This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WYPXo_KrRZ2BW0UFrWYL27NWNQ0.roa File: WYPXo_KrRZ2BW0UFrWYL27NWNQ0.roa (raw, json) Hash identifier: 2r87zwLLqAaui5xgQxo9c6RKfGYNdlVV2Tzoh8pCql4= Subject key identifier: 59:83:D7:A3:F2:AB:45:9D:81:5B:45:05:AD:66:0B:DB:B3:56:35:0D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D73334D46A7B3B8774FC85CDBE8B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WYPXo_KrRZ2BW0UFrWYL27NWNQ0.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 268624 IP address blocks: 31.56.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d7:33:34:d4:6a:7b:3b:87:74:fc:85:cd:be:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5983d7a3f2ab459d815b4505ad660bdbb356350d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:bf:a6:14:02:f2:c1:22:f4:31:38:af:46: 31:d2:b7:43:96:4e:7d:5b:87:71:64:a3:a1:3c:f9: 1b:b1:de:07:c0:ff:c9:0c:16:a2:d9:2c:1f:6e:52: 3a:b0:08:ea:4f:e6:6f:21:fa:b3:37:4c:9a:df:be: d4:a9:b3:c9:99:98:5d:40:2d:79:e8:26:1b:f3:a7: 15:94:4d:49:cf:86:44:ff:00:70:af:b1:45:19:c3: 46:b5:4d:18:0f:aa:84:ca:e4:74:56:a5:d1:b6:9b: af:3f:24:9f:9a:a2:e5:af:dd:e7:87:d3:2a:87:b4: 65:66:a1:a1:49:be:42:23:3e:b5:9a:bd:55:17:84: 51:33:df:ad:0b:f5:d0:da:a9:ec:b5:85:67:55:28: 98:55:bc:79:07:6b:52:1e:af:32:53:f6:66:af:6c: 68:41:81:2f:5a:f8:24:9d:2b:77:63:c8:c2:aa:38: d9:78:90:fd:dd:4f:1e:33:c5:45:46:b6:ca:40:3c: bd:59:64:71:b9:5b:23:d0:72:87:bf:98:be:8a:fb: c9:be:df:6a:d7:94:cb:9f:2d:34:e3:0a:0d:88:8f: d7:70:8f:b0:7b:e9:88:41:b0:16:fd:19:77:62:9d: 3f:11:6d:80:14:fe:5f:f5:ff:34:5d:58:49:ce:18: 26:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:83:D7:A3:F2:AB:45:9D:81:5B:45:05:AD:66:0B:DB:B3:56:35:0D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WYPXo_KrRZ2BW0UFrWYL27NWNQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.44.0/24 Signature Algorithm: sha256WithRSAEncryption 87:8c:8b:af:c8:ae:79:24:9e:7d:33:3e:e0:40:eb:34:39:6a: de:2f:7d:85:90:06:38:05:87:f8:e2:81:fe:21:8e:33:06:4a: 81:00:bf:43:4a:e4:ad:7b:97:c5:6e:db:a6:94:89:cd:89:d0: 1c:77:c1:12:ae:82:ab:71:e0:05:64:a8:8d:a0:2f:4a:73:54: fd:c2:8d:89:45:d1:24:ea:39:ba:e8:17:e9:45:ff:da:eb:36: 2b:bc:db:b2:82:f6:77:28:ca:ba:df:10:b8:7d:1f:70:5d:ae: a1:ae:71:8e:31:b6:93:ed:57:79:e9:11:7a:8f:14:14:ee:e2: 94:d4:a4:e2:2e:f4:3c:72:5d:7b:41:94:b9:8b:c4:d7:7e:92: b2:f6:e8:bd:82:f6:09:72:fd:29:56:02:87:cb:2e:15:81:48: b6:24:1f:54:d5:92:9c:17:e5:c3:06:ed:38:d8:07:5f:7f:55: 21:0e:ca:6d:75:37:89:d8:8f:47:de:04:ae:eb:0b:4b:d2:c5: c5:b8:99:9e:56:53:f5:3c:d8:36:53:30:51:05:6c:8b:4f:ab: 5e:d7:54:30:18:bc:6d:1e:3b:bd:fe:f5:5f:05:d2:70:25:3c: b7:65:5d:45:24:2e:4d:c6:3b:85:a2:7e:dd:de:67:df:c7:b1: 57:15:d8:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNczNNRqezuHdPyFzb6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTgzZDdhM2YyYWI0NTlkODE1YjQ1MDVhZDY2MGJkYmIzNTYzNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmm/phQC8sEi9DE4r0Yx0rdDlk59 W4dxZKOhPPkbsd4HwP/JDBai2SwfblI6sAjqT+ZvIfqzN0ya377UqbPJmZhdQC15 6CYb86cVlE1Jz4ZE/wBwr7FFGcNGtU0YD6qEyuR0VqXRtpuvPySfmqLlr93nh9Mq h7RlZqGhSb5CIz61mr1VF4RRM9+tC/XQ2qnstYVnVSiYVbx5B2tSHq8yU/Zmr2xo QYEvWvgknSt3Y8jCqjjZeJD93U8eM8VFRrbKQDy9WWRxuVsj0HKHv5i+ivvJvt9q 15TLny004woNiI/XcI+we+mIQbAW/Rl3Yp0/EW2AFP5f9f80XVhJzhgmLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFmD16Pyq0WdgVtFBa1mC9uzVjUNMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvV1lQWG9fS3JSWjJCVzBVRnJXWUwyN05XTlEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgsMA0G CSqGSIb3DQEBCwUAA4IBAQCHjIuvyK55JJ59Mz7gQOs0OWreL32FkAY4BYf44oH+ IY4zBkqBAL9DSuSte5fFbtumlInNidAcd8ESroKrceAFZKiNoC9Kc1T9wo2JRdEk 6jm66BfpRf/a6zYrvNuygvZ3KMq63xC4fR9wXa6hrnGOMbaT7Vd56RF6jxQU7uKU 1KTiLvQ8cl17QZS5i8TXfpKy9ui9gvYJcv0pVgKHyy4VgUi2JB9U1ZKcF+XDBu04 2Adff1UhDsptdTeJ2I9H3gSu6wtL0sXFuJmeVlP1PNg2UzBRBWyLT6te11QwGLxt Hju9/vVfBdJwJTy3ZV1FJC5NxjuFon7d3mffx7FXFdgd -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:54 2026 by rpki-client