This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/BxvgescOjA8yVoBQDMW9AgeHMvo.roa
File: BxvgescOjA8yVoBQDMW9AgeHMvo.roa (raw, json)
Hash identifier: s/fVU0Yw344Ddk11ZJ89PHH1xHONzdOMNDaYlJ20fIE=
Subject key identifier: 07:1B:E0:7A:C7:0E:8C:0F:32:56:80:50:0C:C5:BD:02:07:87:32:FA
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019B797F224DEAA6484EFAAF3B07DEAD8E7C
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/BxvgescOjA8yVoBQDMW9AgeHMvo.roa
Signing time: Thu 01 Jan 2026 12:18:53 +0000
ROA not before: Thu 01 Jan 2026 12:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35830
IP address blocks: 130.49.76.0/24 maxlen: 24
130.49.77.0/24 maxlen: 24
130.49.78.0/24 maxlen: 24
130.49.79.0/24 maxlen: 24
130.49.112.0/24 maxlen: 24
130.49.113.0/24 maxlen: 24
130.49.114.0/24 maxlen: 24
130.49.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:22:4d:ea:a6:48:4e:fa:af:3b:07:de:ad:8e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jan 1 12:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=071be07ac70e8c0f325680500cc5bd02078732fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:a6:41:24:36:b1:c2:58:62:42:50:33:66:
3d:01:7a:72:e5:f6:d4:e4:ed:14:09:38:f1:04:02:
c7:6b:f0:96:88:be:cf:eb:83:c5:20:56:af:3b:a9:
f6:f0:bd:02:f3:b6:9f:74:0b:cc:48:67:aa:90:ee:
e8:48:91:82:a7:a9:8d:b3:88:21:44:de:1a:c6:1f:
87:d3:25:b2:34:09:77:b0:79:09:34:4a:94:69:75:
78:d5:fd:c9:62:31:4b:1b:a2:94:2a:73:fa:87:a5:
ee:47:69:0c:1c:6b:ac:f8:80:9e:21:e7:19:66:bf:
60:64:df:8e:09:cd:f0:2c:a6:01:2a:04:e5:62:d0:
67:eb:61:d2:14:b5:26:dc:92:f9:02:5c:85:03:bd:
71:58:02:39:2f:07:9a:c4:bc:70:e5:38:fe:2e:98:
ce:19:33:15:cc:9e:93:a0:dd:61:25:50:5c:c0:c2:
b9:00:f0:72:94:d9:be:57:e3:a7:df:f4:2c:87:b4:
dd:db:54:d6:ba:5b:50:e9:71:f6:76:f2:45:14:0e:
30:a0:8e:b6:b2:49:9b:b4:10:f6:5d:52:d1:9d:31:
67:61:2d:a0:d2:16:16:db:41:b2:75:1d:b9:8f:2b:
fb:da:1f:e0:b2:44:f6:75:df:22:a4:f0:a0:dd:65:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1B:E0:7A:C7:0E:8C:0F:32:56:80:50:0C:C5:BD:02:07:87:32:FA
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/BxvgescOjA8yVoBQDMW9AgeHMvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.76.0/22
130.49.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:b8:2b:ad:3a:4c:51:e4:22:f9:cb:24:d2:b9:f3:4d:75:13:
b6:61:a1:5f:29:13:71:2d:86:8d:60:57:fb:ad:be:3d:05:f7:
56:5b:d5:64:c0:27:8e:e9:4c:1b:36:02:9f:ab:ae:19:1a:35:
58:e7:0b:33:3c:3e:c5:e3:ec:52:29:a2:f5:2e:21:a2:48:7e:
e4:64:b9:12:fb:ed:92:71:5a:6d:d7:07:62:b5:50:3b:59:6b:
51:e4:9b:1b:be:76:be:e2:40:8c:fa:eb:fa:a4:a7:1b:5b:8e:
b6:e5:23:e4:91:3d:32:b6:25:bf:4d:e3:e4:1f:49:16:88:49:
f2:a1:17:d9:cb:d6:2d:51:1b:a9:9e:4f:ae:ea:33:b7:be:45:
82:6f:e5:ee:7b:c1:20:fb:cf:43:ba:20:45:6a:1c:98:e0:23:
03:f2:1a:87:ab:c5:10:38:e6:dd:a4:45:41:b2:1a:e0:73:b2:
5c:ec:9d:93:18:e9:84:9a:70:16:86:2f:bb:f6:e3:6a:3f:8d:
e9:a7:07:69:63:eb:22:1f:91:3f:62:6c:53:fc:85:a9:d1:2e:
b4:09:53:50:bf:4a:b0:5c:b3:17:a2:65:c6:e7:2e:b1:46:70:
ae:3f:f0:b2:5f:5d:dc:54:08:72:13:ac:c7:67:24:d4:03:af:
86:f8:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:28:56 2026 by rpki-client