This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/Otng_ezlHXU4kxRwo4HMGqBulxQ.roa File: Otng_ezlHXU4kxRwo4HMGqBulxQ.roa (raw, json) Hash identifier: ZzUAW/zmUDDboHtiC8pCPo3qWbKB9FgFtOseaATnUSk= Subject key identifier: 3A:D9:E0:FD:EC:E5:1D:75:38:93:14:70:A3:81:CC:1A:A0:6E:97:14 Certificate issuer: /CN=40e634bdc30c0c4b5f7945f3d041e23505bcd159 Certificate serial: 019B7D5CB280C587250FD63200EF0BA74C34 Authority key identifier: 40:E6:34:BD:C3:0C:0C:4B:5F:79:45:F3:D0:41:E2:35:05:BC:D1:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOY0vcMMDEtfeUXz0EHiNQW80Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/Otng_ezlHXU4kxRwo4HMGqBulxQ.roa Signing time: Fri 02 Jan 2026 06:19:45 +0000 ROA not before: Fri 02 Jan 2026 06:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21420 IP address blocks: 193.109.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/QOY0vcMMDEtfeUXz0EHiNQW80Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/QOY0vcMMDEtfeUXz0EHiNQW80Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/QOY0vcMMDEtfeUXz0EHiNQW80Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b2:80:c5:87:25:0f:d6:32:00:ef:0b:a7:4c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e634bdc30c0c4b5f7945f3d041e23505bcd159 Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad9e0fdece51d7538931470a381cc1aa06e9714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:6f:c5:2b:08:34:97:b9:9b:52:b0:20:d6: cf:7a:8f:2b:fc:97:ca:dd:7f:4e:32:2a:e7:e9:86: bc:5b:1c:d1:fb:21:b7:45:79:e7:99:00:79:d5:00: bb:76:eb:22:47:c1:39:1b:d9:2e:be:ce:34:06:41: 71:44:64:90:40:e2:17:36:c8:f1:5f:4f:c7:ed:5f: 04:72:ea:17:de:e2:b2:ed:1f:36:96:14:d5:a6:d8: f0:f5:be:18:9b:30:5e:43:09:8e:8a:69:da:8a:1e: 76:a0:35:92:cd:3d:bc:62:ac:76:6f:50:67:ba:5f: 46:98:20:c2:80:2d:81:4b:6a:ea:a6:60:6f:ed:e4: eb:95:03:d3:f1:7f:e1:74:c6:d7:a1:fe:e4:e8:11: b6:8d:85:45:47:f6:43:9d:2a:5d:65:c8:f4:55:78: 51:8d:1d:69:c4:7d:e8:67:27:8e:ad:d5:e3:93:70: 76:07:8f:22:9e:de:8b:25:eb:21:d4:df:aa:86:31: e0:44:5d:cd:50:70:94:2d:66:23:77:fe:8a:8f:e4: dc:d5:36:5e:36:d5:dd:bf:8d:15:52:09:25:4e:f1: ba:79:df:9a:bc:83:6a:5f:40:7a:d2:1b:7a:4f:a0: 5d:18:0c:05:9a:e5:21:c5:88:c2:f3:9e:60:f0:f4: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D9:E0:FD:EC:E5:1D:75:38:93:14:70:A3:81:CC:1A:A0:6E:97:14 X509v3 Authority Key Identifier: keyid:40:E6:34:BD:C3:0C:0C:4B:5F:79:45:F3:D0:41:E2:35:05:BC:D1:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOY0vcMMDEtfeUXz0EHiNQW80Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/Otng_ezlHXU4kxRwo4HMGqBulxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c33731-3c52-4c85-9789-bd27afad9c3d/1/QOY0vcMMDEtfeUXz0EHiNQW80Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.235.0/24 Signature Algorithm: sha256WithRSAEncryption 19:fc:ef:6b:a4:e0:61:2d:ab:ca:3b:16:03:55:7f:9f:92:37: 53:ac:7f:31:fe:27:b9:2a:8a:c9:13:b0:01:21:17:e2:9c:00: d3:17:23:8b:b9:b7:84:eb:a9:be:a1:85:ab:15:ab:3f:4f:29: e8:97:7e:2a:11:e5:51:2a:c8:b9:37:3f:09:77:49:a3:62:b0: 20:4b:f9:04:9f:d0:c7:bc:0f:0f:24:bc:f2:eb:68:c0:e5:58: 65:d7:15:01:05:08:45:29:a3:51:1c:e1:e5:3d:57:ba:a1:16: eb:8b:c1:3f:c7:83:41:de:29:84:80:81:c4:c5:f6:db:15:8d: 80:7c:42:0c:f6:00:67:a1:10:e2:f9:43:da:09:2e:89:58:e7: e7:dc:18:86:48:2e:05:a8:d4:ae:25:9c:dc:70:c0:53:4f:33: 01:b5:56:69:a4:cf:e4:41:0b:a6:1b:28:93:f5:44:69:33:43: 90:c8:1f:3a:45:2b:54:01:c4:74:b4:53:79:80:5b:74:0f:08: b1:f3:fd:85:6a:a1:a7:62:33:1e:95:b9:aa:2a:e6:ac:13:59: 16:ac:8f:9d:0a:da:cc:e9:a8:3a:65:d9:c3:59:c8:d4:12:08: 8b:8a:1e:9f:dc:28:32:15:13:71:d7:9e:c5:e1:35:28:71:e1: b7:0f:8c:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLKAxYclD9YyAO8Lp0w0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZTYzNGJkYzMwYzBjNGI1Zjc5NDVmM2QwNDFlMjM1MDVi Y2QxNTkwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQ5ZTBmZGVjZTUxZDc1Mzg5MzE0NzBhMzgxY2MxYWEwNmU5NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVNvxSsINJe5m1KwINbPeo8r/JfK 3X9OMirn6Ya8WxzR+yG3RXnnmQB51QC7dusiR8E5G9kuvs40BkFxRGSQQOIXNsjx X0/H7V8EcuoX3uKy7R82lhTVptjw9b4YmzBeQwmOimnaih52oDWSzT28Yqx2b1Bn ul9GmCDCgC2BS2rqpmBv7eTrlQPT8X/hdMbXof7k6BG2jYVFR/ZDnSpdZcj0VXhR jR1pxH3oZyeOrdXjk3B2B48int6LJesh1N+qhjHgRF3NUHCULWYjd/6Kj+Tc1TZe NtXdv40VUgklTvG6ed+avINqX0B60ht6T6BdGAwFmuUhxYjC855g8PRJ9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrZ4P3s5R11OJMUcKOBzBqgbpcUMB8GA1UdIwQY MBaAFEDmNL3DDAxLX3lF89BB4jUFvNFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9ZMHZjTU1ERXRmZVVYejBFSGlOUVc4MFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMzM3MzEtM2M1Mi00Yzg1LTk3ODkt YmQyN2FmYWQ5YzNkLzEvT3RuZ19lemxIWFU0a3hSd280SE1HcUJ1bHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMzM3MzEtM2M1Mi00Yzg1LTk3ODktYmQyN2FmYWQ5YzNk LzEvUU9ZMHZjTU1ERXRmZVVYejBFSGlOUVc4MFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3rMA0G CSqGSIb3DQEBCwUAA4IBAQAZ/O9rpOBhLavKOxYDVX+fkjdTrH8x/ie5KorJE7AB IRfinADTFyOLubeE66m+oYWrFas/Tynol34qEeVRKsi5Nz8Jd0mjYrAgS/kEn9DH vA8PJLzy62jA5Vhl1xUBBQhFKaNRHOHlPVe6oRbri8E/x4NB3imEgIHExfbbFY2A fEIM9gBnoRDi+UPaCS6JWOfn3BiGSC4FqNSuJZzccMBTTzMBtVZppM/kQQumGyiT 9URpM0OQyB86RStUAcR0tFN5gFt0Dwix8/2FaqGnYjMelbmqKuasE1kWrI+dCtrM 6ag6ZdnDWcjUEgiLih6f3CgyFRNx157F4TUoceG3D4wC -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:27 2026 by rpki-client