This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/Gt-80zXqf_s_u6U1np0ZyLE5Z40.roa File: Gt-80zXqf_s_u6U1np0ZyLE5Z40.roa (raw, json) Hash identifier: xo9qKHdsqyfJiaN4I/AOjnmYmRnO4exFxr4FsuIGykQ= Subject key identifier: 1A:DF:BC:D3:35:EA:7F:FB:3F:BB:A5:35:9E:9D:19:C8:B1:39:67:8D Certificate issuer: /CN=33ea24084f6b89b065559910e0311eb514bebb11 Certificate serial: 019B78A2AE316AF20C8F5745BD4843987621 Authority key identifier: 33:EA:24:08:4F:6B:89:B0:65:55:99:10:E0:31:1E:B5:14:BE:BB:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-okCE9ribBlVZkQ4DEetRS-uxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/Gt-80zXqf_s_u6U1np0ZyLE5Z40.roa Signing time: Thu 01 Jan 2026 08:18:05 +0000 ROA not before: Thu 01 Jan 2026 08:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203767 IP address blocks: 194.195.102.0/24 maxlen: 24 194.195.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/M-okCE9ribBlVZkQ4DEetRS-uxE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/M-okCE9ribBlVZkQ4DEetRS-uxE.mft rsync://rpki.ripe.net/repository/DEFAULT/M-okCE9ribBlVZkQ4DEetRS-uxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ae:31:6a:f2:0c:8f:57:45:bd:48:43:98:76:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea24084f6b89b065559910e0311eb514bebb11 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1adfbcd335ea7ffb3fbba5359e9d19c8b139678d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:03:c9:38:6e:44:5a:dc:43:bf:fa:af:a8:aa: 40:78:db:69:9c:23:ab:97:98:70:ee:e4:e5:b2:03: bb:8f:bf:90:78:a0:ff:85:7a:d5:bc:5d:62:73:92: 8a:3d:6d:54:ee:f0:82:8e:e9:48:9d:c3:1e:0e:3e: 88:06:9f:aa:15:d4:ed:79:8b:e3:58:ac:b7:e6:b0: 0a:be:1e:59:27:2f:da:a1:ef:16:4e:f7:51:af:8f: 32:7b:bd:0c:d0:12:a6:fa:75:ff:20:bb:fa:96:8a: 5d:69:fa:b8:50:98:06:2c:95:32:24:d8:2c:00:d3: 8a:04:eb:cf:b5:db:11:b3:38:7b:f7:e0:0d:a4:a7: de:ab:b7:23:3c:24:42:d4:a0:9e:53:7f:dd:35:18: 1a:df:97:c5:4a:ba:3b:a2:18:c3:c9:f6:63:84:96: 99:49:33:77:f2:9a:2d:48:bc:e0:98:4a:cb:2b:46: f9:c0:b5:fa:81:ad:a8:05:b3:91:76:57:74:3c:bb: bd:65:68:10:54:a9:c1:9a:20:d0:0b:f2:a0:9f:48: 59:e2:e9:27:3e:0a:d0:0a:7b:32:ad:90:54:52:ae: ac:ca:dd:c2:e1:af:77:29:09:c3:19:5a:0e:c7:10: 3f:7d:74:28:e6:ac:4c:5e:d7:5c:81:6e:d8:ab:a7: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DF:BC:D3:35:EA:7F:FB:3F:BB:A5:35:9E:9D:19:C8:B1:39:67:8D X509v3 Authority Key Identifier: keyid:33:EA:24:08:4F:6B:89:B0:65:55:99:10:E0:31:1E:B5:14:BE:BB:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-okCE9ribBlVZkQ4DEetRS-uxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/Gt-80zXqf_s_u6U1np0ZyLE5Z40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/M-okCE9ribBlVZkQ4DEetRS-uxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.195.102.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:7e:9c:10:81:6c:3c:87:a1:da:37:a7:0c:72:e0:18:96:53: 43:2f:8f:40:43:3f:96:35:7d:12:a6:1e:3f:ab:1f:91:50:92: 32:9a:af:d4:0c:63:99:6f:3e:13:02:05:e4:3d:25:41:ce:71: 30:cf:c9:00:8f:59:49:b9:ab:9d:5b:82:f0:0d:99:07:1c:f4: 8a:5b:69:64:d9:33:49:75:ff:10:33:79:6d:ea:42:1f:9b:57: ba:e8:71:28:d8:52:54:df:be:a8:46:32:78:f8:9d:e0:07:fb: 87:2f:dd:b9:20:cd:a6:24:4e:dc:53:7a:01:8d:12:87:bf:c3: c9:58:64:d9:f9:74:48:a2:c6:4c:b4:3e:a8:2b:27:57:41:c6: 9a:b2:df:49:79:81:7c:56:0e:df:63:a1:d9:aa:4b:16:5b:93: 40:14:b8:ca:a3:6c:d7:70:0d:7d:26:51:07:10:f4:9a:79:9a: 57:98:8a:37:1d:3b:59:42:50:38:a2:70:db:4d:2f:8f:92:03: 84:86:ec:f4:e7:3b:4c:27:6f:83:d2:0d:de:27:c8:8b:40:4c: 3a:04:06:2b:7a:54:8c:c2:27:c9:ca:09:f7:47:59:fb:61:cf: 84:2f:90:06:d0:97:f3:70:27:8f:19:e9:b1:1d:79:43:6a:4d: 42:1e:28:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oq4xavIMj1dFvUhDmHYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWEyNDA4NGY2Yjg5YjA2NTU1OTkxMGUwMzExZWI1MTRi ZWJiMTEwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWRmYmNkMzM1ZWE3ZmZiM2ZiYmE1MzU5ZTlkMTljOGIxMzk2NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwPJOG5EWtxDv/qvqKpAeNtpnCOr l5hw7uTlsgO7j7+QeKD/hXrVvF1ic5KKPW1U7vCCjulIncMeDj6IBp+qFdTteYvj WKy35rAKvh5ZJy/aoe8WTvdRr48ye70M0BKm+nX/ILv6lopdafq4UJgGLJUyJNgs ANOKBOvPtdsRszh79+ANpKfeq7cjPCRC1KCeU3/dNRga35fFSro7ohjDyfZjhJaZ STN38potSLzgmErLK0b5wLX6ga2oBbORdld0PLu9ZWgQVKnBmiDQC/Kgn0hZ4ukn PgrQCnsyrZBUUq6syt3C4a93KQnDGVoOxxA/fXQo5qxMXtdcgW7Yq6dUKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBrfvNM16n/7P7ulNZ6dGcixOWeNMB8GA1UdIwQY MBaAFDPqJAhPa4mwZVWZEOAxHrUUvrsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1va0NFOXJpYkJsVlprUTRERWV0UlMtdXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mZTNmZWYtZTE3Ni00NTFhLTk1ZDUt OTA1MTk2ZWJhMGJlLzEvR3QtODB6WHFmX3NfdTZVMW5wMFp5TEU1WjQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mZTNmZWYtZTE3Ni00NTFhLTk1ZDUtOTA1MTk2ZWJhMGJl LzEvTS1va0NFOXJpYkJsVlprUTRERWV0UlMtdXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwsNmMA0G CSqGSIb3DQEBCwUAA4IBAQAcfpwQgWw8h6HaN6cMcuAYllNDL49AQz+WNX0Sph4/ qx+RUJIymq/UDGOZbz4TAgXkPSVBznEwz8kAj1lJuaudW4LwDZkHHPSKW2lk2TNJ df8QM3lt6kIfm1e66HEo2FJU376oRjJ4+J3gB/uHL925IM2mJE7cU3oBjRKHv8PJ WGTZ+XRIosZMtD6oKydXQcaast9JeYF8Vg7fY6HZqksWW5NAFLjKo2zXcA19JlEH EPSaeZpXmIo3HTtZQlA4onDbTS+PkgOEhuz05ztMJ2+D0g3eJ8iLQEw6BAYrelSM wifJygn3R1n7Yc+EL5AG0JfzcCePGemxHXlDak1CHiiJ -----END CERTIFICATE-----Generated at Thu Jan 8 18:12:45 2026 by rpki-client