This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/U01w-_S3-VaQJqZ__iYXrfJCx_M.roa File: U01w-_S3-VaQJqZ__iYXrfJCx_M.roa (raw, json) Hash identifier: p1K9i1KbQSGM9Yf57hhID8NKkqmDs1lHSOtPqOhBC20= Subject key identifier: 53:4D:70:FB:F4:B7:F9:56:90:26:A6:7F:FE:26:17:AD:F2:42:C7:F3 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348A8628A602BE46BE02E57FC87F3E Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/U01w-_S3-VaQJqZ__iYXrfJCx_M.roa Signing time: Thu 01 Jan 2026 06:17:47 +0000 ROA not before: Thu 01 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207804 IP address blocks: 192.121.26.0/24 maxlen: 24 2a01:280:3c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8a:86:28:a6:02:be:46:be:02:e5:7f:c8:7f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=534d70fbf4b7f9569026a67ffe2617adf242c7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:a6:0f:8f:b5:e0:5e:76:a5:a5:32:61:be: b9:c8:8c:0a:77:b5:ef:04:4a:05:ff:05:2d:6c:22: 67:f6:01:5f:6f:51:7a:39:e9:c2:fa:de:e2:b8:30: d4:c9:a9:92:ea:b0:62:c1:cd:bc:f4:9d:95:ab:c7: fd:5a:9d:95:6f:09:5f:d9:8d:ec:44:36:e8:60:77: ee:21:43:f6:47:8b:45:3c:b5:09:fe:6b:19:34:ea: cf:2e:27:94:38:4d:80:23:22:0f:61:29:eb:b2:4e: a4:50:6b:66:be:d6:be:7b:6c:4a:23:9a:bf:86:63: 6f:ad:46:b6:84:1d:b5:6a:2f:5b:48:34:3d:2f:46: 29:52:0a:ac:53:5e:51:38:39:7e:54:7f:b5:e5:c2: 44:ec:82:9a:1e:99:ea:aa:f6:3b:bd:c6:0c:61:55: c9:dd:23:a7:da:f5:51:74:6e:a7:ad:51:6e:97:49: 6d:9d:fa:f6:6d:d3:57:44:02:09:67:63:1c:b4:d1: 4c:63:2a:7f:e8:1b:90:43:78:27:57:73:5f:0b:57: 98:e8:3b:05:ff:54:84:f1:55:2e:f3:0b:b1:e5:00: d2:a3:af:ca:4a:53:c2:ba:36:7b:cf:59:1b:56:17: 91:bc:66:cc:b9:0b:77:f4:8a:bf:94:84:6e:38:8d: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:70:FB:F4:B7:F9:56:90:26:A6:7F:FE:26:17:AD:F2:42:C7:F3 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/U01w-_S3-VaQJqZ__iYXrfJCx_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.26.0/24 IPv6: 2a01:280:3c8::/48 Signature Algorithm: sha256WithRSAEncryption 06:3e:4b:ab:cd:b7:7b:54:a6:2e:a5:db:ae:43:35:f5:e4:e0: 19:37:cf:84:ef:d4:97:b6:c3:7f:cb:dd:73:c0:00:e9:c4:22: be:fe:62:9d:99:ec:c5:22:a8:38:64:fe:da:4a:1d:25:1b:9b: 7a:7d:f5:57:75:2f:1e:d6:7e:cd:94:a2:82:16:9b:b9:ff:4c: ee:38:db:b2:97:86:61:07:4d:f1:b7:8f:c8:07:89:b4:78:39: 45:46:51:cb:75:20:2f:c0:2d:cd:74:61:8b:77:e9:e4:64:79: ec:93:e5:8f:81:c4:49:82:1c:4d:a7:d5:42:14:3f:41:0a:75: 46:72:84:57:56:27:e1:29:fa:cb:6d:ec:5f:92:3a:09:4c:1e: 08:08:12:99:ae:76:0e:d9:31:73:d9:fe:de:c4:14:28:26:4e: 8a:42:f4:a3:ce:89:91:e4:41:8b:16:bd:63:7f:2e:f8:0d:c3: 28:72:fd:cc:f5:49:a1:2f:53:18:bd:7b:8c:f6:0a:7f:1e:5c: 18:71:53:ca:61:09:8e:48:75:c8:11:54:6a:c5:94:a6:b8:42: ce:28:0c:fd:4f:f6:9d:4e:30:69:41:3d:a1:95:bd:02:dd:17: 52:64:21:58:65:c9:77:ef:68:c1:bd:38:7c:20:37:68:06:c0: 56:7d:1e:70 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NIqGKKYCvka+AuV/yH8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzRkNzBmYmY0YjdmOTU2OTAyNmE2N2ZmZTI2MTdhZGYyNDJjN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3GmD4+14F52paUyYb65yIwKd7Xv BEoF/wUtbCJn9gFfb1F6OenC+t7iuDDUyamS6rBiwc289J2Vq8f9Wp2Vbwlf2Y3s RDboYHfuIUP2R4tFPLUJ/msZNOrPLieUOE2AIyIPYSnrsk6kUGtmvta+e2xKI5q/ hmNvrUa2hB21ai9bSDQ9L0YpUgqsU15RODl+VH+15cJE7IKaHpnqqvY7vcYMYVXJ 3SOn2vVRdG6nrVFul0ltnfr2bdNXRAIJZ2MctNFMYyp/6BuQQ3gnV3NfC1eY6DsF /1SE8VUu8wux5QDSo6/KSlPCujZ7z1kbVheRvGbMuQt39Iq/lIRuOI1zAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFNNcPv0t/lWkCamf/4mF63yQsfzMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvVTAxdy1fUzMtVmFRSnFaX19pWVhyZkpDeF9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwHkaMA8E AgACMAkDBwAqAQKAA8gwDQYJKoZIhvcNAQELBQADggEBAAY+S6vNt3tUpi6l265D NfXk4Bk3z4Tv1Je2w3/L3XPAAOnEIr7+Yp2Z7MUiqDhk/tpKHSUbm3p99Vd1Lx7W fs2UooIWm7n/TO4427KXhmEHTfG3j8gHibR4OUVGUct1IC/ALc10YYt36eRkeeyT 5Y+BxEmCHE2n1UIUP0EKdUZyhFdWJ+Ep+stt7F+SOglMHggIEpmudg7ZMXPZ/t7E FCgmTopC9KPOiZHkQYsWvWN/LvgNwyhy/cz1SaEvUxi9e4z2Cn8eXBhxU8phCY5I dcgRVGrFlKa4Qs4oDP1P9p1OMGlBPaGVvQLdF1JkIVhlyXfvaMG9OHwgN2gGwFZ9 HnA= -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:57 2026 by rpki-client