This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/auRSELPUoQ0VJM3-gIvFfBusxaQ.roa File: auRSELPUoQ0VJM3-gIvFfBusxaQ.roa (raw, json) Hash identifier: GODiYRe5pixxGQ/IUbw5fIBRTTaru4RDGR/gDIhtosU= Subject key identifier: 6A:E4:52:10:B3:D4:A1:0D:15:24:CD:FE:80:8B:C5:7C:1B:AC:C5:A4 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC791FD7C3111F0A76D2C83CE065177 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/auRSELPUoQ0VJM3-gIvFfBusxaQ.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49121 IP address blocks: 91.191.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:91:fd:7c:31:11:f0:a7:6d:2c:83:ce:06:51:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ae45210b3d4a10d1524cdfe808bc57c1bacc5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:44:5d:15:36:68:b8:5d:3f:2f:65:d8:6d: d3:0b:45:dd:dd:20:20:d3:e6:cf:80:aa:b9:06:78: 08:2b:41:ab:5e:11:8b:9a:ca:ce:f9:96:30:5d:68: cc:48:4a:ee:67:2c:09:f5:2a:46:f9:94:9c:5c:00: f1:39:81:eb:b0:dc:9b:f4:88:f4:a0:25:54:2a:74: 91:31:17:8b:33:28:02:f7:43:de:26:a0:6c:76:2b: e5:d4:52:e6:b8:d7:3b:a2:4a:5c:a3:2c:9b:11:bd: a8:aa:80:5f:38:51:43:76:d4:4a:54:26:23:ba:f2: 19:35:69:69:df:4a:c3:77:8b:9d:b5:c6:72:11:c3: 6a:e6:1d:8d:55:2c:e8:7a:96:8b:2b:74:2f:f5:71: 22:1c:c3:f7:88:42:f5:a0:95:b9:e8:31:bd:d9:36: 00:47:aa:4a:18:4a:a6:b4:a9:38:aa:23:44:af:74: 0f:99:72:db:af:a1:7e:c9:4b:31:40:02:c7:7f:82: 0e:c6:7b:e7:9c:13:29:18:c9:cb:d1:b5:ff:1a:3e: 16:c3:39:55:ac:15:63:4a:8e:93:bc:1b:37:7e:ad: b4:e2:7a:7f:2c:e8:d9:73:c0:e2:dc:02:f4:1e:d6: 8c:21:b1:f4:32:1b:bb:74:75:f2:18:80:25:9f:08: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E4:52:10:B3:D4:A1:0D:15:24:CD:FE:80:8B:C5:7C:1B:AC:C5:A4 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/auRSELPUoQ0VJM3-gIvFfBusxaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.191.185.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:ca:04:aa:c5:79:80:09:73:41:6d:9e:e0:50:d7:d9:0d:ef: 0c:fc:19:c2:a5:70:31:cb:03:88:db:a2:36:55:de:c0:36:e1: 0b:fa:48:3c:bd:c5:19:8e:cb:3b:b7:89:c6:63:19:cc:da:b9: 45:e2:fd:43:84:01:40:e5:29:57:59:cf:8e:8c:a4:af:50:1e: 95:9c:45:81:75:72:65:70:cb:83:d3:89:c3:53:09:0b:77:67: 80:c4:ae:9d:1f:d7:fe:eb:d6:b1:38:4c:cc:ef:50:28:21:21: 32:13:a8:1b:c3:e5:8d:06:96:14:40:04:16:2b:aa:cc:7d:21: 55:0e:80:7e:56:ac:78:f2:e3:36:66:59:69:79:b8:00:f3:ff: 20:bb:f8:b9:6f:1d:c2:76:89:02:f4:b2:d6:ab:69:0f:e9:af: 2a:3b:34:a9:d5:b4:4f:cc:fd:1a:fa:cc:a2:82:e8:d8:34:89: 91:ec:76:f3:6c:36:f6:85:d2:45:d4:74:4f:c5:ff:f7:88:a3: 83:c1:3e:fc:5c:46:e8:3d:fb:0b:27:95:ca:26:69:1d:a4:18: 18:83:64:ca:ed:ef:aa:c7:15:3f:f3:0c:9a:f6:96:88:2e:8e: 93:88:be:58:fb:1d:7c:64:d6:9d:ec:22:e3:4c:20:04:96:8b: d3:be:46:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5H9fDER8KdtLIPOBlF3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWU0NTIxMGIzZDRhMTBkMTUyNGNkZmU4MDhiYzU3YzFiYWNjNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/REXRU2aLhdPy9l2G3TC0Xd3SAg 0+bPgKq5BngIK0GrXhGLmsrO+ZYwXWjMSEruZywJ9SpG+ZScXADxOYHrsNyb9Ij0 oCVUKnSRMReLMygC90PeJqBsdivl1FLmuNc7okpcoyybEb2oqoBfOFFDdtRKVCYj uvIZNWlp30rDd4udtcZyEcNq5h2NVSzoepaLK3Qv9XEiHMP3iEL1oJW56DG92TYA R6pKGEqmtKk4qiNEr3QPmXLbr6F+yUsxQALHf4IOxnvnnBMpGMnL0bX/Gj4WwzlV rBVjSo6TvBs3fq204np/LOjZc8Di3AL0HtaMIbH0Mhu7dHXyGIAlnwjz7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGrkUhCz1KENFSTN/oCLxXwbrMWkMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvYXVSU0VMUFVvUTBWSk0zLWdJdkZmQnVzeGFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7+5MA0G CSqGSIb3DQEBCwUAA4IBAQB/ygSqxXmACXNBbZ7gUNfZDe8M/BnCpXAxywOI26I2 Vd7ANuEL+kg8vcUZjss7t4nGYxnM2rlF4v1DhAFA5SlXWc+OjKSvUB6VnEWBdXJl cMuD04nDUwkLd2eAxK6dH9f+69axOEzM71AoISEyE6gbw+WNBpYUQAQWK6rMfSFV DoB+Vqx48uM2ZllpebgA8/8gu/i5bx3CdokC9LLWq2kP6a8qOzSp1bRPzP0a+syi gujYNImR7HbzbDb2hdJF1HRPxf/3iKODwT78XEboPfsLJ5XKJmkdpBgYg2TK7e+q xxU/8wya9paILo6TiL5Y+x18ZNad7CLjTCAElovTvkaJ -----END CERTIFICATE-----Generated at Mon Jan 19 20:35:00 2026 by rpki-client