This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/0anrsWKq888ZSCAf-DHZPCBFNII.roa File: 0anrsWKq888ZSCAf-DHZPCBFNII.roa (raw, json) Hash identifier: Z4FoptDbc24Je0tr9eoiillkgyMTGyUBsm5kXhfq/40= Subject key identifier: D1:A9:EB:B1:62:AA:F3:CF:19:48:20:1F:F8:31:D9:3C:20:45:34:82 Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c Certificate serial: 019B77C6F2DB1B53BE76E3F3E78FDF626143 Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/0anrsWKq888ZSCAf-DHZPCBFNII.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211320 IP address blocks: 185.26.138.0/24 maxlen: 24 185.26.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f2:db:1b:53:be:76:e3:f3:e7:8f:df:62:61:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1a9ebb162aaf3cf1948201ff831d93c20453482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:92:e9:e5:60:ed:87:6c:0a:ea:55:e4:6c: dd:7d:68:80:7c:f6:7f:b8:45:fb:35:bf:b4:fa:e2: 4b:d9:d3:1c:a8:f7:ea:b0:98:3a:65:3a:39:1a:18: 29:54:ec:1c:a4:32:54:6f:ad:18:34:64:3f:06:50: 54:fc:7d:4e:e9:12:e4:15:29:17:5c:d0:dd:7d:5b: 44:ab:0f:41:86:68:1b:f1:db:23:b0:f4:1f:16:12: c7:b8:8e:4a:b1:31:bf:0c:f7:f4:33:f0:4e:44:34: a4:2a:16:8b:ab:e1:0e:7d:da:d8:4d:11:8d:92:6e: 27:3e:a4:49:04:83:4c:61:96:c4:1a:46:d9:67:d9: ad:f2:ad:f5:f9:5f:a8:16:d6:02:c3:32:81:b7:58: f4:cc:86:29:ea:b4:4d:de:86:3a:ae:71:ed:e2:94: 23:bd:54:b1:cf:9f:24:88:da:db:c6:6f:af:b8:cf: 31:55:a3:80:be:16:9d:b1:bd:ce:c0:3e:71:33:b9: ff:46:50:a4:cb:b0:f3:21:8c:fa:d6:01:9a:82:cc: 90:80:8b:19:22:7c:d8:ce:09:1a:4a:9e:4e:77:5b: 8d:e1:0c:5f:61:7d:8d:c4:f7:90:ae:38:ad:ee:ce: cd:d2:3b:2d:d4:19:85:e7:e7:6c:eb:d1:b8:f8:64: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A9:EB:B1:62:AA:F3:CF:19:48:20:1F:F8:31:D9:3C:20:45:34:82 X509v3 Authority Key Identifier: keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/0anrsWKq888ZSCAf-DHZPCBFNII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.138.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:cc:06:f2:7f:e7:91:19:31:ac:d2:82:1b:30:f8:03:ec:9d: ca:d4:a2:a0:9b:01:38:a8:69:89:7c:2a:25:e3:3b:73:27:5d: 04:e2:98:fa:3c:b8:63:1d:81:ba:5e:be:34:35:d4:8e:40:88: 3c:49:45:2e:10:55:b8:36:10:82:4a:d2:98:bd:93:fc:9e:7e: df:ac:66:6c:27:70:ae:c9:f0:e8:6d:fb:4a:56:f8:24:6e:39: 6a:ea:9f:82:ac:08:03:5d:b2:3c:f1:3d:47:42:4a:bf:64:15: 64:b3:6f:f6:e0:6b:85:9d:28:b6:63:da:53:25:7b:20:c1:e1: 1f:cc:f1:2e:07:f0:b2:0f:09:64:d6:32:70:99:1b:a8:d0:8f: d9:25:20:ed:4e:62:29:bd:b1:31:fa:50:18:4c:0d:8b:a4:ea: 47:f8:a0:b4:7e:37:0d:e5:b9:81:1c:f1:3b:14:79:11:ba:13: 55:0a:ad:1c:0e:af:9b:88:98:27:18:e5:01:57:e9:25:7c:ce: 73:25:b6:55:c3:cd:93:b1:1d:dd:13:2a:aa:3b:fa:aa:d7:5c: b2:94:90:1a:bf:6d:73:6a:f0:33:9e:2a:12:4d:07:8b:6b:43: a8:9f:75:a0:e8:d8:59:12:0c:ee:e7:ab:73:b7:82:07:f2:3a: c9:50:36:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvLbG1O+duPz54/fYmFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MGJiZTBiZTc3YzRlMmYwNTc5MTc4NmVhZGNjODI3NmIy NjFiOGMwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWE5ZWJiMTYyYWFmM2NmMTk0ODIwMWZmODMxZDkzYzIwNDUzNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFeS6eVg7YdsCupV5GzdfWiAfPZ/ uEX7Nb+0+uJL2dMcqPfqsJg6ZTo5GhgpVOwcpDJUb60YNGQ/BlBU/H1O6RLkFSkX XNDdfVtEqw9Bhmgb8dsjsPQfFhLHuI5KsTG/DPf0M/BORDSkKhaLq+EOfdrYTRGN km4nPqRJBINMYZbEGkbZZ9mt8q31+V+oFtYCwzKBt1j0zIYp6rRN3oY6rnHt4pQj vVSxz58kiNrbxm+vuM8xVaOAvhadsb3OwD5xM7n/RlCky7DzIYz61gGagsyQgIsZ InzYzgkaSp5Od1uN4QxfYX2NxPeQrjit7s7N0jst1BmF5+ds69G4+GTYtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGp67FiqvPPGUggH/gx2TwgRTSCMB8GA1UdIwQY MBaAFOYLvgvnfE4vBXkXhurcyCdrJhuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWd1LUMtZDhUaThGZVJlRzZ0eklKMnNtRzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZTRhNGMtZjhjNi00ODVkLWEzMjgt YTNjZTk5NjQzOTQ3LzEvMGFucnNXS3E4ODhaU0NBZi1ESFpQQ0JGTklJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9iZTRhNGMtZjhjNi00ODVkLWEzMjgtYTNjZTk5NjQzOTQ3 LzEvNWd1LUMtZDhUaThGZVJlRzZ0eklKMnNtRzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuRqKMA0G CSqGSIb3DQEBCwUAA4IBAQBMzAbyf+eRGTGs0oIbMPgD7J3K1KKgmwE4qGmJfCol 4ztzJ10E4pj6PLhjHYG6Xr40NdSOQIg8SUUuEFW4NhCCStKYvZP8nn7frGZsJ3Cu yfDobftKVvgkbjlq6p+CrAgDXbI88T1HQkq/ZBVks2/24GuFnSi2Y9pTJXsgweEf zPEuB/CyDwlk1jJwmRuo0I/ZJSDtTmIpvbEx+lAYTA2LpOpH+KC0fjcN5bmBHPE7 FHkRuhNVCq0cDq+biJgnGOUBV+klfM5zJbZVw82TsR3dEyqqO/qq11yylJAav21z avAznioSTQeLa0Oon3Wg6NhZEgzu56tzt4IH8jrJUDZU -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:54 2026 by rpki-client