This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/WBE9XqEf7MFyalSUqu-vF0MYUwE.roa File: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (raw, json) Hash identifier: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0= Subject key identifier: 58:11:3D:5E:A1:1F:EC:C1:72:6A:54:94:AA:EF:AF:17:43:18:53:01 Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Certificate serial: 019B7AC78600398CE4260C56A1D045F7490B Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/WBE9XqEf7MFyalSUqu-vF0MYUwE.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 149.232.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:86:00:39:8c:e4:26:0c:56:a1:d0:45:f7:49:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58113d5ea11fecc1726a5494aaefaf1743185301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:fd:e7:43:e9:f8:f5:fc:03:4d:06:88:d5: 9e:a3:0b:8e:4e:87:67:93:77:72:54:06:3d:1c:2a: 71:ec:b2:19:96:a1:fe:7d:c6:85:9a:b0:00:12:2f: be:aa:76:6c:9b:92:09:f5:aa:0c:d7:96:86:6b:38: c5:a6:7f:b3:87:c4:ed:15:31:ba:cb:cc:55:de:3a: f7:c7:18:aa:b1:5d:33:4f:6b:93:b2:dd:8a:d0:c1: d8:e5:26:da:89:49:35:ac:88:21:d9:2b:2a:96:fa: 00:de:f7:72:81:b0:35:86:5b:19:a6:c3:66:20:48: 92:f6:cd:d1:0b:ec:75:b1:07:50:0d:37:3c:29:07: 5d:87:0a:74:43:c1:75:b9:0e:87:5f:f2:6e:02:f7: 62:fb:86:d9:a2:c8:1f:2e:68:8e:16:73:3e:a6:f4: 3e:9a:68:86:2e:8f:e5:aa:e0:83:a4:06:37:88:2b: f9:e6:27:5f:88:89:bf:e0:42:e1:8b:54:b7:6b:4d: 09:d9:0f:ad:ea:fe:dc:0f:c1:ea:24:da:d3:4d:3d: c0:17:d3:20:92:02:ec:e5:85:c8:4b:a7:db:da:c5: 4c:3c:74:84:4c:06:38:0f:f2:c2:05:5f:56:a6:1f: bf:4c:06:e4:c7:e4:3d:e1:b1:08:fe:8e:d7:3a:a7: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:11:3D:5E:A1:1F:EC:C1:72:6A:54:94:AA:EF:AF:17:43:18:53:01 X509v3 Authority Key Identifier: keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/WBE9XqEf7MFyalSUqu-vF0MYUwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.232.240.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:7e:12:ea:4d:75:2c:b3:aa:ec:27:88:cc:04:ff:98:fc:4b: 92:77:b1:c3:bf:08:c3:6d:83:ca:56:12:46:6b:0e:df:6b:11: 1f:5d:32:6e:a2:b9:f4:b6:10:49:a5:ba:1a:fe:1f:72:46:70: 1d:ca:bb:ef:66:31:64:2f:b4:20:7c:d8:0d:26:22:e0:4f:4d: f7:57:34:23:82:2c:77:59:10:9a:57:ba:93:a2:27:45:a9:41: 61:3d:a0:f0:79:4c:50:e7:0d:37:74:a3:01:42:a4:3e:54:f9: 32:a8:c4:b9:92:37:11:4b:d1:ce:08:14:0a:33:76:02:05:15: 41:75:99:93:08:d2:e0:76:05:a1:a9:4e:d9:52:96:aa:95:cc: 69:e0:e0:2c:af:1d:dd:46:cc:7a:cb:7e:dc:49:0c:76:63:04: 66:ff:77:d5:f1:8f:53:91:ae:a7:df:6b:04:22:a7:32:7f:cc: a4:63:b6:d1:69:d5:49:00:44:f8:b6:26:38:0e:b1:74:c2:c1: ca:ad:00:28:d8:28:b0:d9:9a:b2:2d:cc:85:e4:b2:3f:65:eb: fa:0c:ac:a7:0b:b1:e0:44:ec:4f:23:a4:b0:6c:c3:1f:d4:53: 13:cf:e3:ac:2c:b6:d1:b6:a1:df:f7:b4:e1:bf:4d:ec:ce:1c: 35:85:db:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4YAOYzkJgxWodBF90kLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk YjljNTQwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODExM2Q1ZWExMWZlY2MxNzI2YTU0OTRhYWVmYWYxNzQzMTg1MzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkP950Pp+PX8A00GiNWeowuOTodn k3dyVAY9HCpx7LIZlqH+fcaFmrAAEi++qnZsm5IJ9aoM15aGazjFpn+zh8TtFTG6 y8xV3jr3xxiqsV0zT2uTst2K0MHY5SbaiUk1rIgh2SsqlvoA3vdygbA1hlsZpsNm IEiS9s3RC+x1sQdQDTc8KQddhwp0Q8F1uQ6HX/JuAvdi+4bZosgfLmiOFnM+pvQ+ mmiGLo/lquCDpAY3iCv55idfiIm/4ELhi1S3a00J2Q+t6v7cD8HqJNrTTT3AF9Mg kgLs5YXIS6fb2sVMPHSETAY4D/LCBV9Wph+/TAbkx+Q94bEI/o7XOqc++wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgRPV6hH+zBcmpUlKrvrxdDGFMBMB8GA1UdIwQY MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt OGU4Njc1Y2IwOTJmLzEvV0JFOVhxRWY3TUZ5YWxTVXF1LXZGME1ZVXdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlejwMA0G CSqGSIb3DQEBCwUAA4IBAQAvfhLqTXUss6rsJ4jMBP+Y/EuSd7HDvwjDbYPKVhJG aw7faxEfXTJuorn0thBJpboa/h9yRnAdyrvvZjFkL7QgfNgNJiLgT033VzQjgix3 WRCaV7qToidFqUFhPaDweUxQ5w03dKMBQqQ+VPkyqMS5kjcRS9HOCBQKM3YCBRVB dZmTCNLgdgWhqU7ZUpaqlcxp4OAsrx3dRsx6y37cSQx2YwRm/3fV8Y9Tka6n32sE Iqcyf8ykY7bRadVJAET4tiY4DrF0wsHKrQAo2Ciw2ZqyLcyF5LI/Zev6DKynC7Hg ROxPI6SwbMMf1FMTz+OsLLbRtqHf97Thv03szhw1hdsY -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:56 2026 by rpki-client