This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/OTRSO5_pHSeulNj4xXvHd4-oZGw.roa File: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (raw, json) Hash identifier: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY= Subject key identifier: 39:34:52:3B:9F:E9:1D:27:AE:94:D8:F8:C5:7B:C7:77:8F:A8:64:6C Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac Certificate serial: 019B7BA511CB4EB24660572EFA96E27B17CF Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/OTRSO5_pHSeulNj4xXvHd4-oZGw.roa Signing time: Thu 01 Jan 2026 22:19:34 +0000 ROA not before: Thu 01 Jan 2026 22:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213283 IP address blocks: 164.133.22.0/24 maxlen: 24 164.133.23.0/24 maxlen: 24 164.133.24.0/24 maxlen: 24 164.133.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:11:cb:4e:b2:46:60:57:2e:fa:96:e2:7b:17:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3934523b9fe91d27ae94d8f8c57bc7778fa8646c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:81:60:2a:6b:9f:1e:0a:c0:ad:4f:3a:3f:e9: 05:0c:2e:36:ac:ef:31:2b:21:fb:a8:67:30:c3:f8: 71:b9:85:3c:61:cd:4d:ae:e5:c8:0e:b4:a4:94:57: 6c:ec:e2:83:a6:e5:c2:60:9b:98:e2:a6:51:2a:46: 49:1e:55:50:fe:5e:3f:9a:c6:0a:e0:48:d8:2d:24: 6a:2b:49:80:0a:a7:a7:0b:88:c0:a9:ba:2e:81:7e: 7c:f3:ac:81:bb:89:13:c7:ba:a2:57:70:11:5c:64: 58:36:0f:2e:24:61:e4:fb:7c:c3:e0:0e:2e:94:a0: 13:38:72:36:57:1d:23:58:bc:00:c7:d8:d8:62:fe: 91:e7:a3:a6:f5:12:f7:a5:32:05:d9:c6:84:5b:fc: 73:ad:74:21:4e:26:33:39:98:f2:1d:32:7a:ba:3f: 88:10:bf:f9:0f:c0:0b:4f:fb:a5:9f:63:e7:ac:ef: e6:77:6a:e5:68:4b:b9:a0:ac:0d:8a:15:e8:92:e5: 29:46:fb:2d:69:3d:50:d3:b0:06:10:ac:42:c0:06: 9a:c1:f3:c2:9c:92:5a:22:11:86:81:6e:8f:0f:58: 1e:41:8a:02:31:4e:9e:f7:d0:22:b9:e0:15:52:bc: f0:fc:3c:8e:60:13:85:b5:ba:c9:2e:48:61:a8:55: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:34:52:3B:9F:E9:1D:27:AE:94:D8:F8:C5:7B:C7:77:8F:A8:64:6C X509v3 Authority Key Identifier: keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/OTRSO5_pHSeulNj4xXvHd4-oZGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.133.22.0-164.133.25.255 Signature Algorithm: sha256WithRSAEncryption 78:b9:93:3f:35:3a:9b:6c:4d:9b:8d:1d:66:c5:7e:1a:be:0b: c9:d9:fa:66:5e:ae:de:8e:d1:45:31:38:8b:9e:96:19:04:b6: 45:e7:6c:d5:52:ef:4b:36:e2:4b:29:ee:f7:bb:d1:54:33:23: b2:b6:54:dd:01:93:e2:1a:15:a4:67:4a:35:50:98:5e:ae:0c: 0d:78:e1:02:97:df:9a:b5:50:78:ed:d9:72:57:a9:94:c2:3b: 74:01:4e:3e:ae:d1:3c:04:97:8b:f8:55:37:02:4a:b3:90:8b: b9:ec:53:36:4e:0f:15:be:16:cc:90:da:5f:20:fd:f6:28:bc: cd:38:74:e6:69:51:45:cb:0a:cd:b4:63:e0:5d:15:6c:b2:7d: 4d:d5:58:9a:aa:e8:05:ed:33:61:5b:d4:76:4d:5e:34:4d:6f: 48:ac:76:ae:43:1c:b7:f9:68:ea:cc:bb:24:36:fc:0d:e9:d4: d7:33:83:e9:84:d3:9a:84:6d:9a:ec:c0:e4:f0:c2:d6:3b:16: b9:05:c5:95:a0:d8:68:00:32:d7:cf:1d:d4:fa:9f:e2:3b:67: d1:c0:be:cf:23:45:5b:59:69:d2:cd:6e:2e:cd:19:4b:7f:2e: b1:93:05:7d:48:bb:2a:41:15:2a:38:30:7a:2a:de:cc:0f:d3: 57:87:c1:ca -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7pRHLTrJGYFcu+pbiexfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlY2VjNTMxZTVjMzc3NTZiODI4NjYzZjljYzIwYWQ2MjE3 NzEzYWMwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTM0NTIzYjlmZTkxZDI3YWU5NGQ4ZjhjNTdiYzc3NzhmYTg2NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IFgKmufHgrArU86P+kFDC42rO8x KyH7qGcww/hxuYU8Yc1NruXIDrSklFds7OKDpuXCYJuY4qZRKkZJHlVQ/l4/msYK 4EjYLSRqK0mACqenC4jAqbougX5886yBu4kTx7qiV3ARXGRYNg8uJGHk+3zD4A4u lKATOHI2Vx0jWLwAx9jYYv6R56Om9RL3pTIF2caEW/xzrXQhTiYzOZjyHTJ6uj+I EL/5D8ALT/uln2PnrO/md2rlaEu5oKwNihXokuUpRvstaT1Q07AGEKxCwAaawfPC nJJaIhGGgW6PD1geQYoCMU6e99AiueAVUrzw/DyOYBOFtbrJLkhhqFVT9QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDk0Ujuf6R0nrpTY+MV7x3ePqGRsMB8GA1UdIwQY MBaAFL7OxTHlw3dWuChmP5zCCtYhdxOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjkt M2RmOWUyMWY0YmNjLzEvT1RSU081X3BIU2V1bE5qNHhYdkhkNC1vWkd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjktM2RmOWUyMWY0YmNj LzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGkhRYD BAGkhRgwDQYJKoZIhvcNAQELBQADggEBAHi5kz81OptsTZuNHWbFfhq+C8nZ+mZe rt6O0UUxOIuelhkEtkXnbNVS70s24ksp7ve70VQzI7K2VN0Bk+IaFaRnSjVQmF6u DA144QKX35q1UHjt2XJXqZTCO3QBTj6u0TwEl4v4VTcCSrOQi7nsUzZODxW+FsyQ 2l8g/fYovM04dOZpUUXLCs20Y+BdFWyyfU3VWJqq6AXtM2Fb1HZNXjRNb0isdq5D HLf5aOrMuyQ2/A3p1Nczg+mE05qEbZrswOTwwtY7FrkFxZWg2GgAMtfPHdT6n+I7 Z9HAvs8jRVtZadLNbi7NGUt/LrGTBX1IuypBFSo4MHoq3swP01eHwco= -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:46 2026 by rpki-client