This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/ysOgSedTzNHk11K4jKIf8bjTvJY.roa File: ysOgSedTzNHk11K4jKIf8bjTvJY.roa (raw, json) Hash identifier: sn0AlxCtP5/CYV/E85JBe+P2cnutzVIoTcXj+Kz8kMQ= Subject key identifier: CA:C3:A0:49:E7:53:CC:D1:E4:D7:52:B8:8C:A2:1F:F1:B8:D3:BC:96 Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4 Certificate serial: 019B7759001692E6568F40E0A35C3E05FCF2 Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/ysOgSedTzNHk11K4jKIf8bjTvJY.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202976 IP address blocks: 91.151.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:16:92:e6:56:8f:40:e0:a3:5c:3e:05:fc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cac3a049e753ccd1e4d752b88ca21ff1b8d3bc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:c2:67:77:5a:9f:bb:7c:09:85:28:5c:0e: 62:2a:8f:db:5f:e9:24:3c:97:6b:72:03:e1:d4:b9: 98:8c:33:92:97:9b:3b:c1:b5:f1:3b:89:10:d7:97: e7:00:7b:62:3c:45:0b:0c:d6:31:92:62:08:bc:12: 22:b4:98:17:0e:8a:a2:56:4f:60:ca:5f:42:6e:0d: 6d:da:49:45:85:c3:ed:93:c9:d0:36:25:12:b6:77: 29:ef:7e:83:ed:d0:42:d4:e3:f2:2f:c8:60:e4:c4: 53:d3:6e:28:a8:b0:a5:51:e2:eb:93:ce:9e:04:d3: 92:20:7a:93:2c:e2:49:b0:38:23:05:31:95:5e:aa: a2:0b:7a:17:d8:8f:7f:80:f1:7b:00:89:a1:b5:64: d2:79:ec:48:d9:17:4b:f3:8c:b9:db:b1:99:5c:da: 2e:19:2e:3f:a1:f0:2d:b1:df:67:c9:5d:d2:2e:18: 90:3d:0a:4d:d7:10:af:51:d1:4b:42:3e:ba:0d:48: b2:09:c2:44:ea:3b:3d:18:90:39:ca:d5:83:87:75: bb:d5:f9:e4:e4:62:66:b9:78:98:64:47:94:a0:ea: 44:ea:82:6f:2a:24:dc:b7:b8:47:9e:ca:48:92:e1: 3c:bd:a0:7f:44:a0:3d:9a:7b:a4:b0:b3:e4:4e:54: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C3:A0:49:E7:53:CC:D1:E4:D7:52:B8:8C:A2:1F:F1:B8:D3:BC:96 X509v3 Authority Key Identifier: keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/ysOgSedTzNHk11K4jKIf8bjTvJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.93.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:33:1f:94:a8:dc:e4:49:ee:3c:61:b0:68:b0:08:56:8a:c7: 5a:50:68:01:39:bc:82:39:46:54:15:71:bf:79:fe:ad:2f:36: 4c:42:49:4f:28:79:cd:3a:02:16:54:25:2b:7b:e9:85:7d:4e: 6e:95:19:8b:63:b0:bb:0d:1b:e6:2e:aa:9a:23:0f:9a:05:7d: 59:e2:b2:91:d7:dd:2f:bc:8d:fc:f2:37:eb:59:39:87:03:0a: 9d:d1:df:3b:7f:06:a9:d6:14:ad:96:8b:27:6b:cb:53:46:c6: 8f:80:27:af:60:b3:c7:47:dd:f6:f0:28:f1:1a:cd:8e:06:c1: cf:d2:ce:54:ba:9b:5e:38:40:be:17:d2:53:86:22:90:ce:6c: 28:78:35:93:00:7e:1e:97:fd:5a:b8:1c:bd:1b:70:4e:06:13: 5a:fd:48:97:2a:e5:7c:15:e8:b2:51:c7:95:78:86:b6:ff:fa: 7e:cf:eb:3f:21:28:26:43:53:b3:e5:a2:be:fe:3d:f9:d5:fc: b2:b7:84:3c:68:2b:08:e6:d5:51:25:17:21:e4:4f:cc:6f:a3: bb:6c:bc:51:27:60:f7:20:9e:23:71:31:b3:7f:72:4a:af:f0: 67:aa:1e:96:bd:19:5e:5b:75:42:1a:22:db:ee:4f:72:7b:fb: d7:7f:14:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQAWkuZWj0Dgo1w+BfzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDJkM2Y5YjMxMTI2ZTA4NTAyNjU3MTVjOWZjMzIxNzRi NTU3YTQwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWMzYTA0OWU3NTNjY2QxZTRkNzUyYjg4Y2EyMWZmMWI4ZDNiYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXDCZ3dan7t8CYUoXA5iKo/bX+kk PJdrcgPh1LmYjDOSl5s7wbXxO4kQ15fnAHtiPEULDNYxkmIIvBIitJgXDoqiVk9g yl9Cbg1t2klFhcPtk8nQNiUStncp736D7dBC1OPyL8hg5MRT024oqLClUeLrk86e BNOSIHqTLOJJsDgjBTGVXqqiC3oX2I9/gPF7AImhtWTSeexI2RdL84y527GZXNou GS4/ofAtsd9nyV3SLhiQPQpN1xCvUdFLQj66DUiyCcJE6js9GJA5ytWDh3W71fnk 5GJmuXiYZEeUoOpE6oJvKiTct7hHnspIkuE8vaB/RKA9mnuksLPkTlRzSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMrDoEnnU8zR5NdSuIyiH/G407yWMB8GA1UdIwQY MBaAFEFC0/mzESbghQJlcVyfwyF0tVekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGIt OWM5OGQxMTE5N2I3LzEveXNPZ1NlZFR6TkhrMTFLNGpLSWY4YmpUdkpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGItOWM5OGQxMTE5N2I3 LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5ddMA0G CSqGSIb3DQEBCwUAA4IBAQAvMx+UqNzkSe48YbBosAhWisdaUGgBObyCOUZUFXG/ ef6tLzZMQklPKHnNOgIWVCUre+mFfU5ulRmLY7C7DRvmLqqaIw+aBX1Z4rKR190v vI388jfrWTmHAwqd0d87fwap1hStlosna8tTRsaPgCevYLPHR9328CjxGs2OBsHP 0s5UupteOEC+F9JThiKQzmwoeDWTAH4el/1auBy9G3BOBhNa/UiXKuV8FeiyUceV eIa2//p+z+s/ISgmQ1Oz5aK+/j351fyyt4Q8aCsI5tVRJRch5E/Mb6O7bLxRJ2D3 IJ4jcTGzf3JKr/Bnqh6WvRleW3VCGiLb7k9ye/vXfxQg -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:25 2026 by rpki-client