This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/wb0y_StQjDMa_SDpB0fetTMoG-4.roa File: wb0y_StQjDMa_SDpB0fetTMoG-4.roa (raw, json) Hash identifier: zwkaDNDwM/dFM6yP/gTAG7Z5iKNQnQWnPHvM5tlP8v4= Subject key identifier: C1:BD:32:FD:2B:50:8C:33:1A:FD:20:E9:07:47:DE:B5:33:28:1B:EE Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f Certificate serial: 019B7C13575846AB86A2323AF5783FD9F1F1 Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/wb0y_StQjDMa_SDpB0fetTMoG-4.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399114 IP address blocks: 94.154.8.0/24 maxlen: 24 178.211.157.0/24 maxlen: 24 185.234.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 22:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:57:58:46:ab:86:a2:32:3a:f5:78:3f:d9:f1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1bd32fd2b508c331afd20e90747deb533281bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ad:1c:0e:b0:7e:97:a5:0e:47:7c:10:b6:97: d0:98:a5:de:b1:6b:d9:13:0e:0c:b3:14:ab:e7:54: e0:a3:3f:c6:13:d0:09:b0:4c:c1:fe:ae:2f:40:bc: e3:df:42:47:c8:58:c9:3b:94:d4:35:fb:e8:1d:eb: 66:0d:e7:59:4f:31:2c:11:3f:36:b6:8f:de:b7:43: 10:47:53:68:97:1d:b6:f7:c0:a5:a6:5d:6d:a6:6e: 48:aa:80:6d:be:50:51:e3:58:d8:d4:f2:c6:c7:d8: 16:66:c2:6f:6f:ab:61:a4:8c:c2:96:1d:71:72:26: 3c:f8:29:3e:a1:c3:75:0f:02:53:7d:00:4c:cb:c7: 7f:67:27:27:46:bd:c6:2e:70:9d:74:30:ea:54:1b: b7:a9:0e:ff:e0:06:6f:a4:aa:ff:10:46:d2:9f:17: 9a:0f:c0:46:55:47:a8:ee:4d:fb:6b:c8:4e:43:4e: 54:fb:8c:c4:fa:65:69:b9:71:08:31:9a:0b:19:97: 70:eb:c5:dc:a7:2a:ee:f3:9d:f9:66:2c:b7:5a:1e: 3d:6e:d3:46:79:52:19:81:1d:09:8f:b2:39:42:52: 6d:dc:a3:a2:08:37:85:a7:9c:91:6b:3a:2c:51:66: 35:74:de:9b:83:38:cf:f0:6a:1e:30:08:4d:73:d7: 29:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BD:32:FD:2B:50:8C:33:1A:FD:20:E9:07:47:DE:B5:33:28:1B:EE X509v3 Authority Key Identifier: keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/wb0y_StQjDMa_SDpB0fetTMoG-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.8.0/24 178.211.157.0/24 185.234.115.0/24 Signature Algorithm: sha256WithRSAEncryption 69:dd:fb:d3:a0:19:06:35:6d:42:c9:f4:a8:77:a6:e8:04:37: 06:b2:4b:f5:06:e4:c2:22:3f:b4:49:c9:91:56:11:be:68:41: 7e:52:bf:bf:b4:e6:04:3b:e0:c6:28:63:25:db:80:dc:48:cf: 5b:47:f1:26:5a:30:f9:de:a3:3a:f8:8f:b1:42:57:86:48:50: 24:c7:7e:7e:b3:a4:91:88:6c:6b:49:0b:5c:6f:7d:bb:80:a9: 7c:bb:8b:4e:c5:31:74:36:66:95:25:32:b6:3b:2f:cd:bc:90: aa:10:13:98:27:d4:6e:e7:4c:c5:30:a8:1b:00:d4:b2:cd:4a: 67:f1:d7:03:1c:8a:70:7b:81:69:04:c7:51:37:53:23:fc:27: 94:0f:41:d8:9f:09:ee:0f:28:03:5b:6f:37:99:b7:14:16:9a: ba:8c:d4:bc:c4:ac:a3:a3:72:2c:0d:bc:bd:88:2d:df:02:cd: 20:f6:df:37:d4:1e:48:56:ce:32:a0:9e:f7:a7:de:df:e6:5d: 93:e7:bf:53:1f:3e:6a:81:86:11:09:d7:22:dd:05:5a:1f:fb: f4:7c:db:42:d6:36:75:56:a2:fc:ae:17:d1:3c:17:41:05:8c: 2a:64:02:0e:ca:3b:b2:8e:e3:ef:73:fd:56:89:4b:c6:40:f5: 25:3e:e4:41 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E1dYRquGojI69Xg/2fHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTU0MGNlNDUwNDU2MzQ1ZWM4ZTA5OGVmNGY1MzYzNGQ3 NGJmMWYwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWJkMzJmZDJiNTA4YzMzMWFmZDIwZTkwNzQ3ZGViNTMzMjgxYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q0cDrB+l6UOR3wQtpfQmKXesWvZ Ew4MsxSr51Tgoz/GE9AJsEzB/q4vQLzj30JHyFjJO5TUNfvoHetmDedZTzEsET82 to/et0MQR1Nolx2298Clpl1tpm5IqoBtvlBR41jY1PLGx9gWZsJvb6thpIzClh1x ciY8+Ck+ocN1DwJTfQBMy8d/ZycnRr3GLnCddDDqVBu3qQ7/4AZvpKr/EEbSnxea D8BGVUeo7k37a8hOQ05U+4zE+mVpuXEIMZoLGZdw68Xcpyru8535Ziy3Wh49btNG eVIZgR0Jj7I5QlJt3KOiCDeFp5yRazosUWY1dN6bgzjP8GoeMAhNc9cpNwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMG9Mv0rUIwzGv0g6QdH3rUzKBvuMB8GA1UdIwQY MBaAFGClQM5FBFY0XsjgmO9PU2NNdL8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEt ZTQ3MzUzMWY2ZmU4LzEvd2IweV9TdFFqRE1hX1NEcEIwZmV0VE1vRy00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEtZTQ3MzUzMWY2ZmU4 LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXpoIAwQA stOdAwQAuepzMA0GCSqGSIb3DQEBCwUAA4IBAQBp3fvToBkGNW1CyfSod6boBDcG skv1BuTCIj+0ScmRVhG+aEF+Ur+/tOYEO+DGKGMl24DcSM9bR/EmWjD53qM6+I+x QleGSFAkx35+s6SRiGxrSQtcb327gKl8u4tOxTF0NmaVJTK2Oy/NvJCqEBOYJ9Ru 50zFMKgbANSyzUpn8dcDHIpwe4FpBMdRN1Mj/CeUD0HYnwnuDygDW283mbcUFpq6 jNS8xKyjo3IsDby9iC3fAs0g9t831B5IVs4yoJ73p97f5l2T579THz5qgYYRCdci 3QVaH/v0fNtC1jZ1VqL8rhfRPBdBBYwqZAIOyjuyjuPvc/1WiUvGQPUlPuRB -----END CERTIFICATE-----Generated at Thu Jan 8 04:20:34 2026 by rpki-client