This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa File: TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa (raw, json) Hash identifier: gWt/0MiWhctK2nZiEUG6uq5KmtZDAOBzOpD2bryeFoo= Subject key identifier: 4F:0A:C2:BD:6A:06:36:AA:44:67:F1:CC:5C:71:D8:5A:95:46:B7:F8 Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Certificate serial: 019B7FF068A8778D540A23221B69DB0F2514 Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa Signing time: Fri 02 Jan 2026 18:20:20 +0000 ROA not before: Fri 02 Jan 2026 18:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209102 IP address blocks: 2.56.128.0/24 maxlen: 24 2.56.129.0/24 maxlen: 24 2.56.130.0/24 maxlen: 24 2a09:c3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:68:a8:77:8d:54:0a:23:22:1b:69:db:0f:25:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Validity Not Before: Jan 2 18:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f0ac2bd6a0636aa4467f1cc5c71d85a9546b7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:b2:a2:1d:64:d7:fd:d7:eb:64:7b:05:10: 43:35:c0:c4:b4:2f:a9:30:fc:5e:08:56:72:cb:4f: 4a:3c:e7:7c:85:85:ea:d8:f3:f3:8d:4a:d8:a8:40: 57:02:d3:06:17:f2:d8:88:af:94:c5:c6:37:c8:c9: 8e:38:eb:a2:81:a4:92:f9:40:47:d2:52:6c:0e:18: 27:09:f5:1c:03:6b:69:9c:bb:05:a7:4d:88:45:4f: 99:83:05:9d:10:8f:12:c4:84:20:7f:56:82:4c:e0: 4d:d6:94:22:c7:77:da:5a:be:64:6c:96:2b:2d:43: 78:c7:1b:82:1f:1e:a3:ef:c2:76:a0:ba:bb:b2:35: cc:2d:73:2e:3e:cf:91:e6:1a:a2:ca:41:83:a8:86: 29:a3:34:d3:5f:0e:c9:50:ab:4d:26:67:fa:21:d2: 68:d7:88:d8:aa:dd:67:ad:6c:86:83:91:bd:11:3f: 86:b5:e0:1a:75:f6:e6:e0:1c:ca:c9:5a:c5:77:90: d0:1a:5e:6c:03:e5:38:ef:f9:17:1e:b1:1f:cf:d0: 1a:54:84:a3:4a:09:45:03:b3:ca:13:e1:1e:d2:97: 91:18:98:9f:0a:ae:49:e0:4a:7a:2a:72:6f:df:a3: 6e:3b:31:1a:ae:4b:15:eb:b8:56:f0:32:3d:96:14: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0A:C2:BD:6A:06:36:AA:44:67:F1:CC:5C:71:D8:5A:95:46:B7:F8 X509v3 Authority Key Identifier: keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/TwrCvWoGNqpEZ_HMXHHYWpVGt_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.128.0-2.56.130.255 IPv6: 2a09:c3c0::/29 Signature Algorithm: sha256WithRSAEncryption cc:0f:e5:85:90:93:20:0a:33:bd:aa:71:6d:1a:27:3e:60:86: e1:68:eb:70:eb:83:6f:80:78:c2:05:03:83:cd:a0:33:f1:9d: f2:19:9f:60:8f:eb:01:5d:38:dc:9c:a6:5c:17:39:81:67:1a: 9f:d0:f6:f2:ad:1b:36:df:38:5f:de:62:e0:c8:84:35:3f:07: 12:60:1b:86:19:df:35:0a:f2:64:18:cb:76:0c:f1:6e:58:a1: 0e:13:de:2c:0a:b1:81:67:e1:93:53:23:e6:41:0c:c0:46:e8: f0:e1:41:f1:40:cf:fd:d0:00:33:c7:a7:a4:a9:47:48:fe:c3: 0b:ff:3f:de:d1:45:6b:66:ee:7c:bd:40:0d:3c:d8:c4:e1:d4: db:49:bd:fe:a9:e8:e2:ee:98:d2:67:36:29:b0:bc:bd:e5:a8: bc:8a:3c:80:cb:5a:26:83:d4:f7:7e:c6:08:3f:15:82:da:37: c1:87:1b:fa:ed:25:fb:4a:34:6a:a5:34:55:ea:c2:de:26:33: cd:1f:a7:15:ab:b7:7d:63:d6:f0:cf:b6:49:22:63:71:fd:f3: 70:62:a4:17:28:a6:31:44:85:0f:c2:61:8a:15:11:45:8e:a1: 44:c7:a7:04:71:5d:93:b9:38:a8:52:9d:d2:ef:b0:1f:51:58: b6:16:e9:61 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/8Giod41UCiMiG2nbDyUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjAxNmY0NmRlMmRiNWNjMzExNjU5OWVlODcxYzc2YzJj ODM0YzYwHhcNMjYwMTAyMTgyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjBhYzJiZDZhMDYzNmFhNDQ2N2YxY2M1YzcxZDg1YTk1NDZiN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HKyoh1k1/3X62R7BRBDNcDEtC+p MPxeCFZyy09KPOd8hYXq2PPzjUrYqEBXAtMGF/LYiK+UxcY3yMmOOOuigaSS+UBH 0lJsDhgnCfUcA2tpnLsFp02IRU+ZgwWdEI8SxIQgf1aCTOBN1pQix3faWr5kbJYr LUN4xxuCHx6j78J2oLq7sjXMLXMuPs+R5hqiykGDqIYpozTTXw7JUKtNJmf6IdJo 14jYqt1nrWyGg5G9ET+GteAadfbm4BzKyVrFd5DQGl5sA+U47/kXHrEfz9AaVISj SglFA7PKE+Ee0peRGJifCq5J4Ep6KnJv36NuOzEarksV67hW8DI9lhQsmQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFE8Kwr1qBjaqRGfxzFxx2FqVRrf4MB8GA1UdIwQY MBaAFOuwFvRt4ttcwxFlme6HHHbCyDTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmIt MDcyZmNhNWZmZWJlLzEvVHdyQ3ZXb0dOcXBFWl9ITVhISFlXcFZHdF9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmItMDcyZmNhNWZmZWJl LzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAcCOIAD BAACOIIwDQQCAAIwBwMFAyoJw8AwDQYJKoZIhvcNAQELBQADggEBAMwP5YWQkyAK M72qcW0aJz5ghuFo63Drg2+AeMIFA4PNoDPxnfIZn2CP6wFdONycplwXOYFnGp/Q 9vKtGzbfOF/eYuDIhDU/BxJgG4YZ3zUK8mQYy3YM8W5YoQ4T3iwKsYFn4ZNTI+ZB DMBG6PDhQfFAz/3QADPHp6SpR0j+wwv/P97RRWtm7ny9QA082MTh1NtJvf6p6OLu mNJnNimwvL3lqLyKPIDLWiaD1Pd+xgg/FYLaN8GHG/rtJftKNGqlNFXqwt4mM80f pxWrt31j1vDPtkkiY3H983BipBcopjFEhQ/CYYoVEUWOoUTHpwRxXZO5OKhSndLv sB9RWLYW6WE= -----END CERTIFICATE-----Generated at Tue Feb 10 02:28:20 2026 by rpki-client