This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/BYGANzLgHzSaUc6K7ae41nnbLMw.roa
File: BYGANzLgHzSaUc6K7ae41nnbLMw.roa (raw, json)
Hash identifier: AJMi9HENlmzpAiYF/4FsTemXgQje3J6PHtaGAU4r+0I=
Subject key identifier: 05:81:80:37:32:E0:1F:34:9A:51:CE:8A:ED:A7:B8:D6:79:DB:2C:CC
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019B7C1109B2F651999DC6DC54D76180442C
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/BYGANzLgHzSaUc6K7ae41nnbLMw.roa
Signing time: Fri 02 Jan 2026 00:17:29 +0000
ROA not before: Fri 02 Jan 2026 00:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210879
IP address blocks: 185.141.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:09:b2:f6:51:99:9d:c6:dc:54:d7:61:80:44:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Jan 2 00:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0581803732e01f349a51ce8aeda7b8d679db2ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:68:a7:ee:7e:d7:b6:5b:6d:d3:e0:35:ac:
cc:8d:e6:c7:5e:59:4b:4e:c4:84:ba:12:c1:b1:5c:
d3:c4:cb:a5:6a:e4:81:2a:04:6e:1e:1c:9e:ee:1d:
fa:82:74:5d:00:a0:c6:55:74:79:4b:f2:69:b1:29:
20:af:f8:70:dd:68:60:f8:67:19:93:35:a0:f8:e6:
da:00:32:2b:67:8c:de:54:17:08:8d:ff:56:ff:d4:
ef:2d:58:ca:ca:45:b9:df:43:cf:7a:d1:ba:65:db:
14:5b:56:fe:06:a5:58:26:f6:cc:36:6c:57:40:16:
3c:28:98:f3:6a:13:b3:5e:dc:14:f2:54:18:8c:aa:
9f:e6:86:5a:f6:ac:66:9e:a6:28:4c:ac:e6:12:14:
f4:bf:37:20:69:2c:f6:c1:4d:e1:8d:c9:93:28:7d:
49:a5:51:8f:35:b0:8e:1c:eb:81:72:25:24:07:86:
a8:ec:ce:5f:8f:3f:75:c0:86:5d:13:b3:89:ff:fd:
f4:58:5d:ca:a9:96:b2:3c:35:55:2c:11:39:ef:af:
50:c3:63:cf:b7:66:10:a3:a2:fe:98:27:fd:51:2c:
0d:de:b9:f8:8f:ee:e0:9b:e8:96:a2:87:eb:07:d8:
39:bb:c3:ae:33:ec:8d:ac:cd:58:c6:c1:d4:8c:55:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:81:80:37:32:E0:1F:34:9A:51:CE:8A:ED:A7:B8:D6:79:DB:2C:CC
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/BYGANzLgHzSaUc6K7ae41nnbLMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.130.0/24
Signature Algorithm: sha256WithRSAEncryption
52:29:8d:b9:d7:0e:25:c5:38:31:1a:75:67:8c:74:ff:ea:ad:
a3:87:24:0e:80:51:bb:44:bb:a4:81:b4:e3:04:47:5d:f5:32:
9b:cb:1c:96:4b:8c:98:16:61:59:8f:33:99:ec:a5:32:79:11:
c5:52:77:8e:9f:04:22:18:08:ae:93:17:a0:2b:d0:e9:5e:6e:
18:40:66:10:03:9d:3f:fe:0a:26:d1:a3:5a:8c:f4:f1:05:1a:
5c:2b:ea:6a:b2:71:66:34:f5:e8:f9:30:22:82:52:f7:4a:46:
a5:15:f6:ce:2f:ff:0d:e1:00:57:c0:04:ae:2b:7c:9f:93:55:
75:f2:83:96:4d:24:71:91:50:a2:eb:8a:b0:9f:77:3e:d9:5d:
34:a2:55:c3:cf:ff:48:53:3a:71:26:0d:d3:5f:f9:7f:31:14:
e9:79:37:38:94:77:70:66:28:ec:8b:36:26:44:43:1c:7d:67:
ed:c3:57:7e:55:75:da:f6:31:19:fb:89:b2:d9:26:10:e9:67:
f7:6b:b4:c6:44:fd:7d:c5:8a:d2:03:99:cf:c1:39:5a:ee:3c:
e1:40:67:1b:11:96:bb:d9:56:f0:37:d3:8c:8e:c6:0c:02:3e:
9c:71:bf:b6:6a:16:75:07:e4:5d:aa:98:be:06:f8:2f:bc:50:
0c:97:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:37 2026 by rpki-client