This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/aEsbh_haMhsqIB5wCxd9t5IabFM.roa File: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (raw, json) Hash identifier: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI= Subject key identifier: 68:4B:1B:87:F8:5A:32:1B:2A:20:1E:70:0B:17:7D:B7:92:1A:6C:53 Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Certificate serial: 019B7CEE2E1DE7E026A66004077122FB4455 Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/aEsbh_haMhsqIB5wCxd9t5IabFM.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42807 IP address blocks: 185.121.126.0/24 maxlen: 24 185.121.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2e:1d:e7:e0:26:a6:60:04:07:71:22:fb:44:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=684b1b87f85a321b2a201e700b177db7921a6c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:8d:57:d2:35:1f:24:b7:2a:b2:24:f9:23: eb:16:dc:9e:7b:0e:ae:c3:73:7a:62:0e:ff:59:9c: 83:83:59:bf:d9:bd:46:86:e1:91:d3:89:cc:7d:7c: 63:4a:c1:5c:b4:9d:b0:9b:3b:2b:e3:f6:2d:60:19: 0e:99:78:fb:15:68:cd:bc:f6:fb:a3:13:1d:be:a2: 8d:05:fc:d7:55:e2:b2:20:fb:fa:a2:7a:c3:5f:9e: 46:89:33:93:3e:57:7b:93:98:28:8e:ec:f8:e6:bf: f7:3a:61:08:33:21:d7:ec:7d:f7:a4:4a:de:27:0c: 34:c3:22:56:5a:e6:04:49:6c:8b:af:99:49:4a:d0: be:36:8b:03:3a:d1:9f:9a:54:d0:67:ed:35:90:94: 99:c4:70:c8:e7:02:78:f8:42:2e:e1:55:69:17:2a: 81:71:03:52:6f:14:3a:1f:0d:f4:0f:1b:b8:85:4b: 02:4f:3c:06:48:e8:cb:8e:ee:29:7a:13:46:ed:44: a5:ee:9b:c0:cf:1e:73:e1:93:a2:f2:d0:25:2c:94: cf:21:62:00:28:a9:d4:d4:73:a7:8a:a9:45:5d:28: be:79:6a:4b:f0:2b:c8:ca:31:91:60:a1:7a:0e:14: 71:dc:c3:13:55:0a:7d:81:4f:b9:96:2d:4b:0e:30: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4B:1B:87:F8:5A:32:1B:2A:20:1E:70:0B:17:7D:B7:92:1A:6C:53 X509v3 Authority Key Identifier: keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/aEsbh_haMhsqIB5wCxd9t5IabFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.126.0/23 Signature Algorithm: sha256WithRSAEncryption 78:ba:bc:23:ad:a5:35:36:19:ae:ef:a3:d2:e8:11:d3:09:4a: 15:b8:71:22:b1:f2:6e:2e:16:64:77:ea:da:f2:8f:be:69:89: f2:8a:05:15:a0:74:b4:fe:d5:22:af:de:1c:62:3c:f7:65:52: 5b:c0:cf:57:8b:d6:09:b1:9c:b6:e3:b5:75:c7:62:51:15:f4: a0:5a:52:8a:49:15:eb:5b:8a:f6:7f:44:d6:6d:03:11:d3:6b: d1:22:79:b7:6e:17:3c:28:82:65:1c:72:8c:03:f6:c2:1a:90: 68:1b:d4:d9:13:a1:6f:04:4a:79:d5:5b:40:e3:ef:2a:90:79: cc:5a:15:6e:cb:26:3f:19:08:e8:54:0e:ce:9d:de:2f:99:83: 60:db:15:17:23:8a:2a:d8:15:11:a0:b9:ca:cc:f2:2c:66:90: 25:55:b7:af:05:1e:fe:e0:09:ae:bb:d0:0e:5e:06:6d:88:32: d1:27:26:b2:3a:b6:82:c5:2a:a6:cd:b1:34:f8:bd:9d:cd:f0: 75:fd:1a:77:48:47:2c:f5:1a:81:fd:0c:f9:2b:5d:b8:54:3c: 27:ca:09:27:b8:0f:a6:28:1b:29:92:3f:f6:8f:a2:eb:cc:39: 69:e6:58:f8:1b:e2:e3:ab:c1:74:90:3b:79:e8:13:eb:91:ff: ce:95:41:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87i4d5+AmpmAEB3Ei+0RVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz NzNlMmEwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODRiMWI4N2Y4NWEzMjFiMmEyMDFlNzAwYjE3N2RiNzkyMWE2YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7WNV9I1HyS3KrIk+SPrFtyeew6u w3N6Yg7/WZyDg1m/2b1GhuGR04nMfXxjSsFctJ2wmzsr4/YtYBkOmXj7FWjNvPb7 oxMdvqKNBfzXVeKyIPv6onrDX55GiTOTPld7k5gojuz45r/3OmEIMyHX7H33pEre Jww0wyJWWuYESWyLr5lJStC+NosDOtGfmlTQZ+01kJSZxHDI5wJ4+EIu4VVpFyqB cQNSbxQ6Hw30Dxu4hUsCTzwGSOjLju4pehNG7USl7pvAzx5z4ZOi8tAlLJTPIWIA KKnU1HOniqlFXSi+eWpL8CvIyjGRYKF6DhRx3MMTVQp9gU+5li1LDjDVRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhLG4f4WjIbKiAecAsXfbeSGmxTMB8GA1UdIwQY MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct NjJkODgxYWE5MDZmLzEvYUVzYmhfaGFNaHNxSUI1d0N4ZDl0NUlhYkZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXl+MA0G CSqGSIb3DQEBCwUAA4IBAQB4urwjraU1Nhmu76PS6BHTCUoVuHEisfJuLhZkd+ra 8o++aYnyigUVoHS0/tUir94cYjz3ZVJbwM9Xi9YJsZy247V1x2JRFfSgWlKKSRXr W4r2f0TWbQMR02vRInm3bhc8KIJlHHKMA/bCGpBoG9TZE6FvBEp51VtA4+8qkHnM WhVuyyY/GQjoVA7Ond4vmYNg2xUXI4oq2BURoLnKzPIsZpAlVbevBR7+4Amuu9AO XgZtiDLRJyayOraCxSqmzbE0+L2dzfB1/Rp3SEcs9RqB/Qz5K124VDwnygknuA+m KBspkj/2j6LrzDlp5lj4G+Ljq8F0kDt56BPrkf/OlUEo -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:49 2026 by rpki-client