This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/ANa1GBLoP5xu32cExEGS1ucyPeI.roa
File: ANa1GBLoP5xu32cExEGS1ucyPeI.roa (raw, json)
Hash identifier: 03Pv5w9P0hLlvZZZpgrIUfLMLj2sMsn6vZZ11knaFKk=
Subject key identifier: 00:D6:B5:18:12:E8:3F:9C:6E:DF:67:04:C4:41:92:D6:E7:32:3D:E2
Certificate issuer: /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial: 019B7B35E274BDE385E9CED7A52AB5DB57B2
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/ANa1GBLoP5xu32cExEGS1ucyPeI.roa
Signing time: Thu 01 Jan 2026 20:18:07 +0000
ROA not before: Thu 01 Jan 2026 20:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399587
IP address blocks: 176.58.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:e2:74:bd:e3:85:e9:ce:d7:a5:2a:b5:db:57:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Validity
Not Before: Jan 1 20:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00d6b51812e83f9c6edf6704c44192d6e7323de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:08:ca:9f:1c:b2:1f:67:03:82:93:03:61:
c4:87:2b:c2:0e:98:51:09:67:9d:e5:23:98:bf:c4:
26:6d:db:96:c2:af:42:e7:ce:02:f7:04:9f:e7:ce:
7b:c9:64:8b:68:96:9a:57:aa:cb:17:a9:e1:ec:08:
4e:59:59:2e:aa:f2:46:d7:65:ff:a8:9e:d0:7b:21:
51:3f:a1:5e:da:92:89:92:ce:f2:b7:20:c7:44:36:
c9:c8:4e:a5:e3:e3:11:e7:2b:35:10:41:b3:1c:d7:
05:ad:a0:fb:06:83:d0:d5:50:1c:db:8f:24:6d:1f:
c8:6f:bc:0e:ca:86:86:a3:4a:0b:9a:b1:ff:9b:5f:
56:7e:d5:68:13:d8:e8:5d:45:12:87:d5:43:5e:25:
0c:39:11:af:01:da:91:dd:f7:7b:2a:8b:c0:c0:71:
68:cb:ad:4f:3c:a0:86:fb:ef:36:d7:cd:43:fd:5e:
cd:af:9c:63:b1:bc:d0:b9:11:13:49:4c:ac:9b:b4:
79:b6:7d:73:95:fb:eb:71:5f:c4:a1:03:11:12:7e:
b7:3b:e2:86:8c:e0:23:e3:a5:73:1c:f7:5b:88:eb:
d6:e1:b3:32:2f:6d:44:f3:cf:a5:bf:51:ff:26:aa:
2e:a9:14:42:f6:85:c7:2b:17:0e:ed:7b:5a:b8:7d:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:B5:18:12:E8:3F:9C:6E:DF:67:04:C4:41:92:D6:E7:32:3D:E2
X509v3 Authority Key Identifier:
keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/ANa1GBLoP5xu32cExEGS1ucyPeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.72.0/24
Signature Algorithm: sha256WithRSAEncryption
78:96:1a:07:a9:d8:5c:3f:7f:d7:aa:f3:23:ff:f5:9d:7f:c3:
c6:a3:0d:64:31:de:b9:a6:c5:42:33:04:94:80:a6:49:70:20:
35:94:21:49:81:40:9f:93:d8:b1:92:40:2d:34:5d:dc:15:34:
6a:09:37:f2:11:f1:2d:79:cd:da:55:2c:ce:7b:7b:e4:74:61:
4e:61:07:b0:ae:5c:17:70:1e:7d:52:16:8d:76:c7:30:57:2a:
84:d7:b5:fb:16:be:13:d8:91:e3:2a:23:22:b7:09:b4:09:7a:
45:82:5b:e1:43:cb:c3:d8:4c:e8:8b:d7:c6:cd:6d:2b:ec:94:
58:b4:ca:80:8b:26:41:70:71:84:23:65:ff:92:0b:b4:a9:22:
b6:d3:d9:ee:76:b5:b7:1b:ad:56:b5:3a:29:45:41:bb:34:b0:
5e:84:76:91:63:d3:48:eb:65:dd:3f:46:4f:b0:ee:de:47:f2:
9b:70:30:2e:98:75:1e:1e:50:af:bc:be:fb:49:91:e9:80:8d:
4a:e2:03:bb:f0:9b:88:eb:4a:cd:56:b2:a2:51:0e:3e:1a:1b:
4f:a4:68:11:b4:c4:37:18:80:c9:1f:77:b5:6e:1d:09:ca:42:
68:b1:b3:2b:1d:e1:c4:69:e9:53:5a:d6:7a:a8:fa:40:51:80:
9a:5c:5a:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NeJ0veOF6c7XpSq121eyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzdhY2QxMTJmMWM2YzgzM2JlYzIyZjhiNTNjYzcwZDIz
OTA4NzYwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGQ2YjUxODEyZTgzZjljNmVkZjY3MDRjNDQxOTJkNmU3MzIzZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt10Iyp8csh9nA4KTA2HEhyvCDphR
CWed5SOYv8QmbduWwq9C584C9wSf5857yWSLaJaaV6rLF6nh7AhOWVkuqvJG12X/
qJ7QeyFRP6Fe2pKJks7ytyDHRDbJyE6l4+MR5ys1EEGzHNcFraD7BoPQ1VAc248k
bR/Ib7wOyoaGo0oLmrH/m19WftVoE9joXUUSh9VDXiUMORGvAdqR3fd7KovAwHFo
y61PPKCG++82181D/V7Nr5xjsbzQuRETSUysm7R5tn1zlfvrcV/EoQMREn63O+KG
jOAj46VzHPdbiOvW4bMyL21E88+lv1H/JqouqRRC9oXHKxcO7XtauH2P9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADWtRgS6D+cbt9nBMRBktbnMj3iMB8GA1UdIwQY
MBaAFAJ3rNES8cbIM77CL4tTzHDSOQh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQt
ZDk2NTU5ODc4NzRhLzEvQU5hMUdCTG9QNXh1MzJjRXhFR1MxdWN5UGVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQtZDk2NTU5ODc4NzRh
LzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDpIMA0G
CSqGSIb3DQEBCwUAA4IBAQB4lhoHqdhcP3/XqvMj//Wdf8PGow1kMd65psVCMwSU
gKZJcCA1lCFJgUCfk9ixkkAtNF3cFTRqCTfyEfEtec3aVSzOe3vkdGFOYQewrlwX
cB59UhaNdscwVyqE17X7Fr4T2JHjKiMitwm0CXpFglvhQ8vD2Ezoi9fGzW0r7JRY
tMqAiyZBcHGEI2X/kgu0qSK209nudrW3G61WtTopRUG7NLBehHaRY9NI62XdP0ZP
sO7eR/KbcDAumHUeHlCvvL77SZHpgI1K4gO78JuI60rNVrKiUQ4+GhtPpGgRtMQ3
GIDJH3e1bh0JykJosbMrHeHEaelTWtZ6qPpAUYCaXFqU
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:39:49 2026 by rpki-client