This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/Gkzr8cmq5l-SJW535VAbg6PLMB0.roa File: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (raw, json) Hash identifier: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ= Subject key identifier: 1A:4C:EB:F1:C9:AA:E6:5F:92:25:6E:77:E5:50:1B:83:A3:CB:30:1D Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Certificate serial: 019B7F134F69694198FC917220193491D127 Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/Gkzr8cmq5l-SJW535VAbg6PLMB0.roa Signing time: Fri 02 Jan 2026 14:18:50 +0000 ROA not before: Fri 02 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55154 IP address blocks: 2a14:1040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:4f:69:69:41:98:fc:91:72:20:19:34:91:d1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Validity Not Before: Jan 2 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a4cebf1c9aae65f92256e77e5501b83a3cb301d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:3e:7c:60:3d:44:5e:52:1d:28:0d:48:58: 91:a2:07:c1:58:44:4b:a1:08:9c:35:e7:80:97:3f: 98:80:66:c4:60:55:01:b2:74:69:0d:4d:6f:49:25: c5:0f:bc:a6:cc:41:15:27:0b:9c:0b:22:17:bc:5a: da:bb:bc:bc:d4:00:28:74:52:54:c5:ec:45:a1:5d: 6f:94:72:79:54:4a:3c:56:9b:6a:ed:42:c5:2b:8a: 91:ac:94:eb:4c:53:59:ec:5c:b3:b9:01:a7:65:2f: 3f:ae:57:bc:37:e6:22:95:6e:45:65:64:fa:0d:c5: 1b:26:9b:fc:5c:a8:9c:28:11:b4:d5:ec:8a:b9:8b: 09:0b:3c:90:21:1b:8c:b9:a2:50:0f:89:34:e1:15: 62:ce:6f:2c:9e:c0:68:bb:ec:87:69:d0:79:05:71: af:6d:7f:81:f8:24:1b:19:d5:d2:78:f3:94:e1:8e: b3:24:29:68:cf:fe:9e:93:46:76:30:93:b4:58:b2: fb:04:d2:d6:a9:12:06:4d:d2:b0:7b:14:1f:f4:18: df:fa:44:5c:07:91:89:09:c1:57:13:f3:fd:07:6a: b9:f4:d1:ce:e7:4c:a3:78:11:d3:d2:2b:9b:29:00: d9:e9:c3:c0:3b:c7:da:28:d0:8f:bb:21:ce:df:fb: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4C:EB:F1:C9:AA:E6:5F:92:25:6E:77:E5:50:1B:83:A3:CB:30:1D X509v3 Authority Key Identifier: keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/Gkzr8cmq5l-SJW535VAbg6PLMB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1040::/29 Signature Algorithm: sha256WithRSAEncryption 59:9e:49:c7:cd:ec:e6:47:23:dc:88:9a:c4:e1:5c:82:23:97: a1:19:06:33:a6:b7:17:09:54:3f:a3:7b:29:81:11:ca:2b:0a: a0:c5:d9:d8:a2:bb:90:84:e5:fd:27:9e:d8:ab:58:87:37:53: 1a:49:d3:d0:89:82:08:51:55:41:fe:ad:85:7e:22:f1:43:7c: 5b:fa:49:e6:7d:c5:2a:b9:81:a8:86:d8:fb:dc:5e:1c:d2:84: d3:34:aa:85:b5:c3:03:5c:f0:c5:a2:f8:ba:43:fa:d3:58:7e: 60:e9:77:85:76:ca:33:e1:6c:20:00:bc:ac:3d:37:40:2c:39: 04:04:dd:4e:48:ab:c2:07:04:df:e5:e5:75:7f:68:60:02:d5: 6f:9a:f6:a4:af:70:32:b8:5a:7b:34:c7:bc:00:a4:6b:e8:b9: e7:a8:52:25:d9:2e:76:f7:9f:27:f3:54:e0:d9:e9:e7:b9:b8: 97:44:ec:7d:61:e6:74:53:03:df:c4:16:b8:ca:d5:13:f4:38: 96:65:c0:5d:b2:b2:9b:ec:5c:d2:96:26:09:70:a8:1b:66:66: 23:36:79:8a:a7:ad:7a:30:d2:53:5c:e2:bc:ed:6d:55:ea:bc: 83:96:83:12:1c:98:86:03:de:0f:55:aa:1a:cb:96:30:69:e9: 87:8a:2e:9a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/E09paUGY/JFyIBk0kdEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi YmI1YWQwHhcNMjYwMTAyMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTRjZWJmMWM5YWFlNjVmOTIyNTZlNzdlNTUwMWI4M2EzY2IzMDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgE+fGA9RF5SHSgNSFiRogfBWERL oQicNeeAlz+YgGbEYFUBsnRpDU1vSSXFD7ymzEEVJwucCyIXvFrau7y81AAodFJU xexFoV1vlHJ5VEo8Vptq7ULFK4qRrJTrTFNZ7FyzuQGnZS8/rle8N+YilW5FZWT6 DcUbJpv8XKicKBG01eyKuYsJCzyQIRuMuaJQD4k04RVizm8snsBou+yHadB5BXGv bX+B+CQbGdXSePOU4Y6zJCloz/6ek0Z2MJO0WLL7BNLWqRIGTdKwexQf9Bjf+kRc B5GJCcFXE/P9B2q59NHO50yjeBHT0iubKQDZ6cPAO8faKNCPuyHO3/trwQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBpM6/HJquZfkiVud+VQG4OjyzAdMB8GA1UdIwQY MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt NTQyMDRkZGQyY2E2LzEvR2t6cjhjbXE1bC1TSlc1MzVWQWJnNlBMTUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2 LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQQQDAN BgkqhkiG9w0BAQsFAAOCAQEAWZ5Jx83s5kcj3IiaxOFcgiOXoRkGM6a3FwlUP6N7 KYERyisKoMXZ2KK7kITl/See2KtYhzdTGknT0ImCCFFVQf6thX4i8UN8W/pJ5n3F KrmBqIbY+9xeHNKE0zSqhbXDA1zwxaL4ukP601h+YOl3hXbKM+FsIAC8rD03QCw5 BATdTkirwgcE3+XldX9oYALVb5r2pK9wMrhaezTHvACka+i556hSJdkudvefJ/NU 4Nnp57m4l0TsfWHmdFMD38QWuMrVE/Q4lmXAXbKym+xc0pYmCXCoG2ZmIzZ5iqet ejDSU1zivO1tVeq8g5aDEhyYhgPeD1WqGsuWMGnph4oumg== -----END CERTIFICATE-----Generated at Wed Jan 21 07:46:33 2026 by rpki-client