This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/grzGxCAEf0Hspcax1ImuxfLkRN8.roa File: grzGxCAEf0Hspcax1ImuxfLkRN8.roa (raw, json) Hash identifier: xJx7DqzZdlLw1Ymcz36R8CSmRus5PXC/Zrp7Q1ZFLbQ= Subject key identifier: 82:BC:C6:C4:20:04:7F:41:EC:A5:C6:B1:D4:89:AE:C5:F2:E4:44:DF Certificate issuer: /CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d Certificate serial: 019AFE740D1F034943EC8D5EAAFD7B57340B Authority key identifier: 2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/grzGxCAEf0Hspcax1ImuxfLkRN8.roa Signing time: Mon 08 Dec 2025 14:53:29 +0000 ROA not before: Mon 08 Dec 2025 14:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30788 IP address blocks: 2a11:be00::/32 maxlen: 32 2a11:be01::/32 maxlen: 32 2a11:be02::/32 maxlen: 32 2a11:be03::/32 maxlen: 32 2a11:be04::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:74:0d:1f:03:49:43:ec:8d:5e:aa:fd:7b:57:34:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d Validity Not Before: Dec 8 14:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82bcc6c420047f41eca5c6b1d489aec5f2e444df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:4e:d5:fb:b0:d0:ea:e1:5f:74:94:ff:f9: 6a:6c:93:0d:95:2f:6a:e6:27:3f:85:3a:78:48:ce: 6a:0d:3f:6c:62:1a:ef:bc:c5:3d:fc:f6:ed:b5:ff: e3:20:e1:9b:32:12:75:79:fb:fe:29:1e:ff:c2:40: 16:dd:86:2f:d3:22:d7:a8:ca:a0:f1:6c:c6:0f:74: e1:ae:a8:6e:89:be:dc:7b:e1:b6:1a:5f:6e:be:b5: 15:42:86:3a:92:13:bd:52:8f:8f:93:50:86:5c:d0: 9a:4c:c6:a8:76:ea:a7:8a:da:99:8b:65:05:38:18: 5b:a2:44:59:bd:cd:f8:1d:a4:68:15:30:30:ec:3f: be:ee:4c:ce:86:c2:61:22:18:82:73:0e:d7:ec:f0: d9:b7:2f:97:fd:1b:d6:5b:18:51:07:17:75:41:78: 6e:e6:4c:26:11:96:29:d5:70:b2:e3:94:2c:0b:17: 03:fd:4a:91:7c:89:c4:df:4f:c0:79:93:79:72:21: 86:f0:bd:4c:17:d5:97:ea:37:84:db:89:5e:ed:87: 4b:60:eb:d3:74:ff:bf:2c:f8:ce:ec:7c:80:2f:66: fa:fb:10:ed:2c:1e:f5:a8:cd:ca:e6:58:73:da:94: 8e:74:81:39:b0:ec:45:27:f2:b0:82:7e:8c:70:9c: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:C6:C4:20:04:7F:41:EC:A5:C6:B1:D4:89:AE:C5:F2:E4:44:DF X509v3 Authority Key Identifier: keyid:2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/grzGxCAEf0Hspcax1ImuxfLkRN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:be00::-2a11:be04:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 82:3a:92:b7:4a:bf:e3:cb:1c:a2:4c:7a:f8:8b:73:b6:fd:63: dd:0f:8c:fa:72:e4:62:0a:ac:d0:fe:5b:35:aa:cf:43:e8:8a: a4:c7:75:68:56:c2:03:88:ec:f9:12:30:11:51:ed:78:3a:e4: 76:8b:e5:6c:a4:d4:8c:9b:05:b5:c1:00:53:15:3f:d2:c5:a4: 7c:9d:24:61:d4:31:f5:cb:30:36:40:b1:65:3e:93:fe:e6:da: c5:ec:6c:61:53:92:e8:6b:e9:b0:df:a6:eb:96:22:2b:8f:01: 8a:83:cd:95:78:d4:18:26:ec:54:b3:dd:77:8f:88:4f:13:92: 36:61:fd:cf:a1:6c:f5:30:e7:d0:3a:ea:db:53:10:95:4f:ec: 82:60:9d:e0:82:a8:d1:f8:6c:8d:1c:af:00:91:75:e1:56:2b: 4d:67:ec:1b:8f:63:f0:55:67:a6:98:2f:a8:52:00:88:da:1f: a0:ff:84:9d:4d:ef:c8:81:6f:cb:ce:fb:d2:17:ef:7a:9e:56: 9b:06:b7:d8:15:bf:3d:cd:e2:c4:68:f7:a4:24:8e:d1:86:02: 7a:bf:7a:79:70:5a:9d:a2:97:c4:3b:93:15:33:de:93:4c:e5: ed:a9:7e:ad:88:e8:e5:b3:48:b2:9f:73:36:17:c2:86:17:71: c4:80:1c:8a -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZr+dA0fA0lD7I1eqv17VzQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzYyZDNmZDJmYmZjZTEwYzU4ZjllYjc2YmU5MGZjY2Jh ZmIxN2QwHhcNMjUxMjA4MTQ1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmJjYzZjNDIwMDQ3ZjQxZWNhNWM2YjFkNDg5YWVjNWYyZTQ0NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9RO1fuw0OrhX3SU//lqbJMNlS9q 5ic/hTp4SM5qDT9sYhrvvMU9/Pbttf/jIOGbMhJ1efv+KR7/wkAW3YYv0yLXqMqg 8WzGD3Thrqhuib7ce+G2Gl9uvrUVQoY6khO9Uo+Pk1CGXNCaTMaoduqnitqZi2UF OBhbokRZvc34HaRoFTAw7D++7kzOhsJhIhiCcw7X7PDZty+X/RvWWxhRBxd1QXhu 5kwmEZYp1XCy45QsCxcD/UqRfInE30/AeZN5ciGG8L1MF9WX6jeE24le7YdLYOvT dP+/LPjO7HyAL2b6+xDtLB71qM3K5lhz2pSOdIE5sOxFJ/Kwgn6McJwtwQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFIK8xsQgBH9B7KXGsdSJrsXy5ETfMB8GA1UdIwQY MBaAFC52LT/S+/zhDFj563a+kPzLr7F9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82ODMwZjYtZjA5Ni00YzgxLWExZjUt OGU4MTM4ZWZjNDFiLzEvZ3J6R3hDQUVmMEhzcGNheDFJbXV4ZkxrUk44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82ODMwZjYtZjA5Ni00YzgxLWExZjUtOGU4MTM4ZWZjNDFi LzEvTG5ZdFA5TDdfT0VNV1BucmRyNlFfTXV2c1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPMA0DBAEqEb4D BQAqEb4EMA0GCSqGSIb3DQEBCwUAA4IBAQCCOpK3Sr/jyxyiTHr4i3O2/WPdD4z6 cuRiCqzQ/ls1qs9D6Iqkx3VoVsIDiOz5EjARUe14OuR2i+VspNSMmwW1wQBTFT/S xaR8nSRh1DH1yzA2QLFlPpP+5trF7GxhU5Loa+mw36brliIrjwGKg82VeNQYJuxU s913j4hPE5I2Yf3PoWz1MOfQOurbUxCVT+yCYJ3ggqjR+GyNHK8AkXXhVitNZ+wb j2PwVWemmC+oUgCI2h+g/4SdTe/IgW/LzvvSF+96nlabBrfYFb89zeLEaPekJI7R hgJ6v3p5cFqdopfEO5MVM96TTOXtqX6tiOjls0iyn3M2F8KGF3HEgByK -----END CERTIFICATE-----Generated at Fri Dec 12 17:14:28 2025 by rpki-client