v Ct1mSBBaE8JdTRrlblNsu8/eI4FjoKZcmOEPUVyxjDGHwKaIZi68agKEXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLcOgGQxhqT/TcVQAdordTbDwU1uMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvdHc2QVpER0dwUDlOeFZBQjJpdDFOc1BCVFc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8yDMA0G CSqGSIb3DQEBCwUAA4IBAQDNfTzVKXGTOwkOMAvzsfGDGUtm2yoM4fPfAbGqkrHe /Gi/J8m4SdMu4N/2VVvOaqOB97fSQLoSrqeGQiUiumlSnww13DvPV+sza/x9R3mQ 0e80LZxVSZUVD1Nu60sHYiOo0QRGGO++OAV1ls0FUF1u4zYuJbmaDj30/JbOdMsd PMYNh+gID3nYyIF3aQMPIgYPcROEzvIoWq/SgPLQScR1ZNQnSZqsDGtYCvMUs/K6 /sbmegBN456arvyEcFXKMMjaHXv975RubFU7eEyns3NM2TC3Kc0H5F5IfpRJmZYD oKhCSbqljA765TZYHlfFQUwyZg4rck14WomuPG6e6NxE -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:56 2026 by rpki-client