This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/wga_WdR_8QvLv6SYCAFbkFgE4IY.roa File: wga_WdR_8QvLv6SYCAFbkFgE4IY.roa (raw, json) Hash identifier: 1WShRNTFDIi2o5zhM9Z4CcfauIXDzI1Kphz/pH1YsqE= Subject key identifier: C2:06:BF:59:D4:7F:F1:0B:CB:BF:A4:98:08:01:5B:90:58:04:E0:86 Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148 Certificate serial: 019B791071E195016730F837540DC4C94BB1 Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/wga_WdR_8QvLv6SYCAFbkFgE4IY.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20647 IP address blocks: 91.102.8.0/21 maxlen: 21 185.27.156.0/22 maxlen: 22 194.29.224.0/19 maxlen: 19 2a02:f28::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:71:e1:95:01:67:30:f8:37:54:0d:c4:c9:4b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c206bf59d47ff10bcbbfa49808015b905804e086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:fe:fb:65:55:c0:e6:d2:8a:80:a6:a8:e4: 26:ab:4e:11:bc:b8:85:4c:8e:73:4c:5e:cc:d5:be: fb:8f:70:e3:b3:4f:a0:2c:b8:55:6b:80:5d:cb:08: 9c:51:7f:75:73:17:9c:20:3d:f9:d7:6a:1c:30:f3: 6e:26:de:2c:d2:a2:2e:30:3c:6e:3c:ac:a6:5c:94: 8d:ff:db:b3:e9:95:c4:0e:ea:20:90:3b:d9:cd:44: 50:39:44:66:2c:46:70:19:24:df:95:1c:84:ea:1a: c8:5e:9a:a1:df:64:21:44:ec:35:3f:64:64:99:7d: 90:e3:ea:01:01:01:ae:86:a7:6c:8a:c4:bd:52:04: 6d:09:db:a5:19:31:66:9c:6e:41:95:0b:0b:78:70: 24:5f:7a:04:4d:07:f4:28:cd:03:86:e5:a6:85:d7: cc:f2:c4:7f:da:fd:1c:bc:7d:52:ac:3b:1b:b9:a9: 15:2f:d2:47:23:5e:db:93:30:55:16:8a:b4:2a:9b: a6:0a:b4:79:5c:f7:8c:96:f3:63:7f:9f:dc:69:b4: 63:42:6e:23:00:3b:72:26:98:3c:49:c7:d3:ea:ff: 0f:4c:ee:cf:57:49:31:94:92:4a:aa:8c:2a:cb:14: 11:75:36:72:3a:14:41:e0:19:32:e3:cf:5e:16:0b: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:BF:59:D4:7F:F1:0B:CB:BF:A4:98:08:01:5B:90:58:04:E0:86 X509v3 Authority Key Identifier: keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/wga_WdR_8QvLv6SYCAFbkFgE4IY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.8.0/21 185.27.156.0/22 194.29.224.0/19 IPv6: 2a02:f28::/32 Signature Algorithm: sha256WithRSAEncryption 38:00:f0:f8:04:74:68:92:37:06:a1:a3:70:66:88:a8:14:eb: b2:1c:6a:38:60:10:3b:cc:58:7b:be:db:85:3b:c6:ff:8d:ce: 06:35:ec:8a:c2:1f:32:de:0a:85:23:b9:45:09:67:ca:d4:25: bf:dc:d2:c2:40:d0:52:54:11:1b:5a:b4:31:7b:1a:70:8f:22: 51:e8:a4:a2:94:b5:97:d8:aa:b1:b7:84:c5:d0:12:7b:b8:b9: 75:79:b9:7c:90:17:20:53:08:54:50:cc:4d:94:db:92:5f:d9: 41:39:7b:f3:81:97:31:97:e6:e5:1d:a7:cc:6c:47:23:6b:f6: 0e:29:98:34:c3:d1:b6:79:2a:01:8d:e6:4d:9a:06:1c:fc:77: d2:61:af:40:5e:3c:4c:24:b3:44:8e:c6:8d:04:67:37:36:31: 76:40:72:01:98:c3:05:04:2e:a5:40:a2:8c:ac:75:65:d3:a1: 24:d2:0b:67:dc:4c:7a:1e:3f:ea:e4:85:41:70:cb:98:71:ff: 28:ae:cc:68:95:3d:16:ac:03:53:46:8c:67:fa:30:14:a4:59: 6a:81:e6:ba:c4:d5:67:cc:ec:f2:ec:21:b4:39:a4:47:62:bb: 0a:96:fb:c3:45:6b:c1:84:1d:49:97:2e:82:c9:cb:df:6f:36: 9a:60:30:d6 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EHHhlQFnMPg3VA3EyUuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh ZTMxNDgwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjA2YmY1OWQ0N2ZmMTBiY2JiZmE0OTgwODAxNWI5MDU4MDRlMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBX++2VVwObSioCmqOQmq04RvLiF TI5zTF7M1b77j3Djs0+gLLhVa4BdywicUX91cxecID3512ocMPNuJt4s0qIuMDxu PKymXJSN/9uz6ZXEDuogkDvZzURQOURmLEZwGSTflRyE6hrIXpqh32QhROw1P2Rk mX2Q4+oBAQGuhqdsisS9UgRtCdulGTFmnG5BlQsLeHAkX3oETQf0KM0DhuWmhdfM 8sR/2v0cvH1SrDsbuakVL9JHI17bkzBVFoq0KpumCrR5XPeMlvNjf5/cabRjQm4j ADtyJpg8ScfT6v8PTO7PV0kxlJJKqowqyxQRdTZyOhRB4Bky489eFgsRqwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMIGv1nUf/ELy7+kmAgBW5BYBOCGMB8GA1UdIwQY MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt YjZmMWNmYWE2OTg1LzEvd2dhX1dkUl84UXZMdjZTWUNBRmJrRmdFNElZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1 LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDW2YIAwQC uRucAwQFwh3gMA0EAgACMAcDBQAqAg8oMA0GCSqGSIb3DQEBCwUAA4IBAQA4APD4 BHRokjcGoaNwZoioFOuyHGo4YBA7zFh7vtuFO8b/jc4GNeyKwh8y3gqFI7lFCWfK 1CW/3NLCQNBSVBEbWrQxexpwjyJR6KSilLWX2Kqxt4TF0BJ7uLl1ebl8kBcgUwhU UMxNlNuSX9lBOXvzgZcxl+blHafMbEcja/YOKZg0w9G2eSoBjeZNmgYc/HfSYa9A XjxMJLNEjsaNBGc3NjF2QHIBmMMFBC6lQKKMrHVl06Ek0gtn3Ex6Hj/q5IVBcMuY cf8orsxolT0WrANTRoxn+jAUpFlqgea6xNVnzOzy7CG0OaRHYrsKlvvDRWvBhB1J ly6CycvfbzaaYDDW -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:16 2026 by rpki-client