This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CatuVr_K4SPxb6ZuNEvjLRgkabo.roa File: CatuVr_K4SPxb6ZuNEvjLRgkabo.roa (raw, json) Hash identifier: iMPNfZX9fWWnNED+PKfK/Mf+6srSgfe7/o4m92FNYHU= Subject key identifier: 09:AB:6E:56:BF:CA:E1:23:F1:6F:A6:6E:34:4B:E3:2D:18:24:69:BA Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2531BB5B37E234198BDBB3D4E49C1 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CatuVr_K4SPxb6ZuNEvjLRgkabo.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 212.134.157.0/24 maxlen: 24 212.135.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:53:1b:b5:b3:7e:23:41:98:bd:bb:3d:4e:49:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ab6e56bfcae123f16fa66e344be32d182469ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:8b:a5:55:38:ed:42:ae:ac:10:28:d7:e3: ee:5f:22:38:87:3f:c7:0e:cc:c5:0d:b6:ec:26:05: ba:14:56:af:db:3c:44:09:49:a5:0b:69:2e:d4:f6: 99:ad:b2:a3:4b:63:3c:3a:54:83:6e:74:35:30:c1: 14:94:68:bc:56:dc:4e:e2:ef:ee:b6:a0:68:9e:3d: 82:f3:68:df:bd:bc:42:4f:c2:e3:7a:74:cf:50:37: 08:a2:b5:37:e8:fd:9d:78:9f:c8:a6:ae:63:95:43: 2c:00:32:65:8a:c4:7e:ce:3a:e1:8f:76:f9:ae:43: 9d:df:01:b3:9b:6f:69:f1:36:14:b8:d8:52:52:03: 3f:1a:54:2b:fc:be:3c:b2:76:33:89:69:33:cd:7a: b6:08:0b:e5:8a:61:d8:66:50:13:48:34:28:18:a0: b8:57:fd:7e:a5:1d:2b:b5:af:66:4f:f8:e4:62:aa: cf:15:70:52:ca:42:48:22:ca:35:4c:72:5a:5a:2f: 39:fa:99:e4:f9:3d:bb:da:7f:b9:0d:26:f7:4a:3b: 15:2d:05:fb:68:3d:d0:f4:0b:4d:0f:a0:77:dc:29: 9b:92:f3:1b:96:6b:55:b0:b8:b6:b6:49:50:53:aa: d3:f8:df:13:cf:1b:62:e4:47:6d:f5:f3:ca:e0:7f: 24:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:6E:56:BF:CA:E1:23:F1:6F:A6:6E:34:4B:E3:2D:18:24:69:BA X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CatuVr_K4SPxb6ZuNEvjLRgkabo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.157.0/24 212.135.252.0/24 Signature Algorithm: sha256WithRSAEncryption ba:e0:b6:6b:ad:17:e8:37:66:30:da:d5:61:4a:21:92:69:69: a0:18:52:8f:53:d7:9f:15:46:bf:e3:26:9f:b7:cb:0d:ae:61: de:d9:4f:72:12:9c:61:ea:1f:ee:f8:00:f6:c7:5d:cf:4b:66: 94:05:ca:26:3c:f8:01:d0:91:23:36:90:da:e4:09:dc:33:f5: 84:a7:41:f2:8e:5e:0b:53:08:0a:9c:06:33:34:b1:63:26:93: 1d:07:c5:1e:b0:bf:58:2e:ee:69:34:65:e5:b3:a5:9f:c7:45: c8:79:93:b6:09:8c:b4:64:9d:67:d2:7c:18:a2:cf:bf:36:e2: 9b:46:01:55:46:93:72:fa:9f:b3:13:b9:31:bb:71:93:de:00: c6:27:23:1f:36:e2:28:72:cf:72:b5:55:9e:84:4f:28:b3:44: 6c:fa:29:1f:17:9e:c4:02:38:47:67:e5:99:fc:af:c0:eb:89: fc:d1:3f:cc:93:bd:29:70:fc:6c:fa:00:f0:e0:13:2a:a1:3e: 4d:f4:8a:f0:25:51:cd:1b:f7:8d:21:e2:8d:60:47:02:97:dc: 6f:4a:c4:80:3b:83:9b:b6:e0:40:e4:ba:b4:16:7a:c7:a9:5b: d4:49:18:ab:d1:0d:5e:bc:fd:76:a4:12:ba:fc:ee:8a:1f:b5: 1d:ed:cc:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4olMbtbN+I0GYvbs9TknBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWFiNmU1NmJmY2FlMTIzZjE2ZmE2NmUzNDRiZTMyZDE4MjQ2OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6yLpVU47UKurBAo1+PuXyI4hz/H DszFDbbsJgW6FFav2zxECUmlC2ku1PaZrbKjS2M8OlSDbnQ1MMEUlGi8VtxO4u/u tqBonj2C82jfvbxCT8LjenTPUDcIorU36P2deJ/Ipq5jlUMsADJlisR+zjrhj3b5 rkOd3wGzm29p8TYUuNhSUgM/GlQr/L48snYziWkzzXq2CAvlimHYZlATSDQoGKC4 V/1+pR0rta9mT/jkYqrPFXBSykJIIso1THJaWi85+pnk+T272n+5DSb3SjsVLQX7 aD3Q9AtND6B33CmbkvMblmtVsLi2tklQU6rT+N8Tzxti5Edt9fPK4H8kEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAmrbla/yuEj8W+mbjRL4y0YJGm6MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvQ2F0dVZyX0s0U1B4YjZadU5FdmpMUmdrYWJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1IadAwQA 1If8MA0GCSqGSIb3DQEBCwUAA4IBAQC64LZrrRfoN2Yw2tVhSiGSaWmgGFKPU9ef FUa/4yaft8sNrmHe2U9yEpxh6h/u+AD2x13PS2aUBcomPPgB0JEjNpDa5AncM/WE p0Hyjl4LUwgKnAYzNLFjJpMdB8UesL9YLu5pNGXls6Wfx0XIeZO2CYy0ZJ1n0nwY os+/NuKbRgFVRpNy+p+zE7kxu3GT3gDGJyMfNuIocs9ytVWehE8os0Rs+ikfF57E AjhHZ+WZ/K/A64n80T/Mk70pcPxs+gDw4BMqoT5N9IrwJVHNG/eNIeKNYEcCl9xv SsSAO4ObtuBA5Lq0FnrHqVvUSRir0Q1evP12pBK6/O6KH7Ud7cxf -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:49 2026 by rpki-client