This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/0JM0OkHh0gwC8g-OMNq47SiQARw.roa File: 0JM0OkHh0gwC8g-OMNq47SiQARw.roa (raw, json) Hash identifier: tiN6fCdudno0l7vL8FxOHOem0n3hQEZui0uSyje+5gI= Subject key identifier: D0:93:34:3A:41:E1:D2:0C:02:F2:0F:8E:30:DA:B8:ED:28:90:01:1C Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7 Certificate serial: 019B7F15AD1F03A78BCD4F9FB0C027F395B4 Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/0JM0OkHh0gwC8g-OMNq47SiQARw.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47207 IP address blocks: 93.157.0.0/21 maxlen: 24 195.5.163.0/24 maxlen: 24 2001:67c:54::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ad:1f:03:a7:8b:cd:4f:9f:b0:c0:27:f3:95:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d093343a41e1d20c02f20f8e30dab8ed2890011c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9d:53:db:de:31:89:0f:01:58:86:d9:97:33: 4d:24:bd:70:a6:35:46:28:db:4b:ac:58:e6:88:6a: 4b:71:fd:4b:c5:af:6e:9b:19:74:c8:12:63:da:95: c7:8d:77:b0:5c:91:a9:55:10:17:d6:bb:15:75:01: ea:39:ae:ef:ba:21:a0:cf:e4:b3:00:e5:a8:a1:1d: 97:e8:64:a5:ca:bb:75:c8:e7:c2:cd:fe:23:c0:0c: ee:55:f5:aa:63:5e:56:85:a8:77:84:8a:9b:27:66: 9b:fa:09:fd:32:af:e3:c6:20:de:3d:27:fc:f5:17: 3f:97:0c:bc:96:a4:b3:a4:07:ea:85:81:d5:59:c1: 57:74:d3:f8:99:f8:c1:cb:b6:4c:21:6d:54:0b:47: fc:7d:3f:63:57:f0:94:b0:d1:b1:58:60:29:30:19: 00:b7:7f:c9:34:eb:ef:83:fa:d8:fd:85:65:b4:ad: f2:d0:63:f7:64:64:dc:89:b1:bf:77:e0:92:12:36: f5:50:e6:b1:20:4b:ab:00:13:20:e3:db:60:a1:ed: 90:63:b7:ff:ee:62:53:59:86:e5:9f:64:17:03:bd: 86:68:0f:da:fa:0b:d4:f0:a5:e9:08:92:23:eb:aa: f6:f6:a4:b9:2e:55:50:c0:a5:d5:f6:e3:df:47:dd: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:93:34:3A:41:E1:D2:0C:02:F2:0F:8E:30:DA:B8:ED:28:90:01:1C X509v3 Authority Key Identifier: keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/0JM0OkHh0gwC8g-OMNq47SiQARw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.0.0/21 195.5.163.0/24 IPv6: 2001:67c:54::/48 Signature Algorithm: sha256WithRSAEncryption 74:06:62:2d:27:53:7f:73:47:21:38:44:8d:aa:df:66:57:84: f8:a0:b9:64:7a:0e:40:fd:be:5f:61:29:35:1b:7c:9e:92:b3: 18:bf:de:ba:40:00:fc:9d:65:fd:55:96:ab:72:09:bf:42:57: 46:ba:1b:31:fb:37:27:d2:ba:3c:f3:95:bd:b0:0d:2d:67:b4: 04:01:91:63:33:0d:95:21:8b:80:0a:61:6d:ba:1e:e8:66:db: 67:9e:bf:6f:41:27:35:d1:c4:df:1c:c3:83:39:1d:c9:82:b8: cd:7e:80:74:e6:4e:00:df:c1:b5:74:c5:52:a9:6b:b4:8c:50: b8:a9:3b:69:a5:99:4e:ea:63:cc:4a:2e:e6:71:b3:a5:00:96: 82:04:4d:fb:ae:81:f5:69:db:c5:61:e7:db:b1:25:02:ed:c6: fa:6a:c5:19:49:29:da:5b:ea:71:f0:c0:96:0b:ad:55:7b:65: 01:a5:74:a3:14:81:98:16:d0:a2:13:51:87:69:cc:65:5f:9e: 3a:f6:f0:cd:59:ea:97:59:40:6a:a9:40:6d:bc:98:22:77:36: b9:6f:7b:cb:3b:c3:55:b8:d0:6f:3a:13:0b:8c:5a:7a:12:62: 2d:2e:17:d0:02:72:a7:88:3c:36:41:d7:59:0b:24:65:63:64: 83:29:30:e1 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/Fa0fA6eLzU+fsMAn85W0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjZhZDgzZjI1YzI4ODZhMjU4NTdmYjUxNWQ0NTU5NTI3 YzQ2ZjcwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDkzMzQzYTQxZTFkMjBjMDJmMjBmOGUzMGRhYjhlZDI4OTAwMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA551T294xiQ8BWIbZlzNNJL1wpjVG KNtLrFjmiGpLcf1Lxa9umxl0yBJj2pXHjXewXJGpVRAX1rsVdQHqOa7vuiGgz+Sz AOWooR2X6GSlyrt1yOfCzf4jwAzuVfWqY15Whah3hIqbJ2ab+gn9Mq/jxiDePSf8 9Rc/lwy8lqSzpAfqhYHVWcFXdNP4mfjBy7ZMIW1UC0f8fT9jV/CUsNGxWGApMBkA t3/JNOvvg/rY/YVltK3y0GP3ZGTcibG/d+CSEjb1UOaxIEurABMg49tgoe2QY7f/ 7mJTWYbln2QXA72GaA/a+gvU8KXpCJIj66r29qS5LlVQwKXV9uPfR93egwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNCTNDpB4dIMAvIPjjDauO0okAEcMB8GA1UdIwQY MBaAFMf2rYPyXCiGolhX+1FdRVlSfEb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9hdGdfSmNLSWFpV0ZmN1VWMUZXVko4UnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85N2U0ZTUtMDI0Ny00NmJhLTgzY2Et MzI2OGFlOTA5NmRjLzEvMEpNME9rSGgwZ3dDOGctT01OcTQ3U2lRQVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi85N2U0ZTUtMDI0Ny00NmJhLTgzY2EtMzI2OGFlOTA5NmRj LzEveF9hdGdfSmNLSWFpV0ZmN1VWMUZXVko4UnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDXZ0AAwQA wwWjMA8EAgACMAkDBwAgAQZ8AFQwDQYJKoZIhvcNAQELBQADggEBAHQGYi0nU39z RyE4RI2q32ZXhPiguWR6DkD9vl9hKTUbfJ6Ssxi/3rpAAPydZf1VlqtyCb9CV0a6 GzH7NyfSujzzlb2wDS1ntAQBkWMzDZUhi4AKYW26Huhm22eev29BJzXRxN8cw4M5 HcmCuM1+gHTmTgDfwbV0xVKpa7SMULipO2mlmU7qY8xKLuZxs6UAloIETfuugfVp 28Vh59uxJQLtxvpqxRlJKdpb6nHwwJYLrVV7ZQGldKMUgZgW0KITUYdpzGVfnjr2 8M1Z6pdZQGqpQG28mCJ3Nrlve8s7w1W40G86EwuMWnoSYi0uF9ACcqeIPDZB11kL JGVjZIMpMOE= -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:15 2026 by rpki-client