This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/W2R_v-2PPRrVboMkPWH3Dj3JLrg.roa File: W2R_v-2PPRrVboMkPWH3Dj3JLrg.roa (raw, json) Hash identifier: rkDwJt2K+Km3nsqaf+K/HYTojuHm7A1VkU7dA/qfqmQ= Subject key identifier: 5B:64:7F:BF:ED:8F:3D:1A:D5:6E:83:24:3D:61:F7:0E:3D:C9:2E:B8 Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409 Certificate serial: 019B7AC9456AC8D63317080473948938EBF3 Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/W2R_v-2PPRrVboMkPWH3Dj3JLrg.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21180 IP address blocks: 149.234.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:45:6a:c8:d6:33:17:08:04:73:94:89:38:eb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b647fbfed8f3d1ad56e83243d61f70e3dc92eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:a5:be:2b:d4:f2:7f:05:2f:e8:d1:3b:e8: ee:92:44:0d:6b:91:dd:63:52:d5:e8:02:b3:29:74: 6a:0d:7f:b2:ea:d7:f5:2a:58:3b:b4:56:b8:bb:3c: a7:9d:b7:e9:6e:d5:28:7a:08:9d:b1:7b:5b:56:e6: fa:f5:5c:29:b8:d8:03:74:95:03:34:e2:cb:27:8a: eb:89:08:76:8b:7f:73:67:11:7f:dc:57:d5:a8:74: 77:db:e9:1d:59:d6:15:67:30:d8:68:51:ab:1e:2b: 2b:be:6f:a2:8b:8e:9d:fb:3c:51:74:a9:d7:84:ba: 49:b3:09:09:a2:ff:06:13:e2:63:92:05:52:79:ba: 9c:55:db:29:22:7f:10:5d:86:8f:7f:17:ed:38:a4: 7d:43:93:10:52:ce:f2:d6:4f:f8:3e:38:ca:3b:a4: 01:57:91:26:69:22:a2:db:dc:9b:d9:fd:5d:3b:19: be:f6:a8:1a:3c:f9:da:08:44:7a:4d:ec:bc:18:77: e9:35:65:56:91:94:fe:3a:32:c2:e8:12:31:ad:30: dd:c6:98:a9:2e:f5:42:91:62:44:cf:92:0f:a6:70: 8c:95:88:9e:1a:a1:4a:0e:2a:52:93:c9:91:17:93: bd:ef:93:21:7d:96:eb:96:b2:4d:19:30:8b:f4:0a: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:7F:BF:ED:8F:3D:1A:D5:6E:83:24:3D:61:F7:0E:3D:C9:2E:B8 X509v3 Authority Key Identifier: keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/W2R_v-2PPRrVboMkPWH3Dj3JLrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.234.124.0/23 Signature Algorithm: sha256WithRSAEncryption a1:24:98:a1:dc:2f:62:aa:91:9c:48:b7:6f:57:38:93:93:68: 5e:94:f3:82:98:50:9d:07:c4:11:36:80:5d:db:c7:d3:28:3f: c1:b4:52:fb:6e:87:2f:08:8d:1f:f9:7d:56:54:9e:a5:f5:ae: a8:7e:3a:48:b7:86:6f:15:72:72:46:5c:3a:f6:8f:b0:59:91: 76:eb:f1:04:ce:36:42:ad:76:fa:65:46:b2:bc:bb:64:e8:05: 23:e7:45:5c:9a:a0:f4:89:51:4c:a6:56:d1:16:44:c2:e0:4d: ab:ff:5d:f9:6d:9c:7c:ae:53:c2:b4:5d:17:78:2d:ef:47:42: 78:56:d8:c1:63:16:e0:cc:2b:cf:87:f6:00:1a:64:66:2f:71: ed:72:20:af:86:f2:89:0e:51:f3:67:7a:92:ff:be:71:1f:66: a2:5b:6d:17:8c:81:d1:f2:9f:1a:21:e5:eb:01:4d:12:96:5e: d6:a4:98:c3:44:2b:7e:aa:10:99:1f:79:d0:9d:0b:24:ff:ad: ea:c8:c9:07:01:82:28:62:0b:be:95:ae:65:28:43:d2:d5:9d: d1:9c:20:1b:c5:b3:dc:c1:8f:46:24:56:c6:15:c2:41:ea:f2: 63:64:3c:ff:ac:25:58:d3:b1:a2:df:ec:fd:02:55:0e:aa:1b: 49:2e:ad:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUVqyNYzFwgEc5SJOOvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDNhMmQ2ZmFkNjUxNjc4ZTk2ZDI0ZTI0ZDE5ZDcxZmUz ODA0MDkwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjY0N2ZiZmVkOGYzZDFhZDU2ZTgzMjQzZDYxZjcwZTNkYzkyZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaOlvivU8n8FL+jRO+jukkQNa5Hd Y1LV6AKzKXRqDX+y6tf1Klg7tFa4uzynnbfpbtUoegidsXtbVub69VwpuNgDdJUD NOLLJ4rriQh2i39zZxF/3FfVqHR32+kdWdYVZzDYaFGrHisrvm+ii46d+zxRdKnX hLpJswkJov8GE+JjkgVSebqcVdspIn8QXYaPfxftOKR9Q5MQUs7y1k/4PjjKO6QB V5EmaSKi29yb2f1dOxm+9qgaPPnaCER6Tey8GHfpNWVWkZT+OjLC6BIxrTDdxpip LvVCkWJEz5IPpnCMlYieGqFKDipSk8mRF5O975MhfZbrlrJNGTCL9ApPlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtkf7/tjz0a1W6DJD1h9w49yS64MB8GA1UdIwQY MBaAFJnTotb61lFnjpbSTiTRnXH+OAQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUt NDhkNzM4YzU5NDdkLzEvVzJSX3YtMlBQUnJWYm9Na1BXSDNEajNKTHJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUtNDhkNzM4YzU5NDdk LzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlep8MA0G CSqGSIb3DQEBCwUAA4IBAQChJJih3C9iqpGcSLdvVziTk2helPOCmFCdB8QRNoBd 28fTKD/BtFL7bocvCI0f+X1WVJ6l9a6ofjpIt4ZvFXJyRlw69o+wWZF26/EEzjZC rXb6ZUayvLtk6AUj50VcmqD0iVFMplbRFkTC4E2r/135bZx8rlPCtF0XeC3vR0J4 VtjBYxbgzCvPh/YAGmRmL3HtciCvhvKJDlHzZ3qS/75xH2aiW20XjIHR8p8aIeXr AU0Sll7WpJjDRCt+qhCZH3nQnQsk/63qyMkHAYIoYgu+la5lKEPS1Z3RnCAbxbPc wY9GJFbGFcJB6vJjZDz/rCVY07Gi3+z9AlUOqhtJLq18 -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:15 2026 by rpki-client