This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WX-Ns3d4sOz2OQDUc07n-nenfMc.roa File: WX-Ns3d4sOz2OQDUc07n-nenfMc.roa (raw, json) Hash identifier: 9M+VcWoOEECfWKXPvsONXqY49bfC4kLXBjrcJJUqJJU= Subject key identifier: 59:7F:8D:B3:77:78:B0:EC:F6:39:00:D4:73:4E:E7:FA:77:A7:7C:C7 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910A96875189C1AB8CF906351B20E03 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WX-Ns3d4sOz2OQDUc07n-nenfMc.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211350 IP address blocks: 2a12:bec0:74ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a9:68:75:18:9c:1a:b8:cf:90:63:51:b2:0e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=597f8db37778b0ecf63900d4734ee7fa77a77cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:eb:2d:77:a8:af:f5:05:63:c6:13:ef:1b: 49:40:2b:60:04:e1:e1:2a:56:94:2f:36:9e:a4:0b: 18:86:2e:a5:ce:4a:98:a8:ec:7f:d6:40:99:9d:67: 00:91:69:99:1a:ed:54:2e:7b:58:43:0e:6c:e3:81: f9:c9:56:1c:84:00:e1:e1:46:16:50:39:95:79:c9: bd:d7:62:ca:4c:09:81:97:62:75:57:fe:8a:f8:ed: 74:1a:96:fd:f5:ad:f1:3c:bb:ea:4f:0e:df:b0:16: 11:1a:f5:00:97:87:47:13:3d:8d:0e:78:06:6b:8b: d7:d8:76:54:2a:e2:56:0d:ff:62:fa:af:30:6f:cc: de:19:b0:28:37:fc:a0:49:e9:4a:1c:44:fc:76:53: 6a:c2:55:07:44:41:05:53:bd:e5:36:6f:23:44:7e: 0d:7c:a2:ea:45:d2:a5:b2:7e:64:4d:be:f6:d0:7a: 4e:42:19:0d:c3:99:4a:6e:9f:98:bb:ce:72:a3:64: 5e:2e:8c:50:85:50:9b:8b:34:ae:46:2c:82:58:f3: 45:96:a6:ee:b4:8b:f4:57:41:c1:28:11:41:02:50: b2:44:c9:ff:65:7c:1e:60:b6:2e:f7:e8:ce:2e:51: 2b:6d:20:58:90:b1:f0:dc:71:c9:b2:c2:36:0d:c7: c0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7F:8D:B3:77:78:B0:EC:F6:39:00:D4:73:4E:E7:FA:77:A7:7C:C7 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WX-Ns3d4sOz2OQDUc07n-nenfMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:74ef::/48 Signature Algorithm: sha256WithRSAEncryption 7c:3c:3b:d0:e0:e6:07:fa:a7:07:99:b1:ec:db:d5:38:10:a5: da:a5:68:09:61:5f:ae:bb:34:a5:6e:e2:01:14:2e:86:35:17: 1e:7b:e2:65:e3:e3:24:af:47:7e:6e:67:e4:ee:33:52:fd:2c: b4:41:f5:aa:5c:37:90:b6:0d:94:83:b8:9c:d2:fd:1d:ca:df: 60:f7:dd:2a:ae:79:aa:b0:9b:96:b6:28:70:7d:6a:e9:4a:da: ea:26:cd:b9:c0:95:99:46:c1:ee:f3:30:06:37:4a:35:d0:15: 36:6a:eb:a0:e0:f3:ce:3a:4d:dd:75:85:ff:60:ae:e1:b9:92: 1d:51:c1:73:61:0a:ec:aa:2f:d4:4d:7d:c5:6e:55:3b:c1:53: 47:bc:e3:27:d4:45:d5:41:6b:59:04:cd:aa:2a:71:6a:0d:ea: 4e:80:7f:78:26:98:c6:4b:62:2a:e8:94:0a:f5:3b:8a:e6:0e: 20:cc:1d:e6:5b:fa:95:5e:c4:0c:02:8b:f3:d9:67:cf:ae:e1: be:99:01:13:03:5f:c2:77:bf:dc:56:c6:7b:1e:8b:27:32:50: ef:02:70:8a:c3:ab:e1:03:2b:84:a8:71:9c:d0:ad:84:30:29: c2:5e:a1:3a:aa:58:a8:44:71:d4:04:64:e7:49:6e:97:40:54: 22:9a:9b:b8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKlodRicGrjPkGNRsg4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTdmOGRiMzc3NzhiMGVjZjYzOTAwZDQ3MzRlZTdmYTc3YTc3Y2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxXrLXeor/UFY8YT7xtJQCtgBOHh KlaULzaepAsYhi6lzkqYqOx/1kCZnWcAkWmZGu1ULntYQw5s44H5yVYchADh4UYW UDmVecm912LKTAmBl2J1V/6K+O10Gpb99a3xPLvqTw7fsBYRGvUAl4dHEz2NDngG a4vX2HZUKuJWDf9i+q8wb8zeGbAoN/ygSelKHET8dlNqwlUHREEFU73lNm8jRH4N fKLqRdKlsn5kTb720HpOQhkNw5lKbp+Yu85yo2ReLoxQhVCbizSuRiyCWPNFlqbu tIv0V0HBKBFBAlCyRMn/ZXweYLYu9+jOLlErbSBYkLHw3HHJssI2DcfAvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFl/jbN3eLDs9jkA1HNO5/p3p3zHMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvV1gtTnMzZDRzT3oyT1FEVWMwN24tbmVuZk1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhK+wHTv MA0GCSqGSIb3DQEBCwUAA4IBAQB8PDvQ4OYH+qcHmbHs29U4EKXapWgJYV+uuzSl buIBFC6GNRcee+Jl4+Mkr0d+bmfk7jNS/Sy0QfWqXDeQtg2Ug7ic0v0dyt9g990q rnmqsJuWtihwfWrpStrqJs25wJWZRsHu8zAGN0o10BU2auug4PPOOk3ddYX/YK7h uZIdUcFzYQrsqi/UTX3FblU7wVNHvOMn1EXVQWtZBM2qKnFqDepOgH94JpjGS2Iq 6JQK9TuK5g4gzB3mW/qVXsQMAovz2WfPruG+mQETA1/Cd7/cVsZ7HosnMlDvAnCK w6vhAyuEqHGc0K2EMCnCXqE6qlioRHHUBGTnSW6XQFQimpu4 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:14 2026 by rpki-client