This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Wpl0Yt0x1L3KBUxClULYQuLnyT8.roa File: Wpl0Yt0x1L3KBUxClULYQuLnyT8.roa (raw, json) Hash identifier: K3WptT/yayjU6HHi7nsq5z1bNovUoyWHXAuTPT3IyY0= Subject key identifier: 5A:99:74:62:DD:31:D4:BD:CA:05:4C:42:95:42:D8:42:E2:E7:C9:3F Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019AFCD8106DBEFFD20FDEAB4F8154259A8A Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Wpl0Yt0x1L3KBUxClULYQuLnyT8.roa Signing time: Mon 08 Dec 2025 07:23:29 +0000 ROA not before: Mon 08 Dec 2025 07:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 5.56.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:d8:10:6d:be:ff:d2:0f:de:ab:4f:81:54:25:9a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Dec 8 07:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a997462dd31d4bdca054c429542d842e2e7c93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5b:5d:19:b2:67:1d:78:91:a3:2c:5b:59:a4: af:23:4b:c4:ff:cc:2f:fd:40:3e:70:2c:ee:0d:26: df:40:8e:ba:f0:27:5c:51:af:36:df:37:60:37:83: ae:c9:ce:c5:6b:4a:cc:60:ca:10:47:d6:67:49:d3: 1a:42:2e:34:e1:08:aa:d2:ef:15:f4:c4:c4:bb:44: 7b:98:aa:fb:8d:b4:7f:e8:8b:ea:5c:bd:55:86:cc: 12:67:2d:16:11:e5:d4:0d:c4:6e:43:fd:5c:73:96: 16:2d:63:06:71:75:a4:c4:e2:44:4c:33:0a:7f:f6: af:6a:47:2b:2e:1b:ba:02:f1:52:98:21:5a:f4:b7: fb:c4:f2:a2:54:05:3a:a0:16:62:8f:92:8e:c7:d7: 3c:b7:ce:c2:a6:d2:23:72:bf:a1:fe:27:bf:82:6e: 42:e1:77:fe:2a:00:95:a5:ed:78:34:45:13:7b:dd: d2:62:6c:8c:00:3e:32:f3:b7:6d:67:26:09:d3:ca: be:aa:67:b0:5d:e5:a6:20:6b:d7:70:6e:e3:0f:80: 44:9a:c8:1e:4d:be:3a:9b:3c:e3:8f:a6:90:72:f3: af:50:ae:b4:21:66:36:27:ca:7f:ea:f4:c5:ff:d6: 37:83:8e:d5:79:45:33:c0:c2:b8:4a:8e:ae:11:7d: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:99:74:62:DD:31:D4:BD:CA:05:4C:42:95:42:D8:42:E2:E7:C9:3F X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Wpl0Yt0x1L3KBUxClULYQuLnyT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.26.0/24 Signature Algorithm: sha256WithRSAEncryption 72:72:ef:23:7e:62:e8:20:80:f3:b8:02:ca:3f:00:32:ff:67: 89:ac:da:47:ff:c5:30:30:5a:61:08:b1:4f:87:b2:88:e2:c6: f2:36:c6:56:f7:7a:35:4e:18:e2:13:3c:57:16:ed:24:13:7a: ef:54:f6:ac:7a:28:9b:bb:33:43:53:b1:00:5d:83:52:dc:b6: 99:70:3d:dc:f3:26:10:ce:ad:c6:bd:21:76:39:1a:19:6e:a4: f7:27:1d:99:96:97:97:87:88:73:b6:66:59:c2:b0:8e:25:c3: c1:02:0e:b5:c2:f3:97:82:a9:4d:4a:3f:d3:9f:e3:99:c8:d5: df:23:7e:51:1a:17:01:40:ed:c7:df:44:1b:9a:40:00:5d:60: 3d:be:ac:e0:8a:9d:d1:4a:1d:4d:35:a9:ce:e0:61:7d:c6:9b: ae:d0:f5:c3:31:ed:2e:ef:28:c1:ac:a8:91:8e:22:c5:d4:ae: 85:bc:a3:02:d6:90:ec:c0:f3:20:1a:e5:c8:d4:f0:a4:48:29: d7:92:ad:bd:ee:e7:41:9b:11:1b:18:92:5c:f0:f2:4d:1d:d9: 2b:19:30:41:48:38:75:60:17:be:41:d7:1d:08:4e:f2:2d:6e: ba:49:ad:46:28:20:ff:a6:7b:54:56:9e:74:15:7d:99:8d:cf: 27:fa:7b:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr82BBtvv/SD96rT4FUJZqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMjA4MDcyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTk5NzQ2MmRkMzFkNGJkY2EwNTRjNDI5NTQyZDg0MmUyZTdjOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ltdGbJnHXiRoyxbWaSvI0vE/8wv /UA+cCzuDSbfQI668CdcUa823zdgN4Ouyc7Fa0rMYMoQR9ZnSdMaQi404Qiq0u8V 9MTEu0R7mKr7jbR/6IvqXL1VhswSZy0WEeXUDcRuQ/1cc5YWLWMGcXWkxOJETDMK f/avakcrLhu6AvFSmCFa9Lf7xPKiVAU6oBZij5KOx9c8t87CptIjcr+h/ie/gm5C 4Xf+KgCVpe14NEUTe93SYmyMAD4y87dtZyYJ08q+qmewXeWmIGvXcG7jD4BEmsge Tb46mzzjj6aQcvOvUK60IWY2J8p/6vTF/9Y3g47VeUUzwMK4So6uEX3gxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFqZdGLdMdS9ygVMQpVC2ELi58k/MB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvV3BsMFl0MHgxTDNLQlV4Q2xVTFlRdUxueVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgaMA0G CSqGSIb3DQEBCwUAA4IBAQBycu8jfmLoIIDzuALKPwAy/2eJrNpH/8UwMFphCLFP h7KI4sbyNsZW93o1ThjiEzxXFu0kE3rvVPaseiibuzNDU7EAXYNS3LaZcD3c8yYQ zq3GvSF2ORoZbqT3Jx2ZlpeXh4hztmZZwrCOJcPBAg61wvOXgqlNSj/Tn+OZyNXf I35RGhcBQO3H30QbmkAAXWA9vqzgip3RSh1NNanO4GF9xpuu0PXDMe0u7yjBrKiR jiLF1K6FvKMC1pDswPMgGuXI1PCkSCnXkq297udBmxEbGJJc8PJNHdkrGTBBSDh1 YBe+QdcdCE7yLW66Sa1GKCD/pntUVp50FX2Zjc8n+nuq -----END CERTIFICATE-----Generated at Wed Dec 10 18:02:54 2025 by rpki-client