This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WzoTgVrNs6DACqBD1AKVTS-rM-8.roa File: WzoTgVrNs6DACqBD1AKVTS-rM-8.roa (raw, json) Hash identifier: 2J78d0yF6ClPy+qg+isIeJ1Xt/mfkxbNVeRcxd6DioU= Subject key identifier: 5B:3A:13:81:5A:CD:B3:A0:C0:0A:A0:43:D4:02:95:4D:2F:AB:33:EF Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019ADA33A20551AB5EEEFBB279860901714D Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WzoTgVrNs6DACqBD1AKVTS-rM-8.roa Signing time: Mon 01 Dec 2025 13:56:48 +0000 ROA not before: Mon 01 Dec 2025 13:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216078 IP address blocks: 2a14:c380:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:33:a2:05:51:ab:5e:ee:fb:b2:79:86:09:01:71:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Dec 1 13:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b3a13815acdb3a0c00aa043d402954d2fab33ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:dc:81:39:d0:0f:4b:45:2e:bb:3a:a9:de: 55:d6:38:b4:45:7c:06:ec:53:c0:b9:59:b4:6f:36: c5:3e:bb:ab:08:13:26:2f:0f:1e:75:d6:37:70:86: 8e:5d:17:30:26:8e:56:e1:4a:fc:39:5a:0a:f8:8f: 03:61:bb:c4:2a:27:14:2a:ef:24:3e:1e:78:69:4a: bf:6f:5c:02:89:88:a1:a7:ff:de:50:2e:47:8f:81: b3:a9:21:0b:1e:b7:9b:92:c1:a3:84:81:2b:40:59: 7d:d9:d7:b5:27:15:e2:ce:54:9a:fa:5e:58:5f:0c: 10:ca:77:8f:b0:15:6d:8d:8c:fc:47:5b:29:81:f8: 4c:ad:87:35:74:20:b7:34:a7:83:69:62:96:fe:fd: ca:92:05:eb:aa:c6:aa:2c:79:ee:1d:b3:14:2b:15: 14:56:b7:10:9f:b5:69:b3:73:ed:4a:83:ae:d5:13: af:2c:a6:4c:64:42:b0:fe:da:5f:bf:cf:ae:61:44: ed:77:3e:73:7c:42:10:78:ed:07:1f:45:96:42:e4: 97:2b:e1:5f:e1:bf:46:78:a1:a5:fd:1f:d1:f6:f3: 12:53:5b:89:00:e0:03:63:85:db:6c:87:7c:b8:9f: b5:c7:ef:79:89:3a:a8:44:8e:f2:50:d0:de:a9:56: 07:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3A:13:81:5A:CD:B3:A0:C0:0A:A0:43:D4:02:95:4D:2F:AB:33:EF X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WzoTgVrNs6DACqBD1AKVTS-rM-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:16::/48 Signature Algorithm: sha256WithRSAEncryption 5e:25:d3:18:91:b1:85:6d:55:ab:8d:ee:54:4f:b6:72:65:26: 9d:d9:0c:08:62:e1:3b:05:1f:86:58:15:75:30:30:02:23:42: 6f:bb:ac:f4:fe:51:eb:31:92:e2:b7:4a:c2:18:0a:db:6d:6c: e5:48:62:4c:b1:9b:4a:bd:d1:71:01:e5:6f:e8:fd:26:25:19: d2:63:73:a5:6f:b5:3f:3e:55:2f:ef:6b:b6:77:b4:e9:fe:cf: 66:bf:52:e3:d6:23:73:4a:6c:d7:c8:4c:4f:4b:73:f9:2d:e4: 0a:ba:06:3f:23:f6:72:7b:34:25:e6:3c:52:56:7a:68:9f:86: e0:02:31:ba:87:cd:9e:29:82:34:6d:59:b5:a2:05:24:e3:4c: 7e:1e:2c:b9:f8:30:30:8b:7c:bb:92:0f:d7:c5:a5:f2:ab:b7: 23:21:99:9c:c4:27:e8:a9:94:da:98:b8:56:20:5d:85:7a:08: 85:a4:49:76:3c:1b:7b:8f:9d:27:17:b6:ac:f3:05:d3:4f:82: 4b:c5:3f:d6:57:2e:ad:b4:23:1d:45:22:13:87:c6:e2:d7:bb: 17:d6:fa:af:e6:4a:c3:2c:12:0b:65:6f:67:3b:8e:ec:78:1e: ab:73:e4:32:a0:08:a7:8a:14:55:c1:b1:a5:25:a9:11:a3:a3: 4c:27:bb:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZraM6IFUate7vuyeYYJAXFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjUxMjAxMTM1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjNhMTM4MTVhY2RiM2EwYzAwYWEwNDNkNDAyOTU0ZDJmYWIzM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDvcgTnQD0tFLrs6qd5V1ji0RXwG 7FPAuVm0bzbFPrurCBMmLw8eddY3cIaOXRcwJo5W4Ur8OVoK+I8DYbvEKicUKu8k Ph54aUq/b1wCiYihp//eUC5Hj4GzqSELHrebksGjhIErQFl92de1JxXizlSa+l5Y XwwQynePsBVtjYz8R1spgfhMrYc1dCC3NKeDaWKW/v3KkgXrqsaqLHnuHbMUKxUU VrcQn7Vps3PtSoOu1ROvLKZMZEKw/tpfv8+uYUTtdz5zfEIQeO0HH0WWQuSXK+Ff 4b9GeKGl/R/R9vMSU1uJAOADY4XbbId8uJ+1x+95iTqoRI7yUNDeqVYHMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFs6E4FazbOgwAqgQ9QClU0vqzPvMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvV3pvVGdWck5zNkRBQ3FCRDFBS1ZUUy1yTS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAW MA0GCSqGSIb3DQEBCwUAA4IBAQBeJdMYkbGFbVWrje5UT7ZyZSad2QwIYuE7BR+G WBV1MDACI0Jvu6z0/lHrMZLit0rCGArbbWzlSGJMsZtKvdFxAeVv6P0mJRnSY3Ol b7U/PlUv72u2d7Tp/s9mv1Lj1iNzSmzXyExPS3P5LeQKugY/I/ZyezQl5jxSVnpo n4bgAjG6h82eKYI0bVm1ogUk40x+Hiy5+DAwi3y7kg/XxaXyq7cjIZmcxCfoqZTa mLhWIF2FegiFpEl2PBt7j50nF7as8wXTT4JLxT/WVy6ttCMdRSITh8bi17sX1vqv 5krDLBILZW9nO47seB6rc+QyoAinihRVwbGlJakRo6NMJ7vu -----END CERTIFICATE-----Generated at Sat Dec 6 09:41:58 2025 by rpki-client