This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/W2JVDI-08lmKNZhAYHd2tvRmyTM.roa File: W2JVDI-08lmKNZhAYHd2tvRmyTM.roa (raw, json) Hash identifier: ckBzzLd5OwJEVbSyU7U9n0rLQV1aHwoolzgedy1E6y0= Subject key identifier: 5B:62:55:0C:8F:B4:F2:59:8A:35:98:40:60:77:76:B6:F4:66:C9:33 Certificate issuer: /CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86 Certificate serial: 019B7F15B4FB93BDEBD4A8B16482E3281B9C Authority key identifier: D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/W2JVDI-08lmKNZhAYHd2tvRmyTM.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205695 IP address blocks: 89.40.29.0/24 maxlen: 24 185.46.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b4:fb:93:bd:eb:d4:a8:b1:64:82:e3:28:1b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b62550c8fb4f2598a359840607776b6f466c933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:75:81:a4:4b:78:83:c7:49:0e:a6:8c:33: 46:da:94:a0:ab:36:55:d2:cc:14:ea:24:be:d4:32: 70:f4:88:02:f8:4a:fa:15:92:c8:b0:26:8e:0f:ad: fd:a7:8e:b2:d6:79:86:db:f4:e9:83:8f:8a:e6:3e: 7e:a1:d5:92:e1:4a:e4:b9:ca:04:60:eb:32:db:ea: 2c:2e:6a:0a:e1:69:99:18:76:f3:21:f5:51:5b:37: e3:d6:96:45:eb:f0:c3:23:20:71:35:81:81:cb:dc: b2:92:46:76:b8:22:94:95:b2:d1:f6:bc:1f:b1:2c: 62:be:f5:f5:89:9f:11:01:d5:72:6b:57:50:45:e2: 45:b9:a8:f7:e8:c5:d7:c5:2b:51:1c:d0:b1:3f:12: bf:94:49:d8:1d:0a:ee:a1:9a:61:c0:27:0b:80:5c: 0c:d7:07:d9:6a:e6:d7:c7:39:58:a7:e4:79:aa:09: cb:2e:42:51:9c:fc:41:05:a3:73:b3:17:13:34:46: 12:13:ed:7d:f7:76:31:76:5e:64:ad:ed:58:cd:5a: c1:f3:7b:f6:4f:00:7a:73:a5:44:f6:09:e5:00:79: 41:42:fe:c2:ae:40:54:f5:a9:b4:61:aa:bf:00:15: 0e:6e:76:3e:61:80:f8:87:b2:84:b0:84:06:6e:cb: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:55:0C:8F:B4:F2:59:8A:35:98:40:60:77:76:B6:F4:66:C9:33 X509v3 Authority Key Identifier: keyid:D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/W2JVDI-08lmKNZhAYHd2tvRmyTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.29.0/24 185.46.238.0/24 Signature Algorithm: sha256WithRSAEncryption 19:e9:5f:12:92:e5:df:3b:87:87:d7:9d:59:f1:1f:90:04:1a: 32:4b:a8:eb:0b:ef:fe:2d:93:a3:03:a4:d0:d4:4c:4b:55:d2: c6:14:38:08:4e:0e:a0:ed:8d:7e:d1:76:06:cb:b2:d7:6c:fa: 0d:00:2a:d0:04:fc:c5:43:0d:63:b4:19:4d:5e:ae:af:70:1b: ee:09:85:ff:ed:96:3d:74:58:d8:a7:0d:82:a5:55:3d:a0:db: fa:69:b4:56:22:a0:65:cc:22:67:ca:f7:20:4b:6c:44:12:40: 3e:62:f6:31:a3:92:0d:33:95:ea:af:ca:a7:5b:f5:91:41:82: 35:9c:34:66:d3:97:9a:3c:70:2d:d6:d5:d8:8e:b8:91:0b:8b: f8:2e:6e:8a:5b:7d:4c:53:7d:c9:bd:4b:9e:d7:96:f7:f3:3e: b3:bd:e6:a8:1b:4a:3a:52:08:3c:98:46:4e:ea:b9:db:41:be: 2c:60:2f:65:00:b9:f4:40:9a:18:28:65:41:50:31:5a:86:98: 1c:d0:72:79:66:5a:e6:e1:fc:fb:9e:24:43:db:74:7a:d1:c1: 0b:43:41:88:d7:80:7b:27:98:cd:ee:d6:e3:0f:5d:99:02:7f: 4b:82:88:41:54:aa:c5:0f:83:cb:91:a3:91:30:4b:a3:b3:9f: 4a:5a:ec:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FbT7k73r1KixZILjKBucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMDI3MDZmM2RkZTJiYjEyZTJiYTkxMWE5YmUwNWM4ZDQ5 NzhjODYwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjYyNTUwYzhmYjRmMjU5OGEzNTk4NDA2MDc3NzZiNmY0NjZjOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6J1gaRLeIPHSQ6mjDNG2pSgqzZV 0swU6iS+1DJw9IgC+Er6FZLIsCaOD639p46y1nmG2/Tpg4+K5j5+odWS4UrkucoE YOsy2+osLmoK4WmZGHbzIfVRWzfj1pZF6/DDIyBxNYGBy9yykkZ2uCKUlbLR9rwf sSxivvX1iZ8RAdVya1dQReJFuaj36MXXxStRHNCxPxK/lEnYHQruoZphwCcLgFwM 1wfZaubXxzlYp+R5qgnLLkJRnPxBBaNzsxcTNEYSE+1993Yxdl5kre1YzVrB83v2 TwB6c6VE9gnlAHlBQv7CrkBU9am0Yaq/ABUObnY+YYD4h7KEsIQGbsuOuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFtiVQyPtPJZijWYQGB3drb0ZskzMB8GA1UdIwQY MBaAFNMCcG893iuxLiupEam+BcjUl4yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHdKd2J6M2VLN0V1SzZrUnFiNEZ5TlNYaklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmNhZWEtMmYxNC00ZDRkLWI1NWQt YzhkODQ5ODViYmQ5LzEvVzJKVkRJLTA4bG1LTlpoQVlIZDJ0dlJteVRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81ZmNhZWEtMmYxNC00ZDRkLWI1NWQtYzhkODQ5ODViYmQ5 LzEvMHdKd2J6M2VLN0V1SzZrUnFiNEZ5TlNYaklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSgdAwQA uS7uMA0GCSqGSIb3DQEBCwUAA4IBAQAZ6V8SkuXfO4eH151Z8R+QBBoyS6jrC+/+ LZOjA6TQ1ExLVdLGFDgITg6g7Y1+0XYGy7LXbPoNACrQBPzFQw1jtBlNXq6vcBvu CYX/7ZY9dFjYpw2CpVU9oNv6abRWIqBlzCJnyvcgS2xEEkA+YvYxo5INM5Xqr8qn W/WRQYI1nDRm05eaPHAt1tXYjriRC4v4Lm6KW31MU33JvUue15b38z6zveaoG0o6 Ugg8mEZO6rnbQb4sYC9lALn0QJoYKGVBUDFahpgc0HJ5Zlrm4fz7niRD23R60cEL Q0GI14B7J5jN7tbjD12ZAn9LgohBVKrFD4PLkaORMEujs59KWuw3 -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:08 2026 by rpki-client