This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/TwBAsjP2MvPS-rT4YB1E6Tl0gwU.roa File: TwBAsjP2MvPS-rT4YB1E6Tl0gwU.roa (raw, json) Hash identifier: P+65Uksp14i7wQkszic60xCr/XYJCUKbR4MM3wfjG28= Subject key identifier: 4F:00:40:B2:33:F6:32:F3:D2:FA:B4:F8:60:1D:44:E9:39:74:83:05 Certificate issuer: /CN=cdd7ce94bc4d0199ed2aef68c2bb31fa02295cb4 Certificate serial: 019B77591FA240D32FD89825E38221664AF9 Authority key identifier: CD:D7:CE:94:BC:4D:01:99:ED:2A:EF:68:C2:BB:31:FA:02:29:5C:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdfOlLxNAZntKu9owrsx-gIpXLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/TwBAsjP2MvPS-rT4YB1E6Tl0gwU.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33976 IP address blocks: 144.63.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zdfOlLxNAZntKu9owrsx-gIpXLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1f:a2:40:d3:2f:d8:98:25:e3:82:21:66:4a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdd7ce94bc4d0199ed2aef68c2bb31fa02295cb4 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f0040b233f632f3d2fab4f8601d44e939748305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:fb:17:e2:14:ae:b6:6d:36:c2:8c:29:ad: bb:bf:f6:dd:d5:f9:27:83:e3:fd:10:df:fb:8d:bd: b8:79:f3:08:6c:ce:d4:22:62:ec:6f:e5:c5:cf:ac: 5e:3f:1c:7e:e0:2b:34:8e:ae:7a:2e:c8:6f:d0:06: 5e:08:3d:34:2d:e7:d3:70:72:62:77:79:70:f8:03: 66:a1:2d:f9:f4:b8:e4:cd:32:4a:3d:d7:6c:e7:73: ab:a3:57:3b:2d:7f:e3:03:69:59:b4:a9:90:fb:09: 18:d2:ec:53:64:3a:3e:21:67:6e:9b:43:8f:10:2c: dd:fd:b6:c3:9d:7f:cf:b9:3d:7c:e7:e6:cb:6a:0e: 3f:c4:59:42:ac:0f:d3:7c:0f:ce:7a:78:1b:d4:63: f4:bf:43:7c:66:79:93:2e:8d:02:df:1c:29:d8:c0: e2:ff:29:a7:2a:47:6c:b5:5c:31:c0:48:40:f9:42: fa:21:5e:97:73:97:9b:9f:d7:b6:13:b4:d4:21:40: d4:07:6e:e3:05:8f:56:7f:46:a9:18:0e:7f:dd:0a: da:da:bd:01:32:75:53:e0:11:6c:46:11:3c:a6:e5: cc:72:87:f4:a6:aa:01:74:d9:77:fc:53:2c:34:f7: 5e:5a:78:68:15:7a:33:56:c5:a7:66:fd:5e:ff:2e: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:40:B2:33:F6:32:F3:D2:FA:B4:F8:60:1D:44:E9:39:74:83:05 X509v3 Authority Key Identifier: keyid:CD:D7:CE:94:BC:4D:01:99:ED:2A:EF:68:C2:BB:31:FA:02:29:5C:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdfOlLxNAZntKu9owrsx-gIpXLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/TwBAsjP2MvPS-rT4YB1E6Tl0gwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.63.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:ec:44:48:81:70:44:eb:ee:91:aa:1b:c7:fa:f1:6e:dd:2c: 06:98:1a:74:fe:f9:95:53:bd:bc:25:e7:6a:6a:d9:11:cf:f9: bd:19:7d:08:06:5b:42:ee:4d:3d:4b:55:b1:fa:6c:a3:f9:85: c1:a8:74:ab:15:5d:69:fd:27:f1:0d:da:9e:b7:01:f7:98:4a: c0:3e:aa:9f:32:9d:db:b3:f1:04:6b:0b:44:6d:ae:f2:7f:c6: 4d:23:cd:05:bb:9b:5e:17:f0:ad:77:ea:24:c6:d1:86:4f:61: 26:7b:f4:10:5c:9b:6c:ad:ec:88:8b:e5:6f:a1:c3:9a:d9:50: 14:6d:5c:87:ba:17:1e:59:3b:9c:4e:7d:2a:05:a2:b3:89:f0: 59:d7:59:d1:14:2c:f1:89:11:0f:99:89:db:a3:d5:e0:ae:2c: 51:88:fa:ad:7d:74:d5:05:c7:f0:d3:ae:33:af:7d:ba:8c:ac: d9:d7:0a:22:c6:4a:c2:1c:04:6a:8b:69:45:9e:3e:d8:a4:d4: fb:df:70:aa:8a:50:24:63:02:b0:3b:1e:65:2f:b6:1e:59:d2: 87:00:9d:43:d0:98:94:28:78:95:93:3e:07:d4:4b:60:e5:f1: ed:51:11:6d:3f:76:e4:1c:2f:0f:71:57:e4:70:e6:1b:cf:d6: c7:2c:b6:da -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WR+iQNMv2Jgl44IhZkr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZDdjZTk0YmM0ZDAxOTllZDJhZWY2OGMyYmIzMWZhMDIy OTVjYjQwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjAwNDBiMjMzZjYzMmYzZDJmYWI0Zjg2MDFkNDRlOTM5NzQ4MzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pn7F+IUrrZtNsKMKa27v/bd1fkn g+P9EN/7jb24efMIbM7UImLsb+XFz6xePxx+4Cs0jq56Lshv0AZeCD00LefTcHJi d3lw+ANmoS359LjkzTJKPdds53Oro1c7LX/jA2lZtKmQ+wkY0uxTZDo+IWdum0OP ECzd/bbDnX/PuT185+bLag4/xFlCrA/TfA/Oengb1GP0v0N8ZnmTLo0C3xwp2MDi /ymnKkdstVwxwEhA+UL6IV6Xc5ebn9e2E7TUIUDUB27jBY9Wf0apGA5/3Qra2r0B MnVT4BFsRhE8puXMcof0pqoBdNl3/FMsNPdeWnhoFXozVsWnZv1e/y4PoQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFE8AQLIz9jLz0vq0+GAdROk5dIMFMB8GA1UdIwQY MBaAFM3XzpS8TQGZ7SrvaMK7MfoCKVy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemRmT2xMeE5BWm50S3U5b3dyc3gtZ0lwWExRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80NDY1NjYtY2JkNi00Nzg0LTk2NTkt ZWQ3NmIxYmFiNDRhLzEvVHdCQXNqUDJNdlBTLXJUNFlCMUU2VGwwZ3dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80NDY1NjYtY2JkNi00Nzg0LTk2NTktZWQ3NmIxYmFiNDRh LzEvemRmT2xMeE5BWm50S3U5b3dyc3gtZ0lwWExRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkD8wDQYJ KoZIhvcNAQELBQADggEBAEnsREiBcETr7pGqG8f68W7dLAaYGnT++ZVTvbwl52pq 2RHP+b0ZfQgGW0LuTT1LVbH6bKP5hcGodKsVXWn9J/EN2p63AfeYSsA+qp8ynduz 8QRrC0RtrvJ/xk0jzQW7m14X8K136iTG0YZPYSZ79BBcm2yt7IiL5W+hw5rZUBRt XIe6Fx5ZO5xOfSoForOJ8FnXWdEULPGJEQ+Ziduj1eCuLFGI+q19dNUFx/DTrjOv fbqMrNnXCiLGSsIcBGqLaUWePtik1PvfcKqKUCRjArA7HmUvth5Z0ocAnUPQmJQo eJWTPgfUS2Dl8e1REW0/duQcLw9xV+Rw5hvP1scstto= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:21 2026 by rpki-client