This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa File: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (raw, json) Hash identifier: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14= Subject key identifier: 58:13:B9:1A:F9:64:B2:9D:61:D8:D8:F6:5D:CB:90:5A:05:9E:DD:A3 Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Certificate serial: 019B7AC78583ABEF44581D90D9673D021B8D Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 149.232.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:85:83:ab:ef:44:58:1d:90:d9:67:3d:02:1b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5813b91af964b29d61d8d8f65dcb905a059edda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:23:72:6c:13:17:d4:ac:70:b2:f9:93:de: a8:68:84:6c:3a:d0:f2:f8:c0:e0:c4:0d:0f:33:d2: 25:61:fb:7d:60:d4:41:11:1d:42:8f:93:45:3e:37: 66:b2:8d:2f:16:e8:91:e0:8c:96:47:51:f3:75:9c: 7f:27:04:0f:e6:86:1a:c7:dd:e7:fa:df:ea:da:e9: 8e:ce:02:ee:ed:12:fb:e5:f5:0d:d6:66:f0:7b:1c: bf:14:b0:64:a3:d9:54:a8:8e:51:13:ef:21:18:ff: 0f:35:c0:b2:97:37:a0:ee:11:4c:45:fb:a8:3f:cb: e3:a0:ea:42:b3:d7:ba:58:be:07:b5:01:76:63:16: 2b:b6:99:5b:fb:51:61:bb:49:53:b8:ba:5e:f7:85: b6:6f:cf:d0:46:0f:58:ff:fd:ef:c7:7c:65:03:9d: dc:98:66:55:c9:c4:e8:19:b9:a4:fe:7e:b5:88:82: 18:d8:70:de:a4:c8:08:ef:07:f8:93:02:fb:4b:d5: 87:5d:ff:e3:f6:28:c3:77:bc:ba:ef:dd:35:37:3e: 82:2e:42:96:02:73:4a:d1:5f:dd:ec:c8:f4:17:c7: 62:46:07:96:1e:39:5f:eb:ed:10:b1:f7:2b:53:01: dd:72:6c:f2:e0:b3:4c:2c:66:70:8f:3e:c3:06:52: 33:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:B9:1A:F9:64:B2:9D:61:D8:D8:F6:5D:CB:90:5A:05:9E:DD:A3 X509v3 Authority Key Identifier: keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.232.240.0/24 Signature Algorithm: sha256WithRSAEncryption 53:23:3a:24:a0:bb:55:82:3d:b4:40:c1:f9:bd:47:c7:2a:a2: e4:16:73:0b:c0:aa:9a:4f:76:ea:e0:5b:a8:8f:a2:ee:bb:bf: b2:6a:09:c0:c9:8c:06:42:57:d5:fb:14:b2:c7:8e:29:85:19: 2a:d8:11:38:07:60:6d:45:69:be:84:d1:b7:10:ba:89:6d:62: 6c:f8:68:f9:26:43:82:50:a2:04:dc:44:a5:d0:d0:05:4f:a3: c1:0f:56:e4:95:47:60:b2:1c:b2:17:e6:0e:3a:05:f4:3c:84: 91:2b:c0:3b:64:b9:22:e5:a4:12:c6:9d:a2:47:6c:b8:3f:fa: 39:2c:0d:7b:7e:46:72:26:61:64:e8:e3:61:d7:79:95:9f:04: 39:67:e9:ee:6c:9c:82:d5:11:d4:89:e8:24:23:2a:1a:d4:5f: 6c:22:7d:f7:c4:6e:65:d3:99:9a:8f:cd:30:c1:4c:67:7e:e9: df:22:ea:fb:da:d4:a2:08:01:d1:4c:a5:94:2c:95:3f:62:bd: 82:0a:fe:90:21:47:c9:af:b0:18:15:64:3f:a1:c2:59:18:ba: d1:10:8d:67:79:5e:b8:fa:0d:3f:e0:a8:02:0d:d0:c3:b3:a9: 80:b0:6b:a1:6f:1b:e3:a6:0b:43:80:74:03:40:d8:31:5c:d0: 58:81:41:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4WDq+9EWB2Q2Wc9AhuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk YjljNTQwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODEzYjkxYWY5NjRiMjlkNjFkOGQ4ZjY1ZGNiOTA1YTA1OWVkZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSUjcmwTF9SscLL5k96oaIRsOtDy +MDgxA0PM9IlYft9YNRBER1Cj5NFPjdmso0vFuiR4IyWR1HzdZx/JwQP5oYax93n +t/q2umOzgLu7RL75fUN1mbwexy/FLBko9lUqI5RE+8hGP8PNcCylzeg7hFMRfuo P8vjoOpCs9e6WL4HtQF2YxYrtplb+1Fhu0lTuLpe94W2b8/QRg9Y//3vx3xlA53c mGZVycToGbmk/n61iIIY2HDepMgI7wf4kwL7S9WHXf/j9ijDd7y67901Nz6CLkKW AnNK0V/d7Mj0F8diRgeWHjlf6+0QsfcrUwHdcmzy4LNMLGZwjz7DBlIzaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFgTuRr5ZLKdYdjY9l3LkFoFnt2jMB8GA1UdIwQY MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt OGU4Njc1Y2IwOTJmLzEvV0JPNUd2bGtzcDFoMk5qMlhjdVFXZ1dlM2FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlejwMA0G CSqGSIb3DQEBCwUAA4IBAQBTIzokoLtVgj20QMH5vUfHKqLkFnMLwKqaT3bq4Fuo j6Luu7+yagnAyYwGQlfV+xSyx44phRkq2BE4B2BtRWm+hNG3ELqJbWJs+Gj5JkOC UKIE3ESl0NAFT6PBD1bklUdgshyyF+YOOgX0PISRK8A7ZLki5aQSxp2iR2y4P/o5 LA17fkZyJmFk6ONh13mVnwQ5Z+nubJyC1RHUiegkIyoa1F9sIn33xG5l05maj80w wUxnfunfIur72tSiCAHRTKWULJU/Yr2CCv6QIUfJr7AYFWQ/ocJZGLrREI1neV64 +g0/4KgCDdDDs6mAsGuhbxvjpgtDgHQDQNgxXNBYgUGH -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:46 2026 by rpki-client