This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa File: rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa (raw, json) Hash identifier: k3IT1blcLOwKvPoRomK4b+Py9VtjJ31MfrlWEqMTSvE= Subject key identifier: AD:27:9E:11:77:32:B3:8A:F5:2F:47:8D:44:A7:0B:7E:AB:F8:03:04 Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4 Certificate serial: 019B7759004AC77459EE635F2E0699C4EF6A Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205570 IP address blocks: 91.151.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:4a:c7:74:59:ee:63:5f:2e:06:99:c4:ef:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad279e117732b38af52f478d44a70b7eabf80304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:e8:f0:b3:bc:a0:5e:11:5c:2a:cf:33:97: 49:10:ea:f7:40:3d:cd:71:24:24:f4:44:49:d9:70: d7:2a:f7:6b:40:9c:dd:21:42:4e:6f:a3:0d:92:17: 33:ff:67:58:cf:70:f7:73:f3:3d:ac:13:29:b6:7c: 89:cb:e3:8c:fc:46:12:8d:85:41:91:02:a7:e5:d8: e3:be:4a:21:80:36:d2:0b:42:ef:3d:b2:e7:3b:41: f6:45:f0:d2:e0:e3:9b:89:15:d7:a2:96:19:57:9c: f4:bf:6d:6c:81:82:79:44:d6:9e:fc:63:f8:ac:b3: b6:93:0c:8e:82:29:28:e7:92:b2:d1:82:b8:e1:e2: 87:d1:40:f1:bf:6d:d5:fd:71:fb:72:ab:47:b0:f8: a6:78:a3:5c:4e:40:3c:2f:ee:a8:54:4a:e8:3d:7a: f2:86:91:3d:08:f5:35:35:d5:03:76:0a:3d:61:b7: 0b:04:4d:e7:7a:d0:5c:ef:de:37:a3:bd:95:46:cb: 8d:58:69:d2:bf:26:0c:dc:fe:43:14:33:3f:83:d8: 61:e0:3a:9e:53:52:0c:6a:0c:53:ab:4b:32:2f:c0: 72:a8:96:25:34:8f:99:e1:af:36:62:33:4a:2d:0d: 72:a2:9d:41:dd:64:73:16:84:10:72:3c:d1:09:e5: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:27:9E:11:77:32:B3:8A:F5:2F:47:8D:44:A7:0B:7E:AB:F8:03:04 X509v3 Authority Key Identifier: keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.90.0/24 Signature Algorithm: sha256WithRSAEncryption 30:b9:c6:78:38:2d:e4:13:f4:41:d4:f3:51:9f:6b:57:ab:60: 6e:71:ec:4d:bc:d8:57:c0:7a:c2:e3:06:61:24:cb:a2:93:18: 72:79:9d:56:60:44:71:56:1a:2c:50:9e:3f:9b:42:63:f3:87: f0:fd:14:81:60:8d:39:4f:f3:cc:b0:bc:30:f3:5c:58:ca:58: cb:6e:2e:57:98:69:03:c3:b0:3c:03:b4:a0:e5:90:5f:55:d2: c9:17:37:b0:1c:ce:4d:92:5b:31:36:2d:6b:be:f3:23:ee:b9: 16:45:ce:e3:3f:f0:fb:4e:6c:06:01:82:a5:b7:7f:46:cb:e4: 65:a7:24:60:fc:f4:32:7c:9a:2a:7b:63:2a:51:75:e4:d9:fd: 4d:e5:54:bd:25:a6:27:74:80:66:2d:71:3f:8f:eb:b7:83:3e: c3:6a:94:a9:1a:a8:67:42:04:99:8e:ce:70:4c:8e:c3:79:4e: ac:c5:9d:c8:70:2f:b3:dd:ad:08:41:47:97:81:75:55:32:9a: ff:73:96:cd:c8:de:69:22:20:d2:64:bf:18:04:69:ff:1c:0a: b7:db:1b:fc:d3:9c:d5:a7:64:7f:c1:4d:7f:fb:89:0a:68:0a: 6b:2c:b1:cf:8c:0b:da:94:da:c7:04:d9:06:27:91:55:1a:d8: 32:96:ed:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQBKx3RZ7mNfLgaZxO9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDJkM2Y5YjMxMTI2ZTA4NTAyNjU3MTVjOWZjMzIxNzRi NTU3YTQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDI3OWUxMTc3MzJiMzhhZjUyZjQ3OGQ0NGE3MGI3ZWFiZjgwMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Lo8LO8oF4RXCrPM5dJEOr3QD3N cSQk9ERJ2XDXKvdrQJzdIUJOb6MNkhcz/2dYz3D3c/M9rBMptnyJy+OM/EYSjYVB kQKn5djjvkohgDbSC0LvPbLnO0H2RfDS4OObiRXXopYZV5z0v21sgYJ5RNae/GP4 rLO2kwyOgiko55Ky0YK44eKH0UDxv23V/XH7cqtHsPimeKNcTkA8L+6oVEroPXry hpE9CPU1NdUDdgo9YbcLBE3netBc7943o72VRsuNWGnSvyYM3P5DFDM/g9hh4Dqe U1IMagxTq0syL8ByqJYlNI+Z4a82YjNKLQ1yop1B3WRzFoQQcjzRCeWMJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0nnhF3MrOK9S9HjUSnC36r+AMEMB8GA1UdIwQY MBaAFEFC0/mzESbghQJlcVyfwyF0tVekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGIt OWM5OGQxMTE5N2I3LzEvclNlZUVYY3lzNHIxTDBlTlJLY0xmcXY0QXdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGItOWM5OGQxMTE5N2I3 LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5daMA0G CSqGSIb3DQEBCwUAA4IBAQAwucZ4OC3kE/RB1PNRn2tXq2BucexNvNhXwHrC4wZh JMuikxhyeZ1WYERxVhosUJ4/m0Jj84fw/RSBYI05T/PMsLww81xYyljLbi5XmGkD w7A8A7Sg5ZBfVdLJFzewHM5NklsxNi1rvvMj7rkWRc7jP/D7TmwGAYKlt39Gy+Rl pyRg/PQyfJoqe2MqUXXk2f1N5VS9JaYndIBmLXE/j+u3gz7DapSpGqhnQgSZjs5w TI7DeU6sxZ3IcC+z3a0IQUeXgXVVMpr/c5bNyN5pIiDSZL8YBGn/HAq32xv805zV p2R/wU1/+4kKaAprLLHPjAvalNrHBNkGJ5FVGtgylu3s -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:03 2026 by rpki-client