This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa
File: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (raw, json)
Hash identifier: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=
Subject key identifier: 06:D5:00:DB:E4:06:18:8C:81:5E:49:85:24:87:B4:07:87:97:32:55
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 019B76EB2778C79DCA20AFA49449C71C5B36
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa
Signing time: Thu 01 Jan 2026 00:18:01 +0000
ROA not before: Thu 01 Jan 2026 00:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153371
IP address blocks: 185.255.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:27:78:c7:9d:ca:20:af:a4:94:49:c7:1c:5b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 00:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06d500dbe406188c815e49852487b40787973255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0c:74:36:51:1b:db:66:bf:17:44:de:51:12:
12:4a:30:e2:48:91:66:70:23:07:ce:3d:53:c2:98:
4b:c8:5f:d5:18:55:1b:59:59:93:52:09:88:75:85:
67:6d:16:d5:f6:6c:f9:0f:11:58:a7:0d:fb:2a:18:
18:09:d5:e6:43:9d:6e:41:df:fe:f4:2a:d7:f6:0c:
bf:6c:04:76:6d:4c:cb:d1:67:eb:f0:5f:3a:dd:ee:
e4:68:f7:69:0c:fa:6d:ea:54:1e:63:2d:fd:74:2c:
af:c3:b7:50:12:c1:d7:0a:ac:02:bb:c6:c5:ef:71:
f0:94:20:e8:83:f4:36:ab:2e:c5:6a:ca:34:b2:bf:
da:82:41:d0:1c:a2:45:5b:07:25:8f:4e:4f:e5:24:
27:dd:7a:c3:e1:b9:c2:57:2d:94:02:da:89:6d:b6:
5e:f8:65:4f:03:05:ef:97:67:79:ca:5d:eb:a9:bc:
3c:3f:fe:3c:1a:dd:42:15:6e:a3:6e:63:8b:eb:2a:
50:29:6f:f5:86:41:7d:94:47:87:fe:2d:d7:47:c4:
15:bd:58:a0:f3:6e:9d:0d:4c:a9:a2:e7:23:e6:41:
dc:d4:0f:07:74:4a:df:5e:4f:b5:48:4d:d4:4b:35:
1d:ae:b8:ff:4c:a7:2b:09:1a:79:94:95:e6:47:a0:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D5:00:DB:E4:06:18:8C:81:5E:49:85:24:87:B4:07:87:97:32:55
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:0d:3a:b6:eb:43:91:43:e3:c8:73:6a:47:d5:ee:80:9f:93:
04:04:a1:6d:dc:07:92:03:e6:32:7d:b8:1d:3c:0a:54:5b:08:
e1:7f:71:85:6a:c5:df:25:69:29:d3:cc:2f:eb:75:bc:25:54:
ad:f4:ce:1d:38:46:f6:83:40:0a:d5:fa:c1:2c:af:71:fb:7f:
64:b9:c1:c8:b7:cc:d7:45:02:a7:fe:a2:c1:99:e4:c9:de:f8:
52:d5:3c:3e:63:7f:6f:43:b8:0d:b9:2b:fa:44:75:8b:fe:6c:
7c:ee:2a:55:b8:b4:d2:d3:43:d6:79:37:d1:ba:31:a6:8c:10:
fb:f9:8a:63:b3:38:15:59:1d:ec:d3:9e:92:a2:fd:25:09:a1:
76:0a:b6:aa:ff:60:ae:a5:36:65:a7:af:de:3d:92:73:d2:c1:
07:ec:6a:49:fc:90:a1:b9:de:d5:5e:e1:18:c5:b7:08:c1:93:
0b:ff:1e:d9:7e:0a:22:d4:29:8b:63:6d:85:3d:ae:e1:61:8f:
de:0f:5c:e7:aa:d6:60:18:b5:00:f5:67:53:23:b6:15:52:0c:
38:8d:fc:5c:e8:f5:99:df:e3:72:79:99:1a:ee:f4:99:99:63:
51:4e:5f:d7:ef:ce:21:73:ca:65:62:c8:e2:cc:f4:3f:d3:6a:
9a:f0:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:21:58 2026 by rpki-client