This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Wl8CnIvcvYHerTAQ4t5ZvYRW2gA.roa File: Wl8CnIvcvYHerTAQ4t5ZvYRW2gA.roa (raw, json) Hash identifier: IYV+qrClQcVyviNRObL/NgAFa76b3pNSXzF0ZhHKIC0= Subject key identifier: 5A:5F:02:9C:8B:DC:BD:81:DE:AD:30:10:E2:DE:59:BD:84:56:DA:00 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019ABBB72DD3DC7C5FB4E80E92714477DC15 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Wl8CnIvcvYHerTAQ4t5ZvYRW2gA.roa Signing time: Tue 25 Nov 2025 15:52:15 +0000 ROA not before: Tue 25 Nov 2025 15:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 5.56.26.0/24 maxlen: 24 5.56.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:b7:2d:d3:dc:7c:5f:b4:e8:0e:92:71:44:77:dc:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Nov 25 15:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a5f029c8bdcbd81dead3010e2de59bd8456da00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:71:7e:dd:4e:25:bb:0f:b2:c8:01:0c:05: f0:8d:a1:96:b4:2a:4d:4b:a9:e1:53:c4:5d:3a:3d: 1f:2e:f7:f6:06:f3:0b:a7:20:42:be:a3:18:f1:64: e6:7c:c6:dc:a9:5e:fe:6e:36:f7:f2:a1:3d:0d:f3: d0:95:b1:60:a4:ef:eb:e5:46:16:17:8d:61:20:3d: 36:fc:b6:82:cb:41:20:d7:6b:a8:05:a4:ff:91:4c: 91:cb:e0:cf:a9:a3:6a:ca:4e:6c:72:ae:48:e1:d5: 07:0a:0b:19:16:45:22:0a:14:53:02:53:1b:e9:dc: 10:cb:52:05:cc:43:b3:04:e1:67:8c:44:fe:5d:01: d0:84:d4:6e:5f:4a:dc:7e:d2:8d:f5:d6:d0:4f:9b: 4f:ce:67:46:ec:f9:8e:4f:2d:2a:ea:a7:25:84:a4: af:77:f1:27:1e:44:59:ff:ba:17:f1:11:15:0e:08: 95:de:a8:9c:ca:6f:89:8e:a0:41:e8:e1:c5:c1:1f: 59:a9:2b:37:5c:45:09:b4:47:f6:a1:e4:af:e6:07: 5f:6a:83:33:f5:c4:dd:0e:21:b7:f5:08:50:fa:c9: cf:3a:ec:e5:3c:6c:29:5d:ba:7f:26:c8:db:20:13: d8:ba:dc:01:90:09:8d:49:b4:f0:16:39:45:bd:b3: f8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5F:02:9C:8B:DC:BD:81:DE:AD:30:10:E2:DE:59:BD:84:56:DA:00 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Wl8CnIvcvYHerTAQ4t5ZvYRW2gA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.26.0/24 5.56.30.0/24 Signature Algorithm: sha256WithRSAEncryption b8:fa:17:36:c6:ab:bb:5f:9d:fe:2a:79:6e:ea:0a:f4:63:35: e9:f0:48:ea:22:cc:31:a2:86:79:fd:7c:55:6c:93:74:73:66: 4b:ac:44:a8:7f:e6:9a:df:1a:e2:bc:3e:8a:b9:f3:5b:2f:4a: 44:6c:c0:74:15:19:3f:e7:f9:b8:50:93:d7:bb:61:eb:5c:53: 95:09:89:4d:cd:23:48:29:fa:fe:f5:5e:a8:f7:84:7d:31:2f: 21:37:2a:31:ea:b2:14:34:3b:7e:52:60:c9:88:9b:8b:7e:89: 34:a7:32:a4:17:03:99:32:7c:8e:00:bf:3e:01:4f:b4:8e:6f: 67:3e:31:fb:cc:3c:d6:96:42:b6:5a:96:13:90:2e:02:57:47: 12:ee:1f:c8:e7:a7:86:3d:61:7c:21:40:a0:b1:c1:5d:bb:1a: e6:b6:56:a1:b8:b3:c0:6f:17:ea:3a:5b:2d:d6:f6:e0:d4:a3: 02:99:5e:51:90:cd:87:f0:81:76:4a:d5:62:37:62:98:93:8e: 89:49:94:a7:f7:c3:1d:a6:1f:db:6c:30:ff:50:3e:cb:73:da: be:79:9b:ae:85:04:e6:ea:dd:53:e7:4c:f3:05:35:ef:96:e7: c2:5d:49:52:09:e3:70:2f:a8:7c:ce:90:3b:cc:42:c0:2b:c8: 5c:b4:f9:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq7ty3T3HxftOgOknFEd9wVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMTI1MTU1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTVmMDI5YzhiZGNiZDgxZGVhZDMwMTBlMmRlNTliZDg0NTZkYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fFxft1OJbsPssgBDAXwjaGWtCpN S6nhU8RdOj0fLvf2BvMLpyBCvqMY8WTmfMbcqV7+bjb38qE9DfPQlbFgpO/r5UYW F41hID02/LaCy0Eg12uoBaT/kUyRy+DPqaNqyk5scq5I4dUHCgsZFkUiChRTAlMb 6dwQy1IFzEOzBOFnjET+XQHQhNRuX0rcftKN9dbQT5tPzmdG7PmOTy0q6qclhKSv d/EnHkRZ/7oX8REVDgiV3qicym+JjqBB6OHFwR9ZqSs3XEUJtEf2oeSv5gdfaoMz 9cTdDiG39QhQ+snPOuzlPGwpXbp/JsjbIBPYutwBkAmNSbTwFjlFvbP4rQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFpfApyL3L2B3q0wEOLeWb2EVtoAMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvV2w4Q25JdmN2WUhlclRBUTR0NVp2WVJXMmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABTgaAwQA BTgeMA0GCSqGSIb3DQEBCwUAA4IBAQC4+hc2xqu7X53+Knlu6gr0YzXp8EjqIswx ooZ5/XxVbJN0c2ZLrESof+aa3xrivD6KufNbL0pEbMB0FRk/5/m4UJPXu2HrXFOV CYlNzSNIKfr+9V6o94R9MS8hNyox6rIUNDt+UmDJiJuLfok0pzKkFwOZMnyOAL8+ AU+0jm9nPjH7zDzWlkK2WpYTkC4CV0cS7h/I56eGPWF8IUCgscFduxrmtlahuLPA bxfqOlst1vbg1KMCmV5RkM2H8IF2StViN2KYk46JSZSn98Mdph/bbDD/UD7Lc9q+ eZuuhQTm6t1T50zzBTXvlufCXUlSCeNwL6h8zpA7zELAK8hctPlj -----END CERTIFICATE-----Generated at Thu Dec 4 21:27:58 2025 by rpki-client