This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/wgz-8hglwHR911ob9HfwohhdtgQ.roa File: wgz-8hglwHR911ob9HfwohhdtgQ.roa (raw, json) Hash identifier: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM= Subject key identifier: C2:0C:FE:F2:18:25:C0:74:7D:D7:5A:1B:F4:77:F0:A2:18:5D:B6:04 Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Certificate serial: 019B7D5C14E279B3FE3B7CC8EF749E2402D7 Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/wgz-8hglwHR911ob9HfwohhdtgQ.roa Signing time: Fri 02 Jan 2026 06:19:05 +0000 ROA not before: Fri 02 Jan 2026 06:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212555 IP address blocks: 45.11.108.0/24 maxlen: 24 45.11.109.0/24 maxlen: 24 45.11.110.0/24 maxlen: 24 45.11.111.0/24 maxlen: 24 45.158.104.0/24 maxlen: 24 45.158.105.0/24 maxlen: 24 45.158.106.0/24 maxlen: 24 45.158.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:14:e2:79:b3:fe:3b:7c:c8:ef:74:9e:24:02:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Validity Not Before: Jan 2 06:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20cfef21825c0747dd75a1bf477f0a2185db604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:07:c5:68:95:b3:ad:70:ed:49:6f:d4:0a: d3:34:96:cc:c0:72:64:43:53:7a:f6:d8:3e:27:68: 61:00:46:fb:0b:6b:fb:05:59:b8:a3:b0:6d:69:98: d3:a4:d6:0d:de:8a:a5:de:93:48:d4:56:81:bb:b3: db:6a:86:a5:56:48:e5:ed:80:f6:22:f5:9b:3c:44: fa:ca:24:1f:47:65:dc:29:ad:d2:4b:3d:67:32:c9: 2d:a3:1e:8e:d9:9b:1d:b0:21:ac:92:37:a1:53:c4: 48:68:83:42:e1:cf:9d:83:6a:8c:50:a0:d3:fa:91: d3:a0:11:3d:92:a0:0a:9b:e8:57:d2:6c:e1:bd:96: 83:25:a0:d0:fc:38:03:5d:34:b8:54:9c:fc:5e:ea: fa:40:cc:97:89:19:a2:22:3e:f5:cd:41:ff:7c:42: 08:f1:90:0b:ce:cc:50:8c:49:cf:95:5f:c1:d8:fe: 46:23:6d:62:1b:84:bf:29:37:92:20:bf:68:5e:02: 21:35:ef:7a:f9:a1:cb:11:cb:cd:5e:2a:7e:e8:7f: 4a:bd:71:f2:d6:87:ed:f5:1d:6f:d9:ce:ae:1e:78: fa:6f:61:e7:55:05:92:8c:c1:9a:76:f5:8f:5f:fb: 8f:bd:a6:51:56:ff:d8:02:9b:f0:f4:45:cd:36:cd: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0C:FE:F2:18:25:C0:74:7D:D7:5A:1B:F4:77:F0:A2:18:5D:B6:04 X509v3 Authority Key Identifier: keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/wgz-8hglwHR911ob9HfwohhdtgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.108.0/22 45.158.104.0/22 Signature Algorithm: sha256WithRSAEncryption 33:0f:a1:62:28:b5:d6:de:bc:65:26:71:32:21:bf:ca:dc:f6: 96:d0:6d:d2:8c:59:1e:be:e6:7a:bd:fa:a9:2c:98:3e:19:2e: b1:58:4f:e5:ce:29:ee:eb:a4:9f:3c:59:1b:f3:09:ce:03:45: ce:c1:34:d2:b8:0b:2f:54:a7:97:3c:ba:da:47:98:69:b1:0e: a9:c2:c3:69:76:b8:cb:46:97:38:e1:74:e1:5d:dc:02:f3:58: dc:81:f9:7c:15:43:01:59:17:0c:81:94:57:16:e0:5c:13:70: 8e:64:75:3c:f2:67:d3:b4:dc:04:61:ef:4a:4c:96:82:e5:eb: d2:17:52:3c:f5:dd:bb:f0:70:7e:a8:ea:0b:c9:e5:7e:53:f1: 90:80:92:c8:dd:cd:90:81:15:1e:6e:5f:0c:34:78:0d:d8:a9: 45:e8:77:e3:0b:5b:64:ac:b6:a8:58:89:79:30:b2:0f:28:07: 90:dd:37:3a:ae:0a:23:0c:91:1b:e5:63:fc:8e:9c:a8:7c:17: f6:20:55:5e:61:5d:b6:4d:7b:c7:48:fe:be:4d:5f:5e:a4:ce: ad:1d:c6:b2:64:ff:87:3d:5c:0f:33:8e:73:61:82:7a:3a:cd: 12:a1:79:18:f7:ed:42:de:d8:db:36:c7:44:dc:29:7a:36:46: 5a:61:6c:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XBTiebP+O3zI73SeJALXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj YjFkYzkwHhcNMjYwMTAyMDYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjBjZmVmMjE4MjVjMDc0N2RkNzVhMWJmNDc3ZjBhMjE4NWRiNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o8HxWiVs61w7Ulv1ArTNJbMwHJk Q1N69tg+J2hhAEb7C2v7BVm4o7BtaZjTpNYN3oql3pNI1FaBu7PbaoalVkjl7YD2 IvWbPET6yiQfR2XcKa3SSz1nMsktox6O2ZsdsCGskjehU8RIaINC4c+dg2qMUKDT +pHToBE9kqAKm+hX0mzhvZaDJaDQ/DgDXTS4VJz8Xur6QMyXiRmiIj71zUH/fEII 8ZALzsxQjEnPlV/B2P5GI21iG4S/KTeSIL9oXgIhNe96+aHLEcvNXip+6H9KvXHy 1oft9R1v2c6uHnj6b2HnVQWSjMGadvWPX/uPvaZRVv/YApvw9EXNNs3hpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMIM/vIYJcB0fddaG/R38KIYXbYEMB8GA1UdIwQY MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt NTc0NjJjMjgzMjk0LzEvd2d6LThoZ2x3SFI5MTFvYjlIZndvaGhkdGdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0 LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLQtsAwQC LZ5oMA0GCSqGSIb3DQEBCwUAA4IBAQAzD6FiKLXW3rxlJnEyIb/K3PaW0G3SjFke vuZ6vfqpLJg+GS6xWE/lzinu66SfPFkb8wnOA0XOwTTSuAsvVKeXPLraR5hpsQ6p wsNpdrjLRpc44XThXdwC81jcgfl8FUMBWRcMgZRXFuBcE3COZHU88mfTtNwEYe9K TJaC5evSF1I89d278HB+qOoLyeV+U/GQgJLI3c2QgRUebl8MNHgN2KlF6HfjC1tk rLaoWIl5MLIPKAeQ3Tc6rgojDJEb5WP8jpyofBf2IFVeYV22TXvHSP6+TV9epM6t HcayZP+HPVwPM45zYYJ6Os0SoXkY9+1C3tjbNsdE3Cl6NkZaYWxr -----END CERTIFICATE-----Generated at Mon Feb 9 21:02:47 2026 by rpki-client