This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/41BadyilkbxexUsN9_QCLE-lN9U.roa File: 41BadyilkbxexUsN9_QCLE-lN9U.roa (raw, json) Hash identifier: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8= Subject key identifier: E3:50:5A:77:28:A5:91:BC:5E:C5:4B:0D:F7:F4:02:2C:4F:A5:37:D5 Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Certificate serial: 019B7DC9A93535B708A571C37834CCC65AD0 Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/41BadyilkbxexUsN9_QCLE-lN9U.roa Signing time: Fri 02 Jan 2026 08:18:46 +0000 ROA not before: Fri 02 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202060 IP address blocks: 2001:67c:558::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:a9:35:35:b7:08:a5:71:c3:78:34:cc:c6:5a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648 Validity Not Before: Jan 2 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3505a7728a591bc5ec54b0df7f4022c4fa537d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:6c:2a:5a:09:84:b9:a1:ca:c0:82:ff:60: 11:9c:45:4a:0c:ea:5f:1d:45:aa:8e:84:a6:a7:3b: 8d:17:3a:5f:99:d4:9e:4d:e8:53:ed:5d:dc:1d:b6: a6:f4:70:f7:33:fb:49:e6:1e:b5:d3:95:96:28:dc: 31:69:ae:e6:71:06:43:52:9e:fa:a8:d2:10:78:a6: 71:ad:5b:a3:1f:f4:31:f4:de:79:da:b2:6d:ad:62: ae:84:33:1a:5d:5d:7a:03:86:c4:94:98:f3:11:18: 40:63:84:41:62:db:d2:82:3a:b9:d7:b7:6f:a8:88: 84:61:c5:c0:b6:3a:db:87:bb:52:e8:7c:0f:09:4a: 9b:90:0e:6b:fc:c8:43:51:1a:a7:fa:40:21:8b:3f: 7e:e7:87:1e:4d:d6:2d:ed:e9:ae:a5:18:61:5d:52: d7:60:c1:90:b6:64:48:c2:c1:21:2c:da:8b:ff:31: 6e:0f:d8:18:fb:ae:f9:cd:70:90:e9:9d:a4:bc:ed: bd:0b:7b:c9:6e:49:cd:70:7d:20:82:a0:5a:64:4f: 29:2f:d3:2d:43:46:e9:3c:d2:35:3c:05:7e:2e:00: e9:4c:94:04:d2:e1:9a:09:b4:27:1b:46:c5:ae:39: b3:e8:79:87:58:9a:cc:b7:89:9c:e0:d5:5d:67:b7: 7f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:50:5A:77:28:A5:91:BC:5E:C5:4B:0D:F7:F4:02:2C:4F:A5:37:D5 X509v3 Authority Key Identifier: keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/41BadyilkbxexUsN9_QCLE-lN9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:558::/48 Signature Algorithm: sha256WithRSAEncryption 31:f5:7c:d8:ca:dd:52:62:bc:79:ca:2f:3f:d9:23:81:ef:fb: eb:19:25:c2:a4:66:35:33:e0:c3:8f:44:e5:93:59:8a:48:cb: 83:6e:a5:81:8a:63:99:63:84:a1:5c:21:3f:84:5d:e8:f9:8b: 4a:7f:f4:ab:ee:06:a0:e5:da:bd:a4:fb:df:3a:06:45:ea:e8: a3:29:e4:3d:d1:fd:5f:29:23:c2:f9:99:42:bf:a1:d2:4d:bb: bc:a9:f5:3e:ae:43:e2:ba:77:fd:ce:b2:b5:e1:8b:25:ae:33: 59:b4:ef:ea:77:02:53:9b:7a:73:20:17:cf:15:2a:9d:a6:3e: b3:81:d9:d1:f1:96:d8:62:2c:8d:82:f3:7a:be:d2:f0:22:d9: 72:d9:5d:cd:51:f9:6d:fe:10:50:61:96:2b:1d:8b:59:44:40: 7d:03:c1:cf:92:49:23:a1:11:46:75:cc:a1:64:3d:78:f0:5f: f4:c1:36:e6:92:10:58:29:8b:13:11:29:1f:64:9e:fe:55:7f: e3:be:98:ef:9c:9f:99:01:10:fc:c4:ad:eb:24:18:cd:93:99: 7e:68:d7:82:9f:61:57:a8:85:b0:11:8c:08:85:9c:10:50:bb: 1d:e4:76:a6:36:f2:6b:8d:c3:35:3d:d2:1d:01:0c:1e:03:c0: 5a:82:d2:74 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yak1NbcIpXHDeDTMxlrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm Mjk2NDgwHhcNMjYwMTAyMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzUwNWE3NzI4YTU5MWJjNWVjNTRiMGRmN2Y0MDIyYzRmYTUzN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf5sKloJhLmhysCC/2ARnEVKDOpf HUWqjoSmpzuNFzpfmdSeTehT7V3cHbam9HD3M/tJ5h6105WWKNwxaa7mcQZDUp76 qNIQeKZxrVujH/Qx9N552rJtrWKuhDMaXV16A4bElJjzERhAY4RBYtvSgjq517dv qIiEYcXAtjrbh7tS6HwPCUqbkA5r/MhDURqn+kAhiz9+54ceTdYt7emupRhhXVLX YMGQtmRIwsEhLNqL/zFuD9gY+675zXCQ6Z2kvO29C3vJbknNcH0ggqBaZE8pL9Mt Q0bpPNI1PAV+LgDpTJQE0uGaCbQnG0bFrjmz6HmHWJrMt4mc4NVdZ7d/6QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFONQWncopZG8XsVLDff0AixPpTfVMB8GA1UdIwQY MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt ZTAyODcyZDFkYjAxLzEvNDFCYWR5aWxrYnhleFVzTjlfUUNMRS1sTjlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAVY MA0GCSqGSIb3DQEBCwUAA4IBAQAx9XzYyt1SYrx5yi8/2SOB7/vrGSXCpGY1M+DD j0Tlk1mKSMuDbqWBimOZY4ShXCE/hF3o+YtKf/Sr7gag5dq9pPvfOgZF6uijKeQ9 0f1fKSPC+ZlCv6HSTbu8qfU+rkPiunf9zrK14YslrjNZtO/qdwJTm3pzIBfPFSqd pj6zgdnR8ZbYYiyNgvN6vtLwItly2V3NUflt/hBQYZYrHYtZREB9A8HPkkkjoRFG dcyhZD148F/0wTbmkhBYKYsTESkfZJ7+VX/jvpjvnJ+ZARD8xK3rJBjNk5l+aNeC n2FXqIWwEYwIhZwQULsd5HamNvJrjcM1PdIdAQweA8BagtJ0 -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:11 2026 by rpki-client