This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/r-GapXK3JuL-T7M03ZC61uSVfyE.roa File: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (raw, json) Hash identifier: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s= Subject key identifier: AF:E1:9A:A5:72:B7:26:E2:FE:4F:B3:34:DD:90:BA:D6:E4:95:7F:21 Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Certificate serial: 019B77593AB5C72E9D349DAD6A2BA1587BB1 Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/r-GapXK3JuL-T7M03ZC61uSVfyE.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198011 IP address blocks: 2a07:4600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3a:b5:c7:2e:9d:34:9d:ad:6a:2b:a1:58:7b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afe19aa572b726e2fe4fb334dd90bad6e4957f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:79:eb:28:14:cc:0e:43:3a:8a:42:ec:ee: 33:36:1f:5d:2a:83:48:63:f2:ff:77:19:8f:10:47: a6:32:96:ad:ad:0c:4a:48:2c:4c:0b:98:06:fc:51: 50:90:07:e9:a2:c2:4e:2c:b9:8e:60:c6:9d:e8:46: 96:5a:ed:7b:6c:4a:0d:d9:60:62:64:3c:3c:76:09: b1:5d:de:65:9e:27:f9:74:5a:27:7d:ee:2c:12:ec: bb:8b:3a:3d:2c:bb:0c:4d:36:61:fc:e3:e8:3a:21: 7e:30:74:d9:55:a8:ed:ba:e8:ba:d1:60:e5:a7:7d: a4:c2:98:6b:0c:ee:e5:01:bf:63:96:7e:b6:2b:93: 11:2d:7e:e5:89:01:ab:6d:fa:13:30:66:59:0e:23: 66:9e:28:4c:8f:72:95:3c:7c:24:1f:20:40:ec:0a: 60:97:81:87:e8:99:15:e9:ca:fd:1d:92:ca:0c:58: a9:bc:6a:12:88:c1:0c:36:16:90:12:4d:1c:de:e1: 0d:96:14:2b:bb:fd:fc:93:14:20:b7:ed:b7:24:20: dd:70:dd:6a:8a:92:85:2f:a0:be:2d:0a:2f:45:a6: 82:36:e7:08:a5:63:2d:38:0e:f5:76:b9:c7:75:e7: 4e:78:f1:f5:45:9d:7c:a6:77:d1:06:8d:4d:03:40: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E1:9A:A5:72:B7:26:E2:FE:4F:B3:34:DD:90:BA:D6:E4:95:7F:21 X509v3 Authority Key Identifier: keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/r-GapXK3JuL-T7M03ZC61uSVfyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:4600::/29 Signature Algorithm: sha256WithRSAEncryption 58:da:38:00:c1:3e:48:1b:cb:a0:47:48:91:18:12:dd:26:95: a6:4b:08:d6:c6:7c:02:70:da:ab:1f:86:25:58:97:68:e7:0a: 6c:d3:e5:85:32:2a:c2:2c:6d:83:84:6c:bf:dc:7b:cd:8d:d5: 17:b5:76:30:2e:9b:38:40:3d:2c:54:84:a7:df:92:3c:8d:17: b3:1f:87:76:a9:c5:33:b7:96:22:29:ce:9a:bb:ed:c0:e6:ee: 7d:d9:53:7e:3f:c0:86:39:56:60:e5:42:50:c9:60:8b:88:d7: f5:03:8e:25:c1:b0:a4:ed:c2:c4:71:84:c8:ea:b1:9b:2c:fa: 6e:54:9c:f6:43:8d:b0:a9:b7:6c:3d:a4:95:fa:05:ee:e2:33: 29:0b:08:6a:5e:3d:7e:b0:f7:fc:7c:01:8f:a3:56:90:99:dc: 08:d8:08:64:97:f3:aa:05:43:8a:ff:b9:44:fc:a0:e2:9e:bb: e4:37:f9:68:2c:d4:28:ce:66:af:b2:35:e0:55:af:42:0d:ba: 58:31:01:69:c1:b6:aa:5c:92:eb:6b:ab:b8:c0:f6:98:a9:0f: 95:9e:3c:5f:a6:88:76:55:7a:f4:76:aa:80:f2:92:51:e7:d5: 3c:9e:83:d0:e1:b0:97:3f:b7:aa:50:cb:a7:57:e3:42:2c:42: 87:28:e0:6e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WTq1xy6dNJ2taiuhWHuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzY4ZjBhOGQxZWQxMTczZWNlZGM2ODljMTc3YjI0OWVl M2E2OGMwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmUxOWFhNTcyYjcyNmUyZmU0ZmIzMzRkZDkwYmFkNmU0OTU3ZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4B56ygUzA5DOopC7O4zNh9dKoNI Y/L/dxmPEEemMpatrQxKSCxMC5gG/FFQkAfposJOLLmOYMad6EaWWu17bEoN2WBi ZDw8dgmxXd5lnif5dFonfe4sEuy7izo9LLsMTTZh/OPoOiF+MHTZVajtuui60WDl p32kwphrDO7lAb9jln62K5MRLX7liQGrbfoTMGZZDiNmnihMj3KVPHwkHyBA7Apg l4GH6JkV6cr9HZLKDFipvGoSiMEMNhaQEk0c3uENlhQru/38kxQgt+23JCDdcN1q ipKFL6C+LQovRaaCNucIpWMtOA71drnHdedOePH1RZ18pnfRBo1NA0CvxQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK/hmqVytybi/k+zNN2QutbklX8hMB8GA1UdIwQY MBaAFLF2jwqNHtEXPs7caJwXeySe46aMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYt MjQyMDFjMjUyOThmLzEvci1HYXBYSzNKdUwtVDdNMDNaQzYxdVNWZnlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYtMjQyMDFjMjUyOThm LzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgdGADAN BgkqhkiG9w0BAQsFAAOCAQEAWNo4AME+SBvLoEdIkRgS3SaVpksI1sZ8AnDaqx+G JViXaOcKbNPlhTIqwixtg4Rsv9x7zY3VF7V2MC6bOEA9LFSEp9+SPI0Xsx+HdqnF M7eWIinOmrvtwObufdlTfj/AhjlWYOVCUMlgi4jX9QOOJcGwpO3CxHGEyOqxmyz6 blSc9kONsKm3bD2klfoF7uIzKQsIal49frD3/HwBj6NWkJncCNgIZJfzqgVDiv+5 RPyg4p675Df5aCzUKM5mr7I14FWvQg26WDEBacG2qlyS62uruMD2mKkPlZ48X6aI dlV69HaqgPKSUefVPJ6D0OGwlz+3qlDLp1fjQixChyjgbg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:41:53 2026 by rpki-client