This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/41LKwPw-LLlX1iRyv05q0eGVxQA.roa File: 41LKwPw-LLlX1iRyv05q0eGVxQA.roa (raw, json) Hash identifier: /hldaDmFUq5ScLzS5Do9OQvpCy6tJ6Mldta+rPoVSBs= Subject key identifier: E3:52:CA:C0:FC:3E:2C:B9:57:D6:24:72:BF:4E:6A:D1:E1:95:C5:00 Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774 Certificate serial: 019B7F8458494E592FD5CBEE85F6A02D3C6E Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/41LKwPw-LLlX1iRyv05q0eGVxQA.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35062 IP address blocks: 2a02:8205:480b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:58:49:4e:59:2f:d5:cb:ee:85:f6:a0:2d:3c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e352cac0fc3e2cb957d62472bf4e6ad1e195c500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:20:a6:99:44:fe:0d:c5:7a:55:7a:b3:2a:0e: b9:1c:69:4b:f6:17:af:54:4c:a4:cf:dd:73:94:d7: c5:00:7c:8d:aa:9e:c8:76:a3:dd:24:61:32:b5:0d: 16:46:24:e3:b2:90:84:7b:e7:4f:95:87:d5:17:6b: 0e:53:27:f9:82:0c:27:a8:88:c5:5a:91:a8:47:48: e7:e7:1e:3e:83:22:fd:e7:9a:cf:c3:4b:05:0d:2e: a8:be:7a:ce:68:08:50:b2:da:f8:4a:11:87:41:92: a4:83:8c:04:9f:b9:99:ff:0a:f7:f5:3c:9b:db:69: 9a:22:44:6d:9f:f1:85:dc:09:f6:61:e8:5b:77:b5: 6d:b9:03:12:fe:7d:8b:38:82:e6:87:47:32:54:fa: 78:cf:2a:e0:e9:e4:7b:7d:12:b3:90:fa:30:5e:97: 91:79:27:1a:50:b2:26:49:5d:01:de:00:a1:6d:cf: 28:cf:64:67:3d:1b:1f:94:f1:aa:a7:3b:1a:e3:c4: 80:fe:5a:98:b7:c4:96:2b:39:a9:32:76:02:d1:ea: 54:2d:9a:61:b5:80:05:a8:7e:35:2e:b7:7f:0e:41: 7b:d5:bc:9d:97:c3:83:a5:b9:c7:fa:17:5a:79:cb: d6:07:c4:f0:70:a6:a7:77:d4:b8:28:07:12:32:02: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:CA:C0:FC:3E:2C:B9:57:D6:24:72:BF:4E:6A:D1:E1:95:C5:00 X509v3 Authority Key Identifier: keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/41LKwPw-LLlX1iRyv05q0eGVxQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:8205:480b::/48 Signature Algorithm: sha256WithRSAEncryption 57:db:b0:05:36:12:bd:9b:4d:97:c1:23:42:46:57:da:0a:14: 82:ee:fb:59:9c:9b:a6:71:cb:d7:91:24:f8:3a:3a:8e:41:c8: 8f:bf:38:03:f5:78:2f:8e:7f:d0:d6:20:38:7a:bc:e7:65:23: d9:42:1b:b9:93:90:13:b0:58:cc:55:bb:b8:74:8d:8e:a7:f8: 1e:35:6e:4a:37:1c:71:ee:1e:4e:66:9c:13:fe:3f:b2:01:37: a4:0a:07:a1:ed:3c:af:15:79:36:62:9c:64:c2:73:78:1e:d3: dd:83:80:8b:9d:69:4b:49:a1:0d:30:8f:d0:ea:3f:9f:75:ad: 08:52:24:a3:6e:23:8a:36:b9:39:f8:55:fb:6e:43:ed:b3:a6: 52:c4:af:09:60:0b:6b:27:08:e1:50:19:c9:61:d5:26:39:ba: e0:1d:2c:b7:d7:18:cf:3d:66:29:88:dd:f1:95:f8:cb:9a:ef: 89:37:b2:9f:fd:51:25:03:0d:fb:ae:8c:b6:02:35:72:b2:fd: 6b:c6:af:89:f5:66:a3:44:78:e6:71:84:6c:cc:8a:2d:6a:92: e9:4e:51:46:97:2d:d3:b9:1d:3f:c2:7d:69:93:7e:34:bf:63: 77:85:f1:59:68:62:bc:15:a7:5b:93:81:48:7b:fd:10:3a:e3: a5:90:d9:28 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hFhJTlkv1cvuhfagLTxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3 Zjc3NzQwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzUyY2FjMGZjM2UyY2I5NTdkNjI0NzJiZjRlNmFkMWUxOTVjNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCCmmUT+DcV6VXqzKg65HGlL9hev VEykz91zlNfFAHyNqp7IdqPdJGEytQ0WRiTjspCEe+dPlYfVF2sOUyf5ggwnqIjF WpGoR0jn5x4+gyL955rPw0sFDS6ovnrOaAhQstr4ShGHQZKkg4wEn7mZ/wr39Tyb 22maIkRtn/GF3An2Yehbd7VtuQMS/n2LOILmh0cyVPp4zyrg6eR7fRKzkPowXpeR eScaULImSV0B3gChbc8oz2RnPRsflPGqpzsa48SA/lqYt8SWKzmpMnYC0epULZph tYAFqH41Lrd/DkF71bydl8ODpbnH+hdaecvWB8TwcKand9S4KAcSMgLmqQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFONSysD8Piy5V9Ykcr9OatHhlcUAMB8GA1UdIwQY MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt NTQ2OGIyY2YwYTc3LzEvNDFMS3dQdy1MTGxYMWlSeXYwNXEwZUdWeFFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3 LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgKCBUgL MA0GCSqGSIb3DQEBCwUAA4IBAQBX27AFNhK9m02XwSNCRlfaChSC7vtZnJumccvX kST4OjqOQciPvzgD9Xgvjn/Q1iA4erznZSPZQhu5k5ATsFjMVbu4dI2Op/geNW5K Nxxx7h5OZpwT/j+yATekCgeh7TyvFXk2YpxkwnN4HtPdg4CLnWlLSaENMI/Q6j+f da0IUiSjbiOKNrk5+FX7bkPts6ZSxK8JYAtrJwjhUBnJYdUmObrgHSy31xjPPWYp iN3xlfjLmu+JN7Kf/VElAw37roy2AjVysv1rxq+J9WajRHjmcYRszIotapLpTlFG ly3TuR0/wn1pk340v2N3hfFZaGK8Fadbk4FIe/0QOuOlkNko -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:28 2026 by rpki-client