This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa File: thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa (raw, json) Hash identifier: cb2EuVgJX6TpW/+TNEBCoHYPEE6QUOMfau0NLwCzClA= Subject key identifier: B6:19:76:44:4F:C9:A4:B2:0E:DA:66:5F:D5:97:3A:12:00:BC:74:E4 Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Certificate serial: 019B7F1511FB753057D4513F89985169B9F8 Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa Signing time: Fri 02 Jan 2026 14:20:45 +0000 ROA not before: Fri 02 Jan 2026 14:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9096 IP address blocks: 193.110.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:11:fb:75:30:57:d4:51:3f:89:98:51:69:b9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b61976444fc9a4b20eda665fd5973a1200bc74e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:f1:95:9a:4a:60:38:ee:f8:32:e5:88:e0: 3c:2f:99:4b:f4:f9:5f:99:3c:a1:cd:9d:3d:5d:f0: 18:0d:82:c9:2d:55:ce:97:e7:98:e3:47:ec:90:ff: 3c:36:24:b6:5e:20:4a:36:ba:77:c6:ee:f1:0a:bf: 32:33:92:95:51:42:f7:3f:58:99:80:c1:b8:90:94: 9e:dc:d7:28:73:7d:74:06:0f:ed:7b:1c:50:6d:f5: 67:77:b2:13:9e:94:ad:02:6e:46:82:3f:cc:0e:e5: c2:8d:35:a0:e3:74:16:f7:e1:b7:0b:3c:43:ee:c7: 80:52:1d:92:d1:fa:92:a2:7b:ec:71:10:56:05:63: 1b:74:fc:4d:c0:d9:56:18:2c:68:3b:71:91:4e:d8: 65:00:ed:a7:a1:d4:08:29:6f:4e:8f:f1:bc:bf:c0: bd:04:b2:47:12:62:d7:01:75:c0:83:1e:39:39:46: f3:fc:b6:24:66:6b:c6:ce:2a:5e:d8:f7:37:fd:f9: 10:f9:fd:5a:30:70:4b:c6:31:7e:01:b2:1c:06:61: c4:bc:a0:c7:6f:d0:6c:fd:cb:fe:60:6d:5d:7d:0c: af:77:59:68:64:e0:43:6d:11:bf:9e:5c:b8:b5:de: ca:6f:7e:eb:19:f2:39:b5:0d:6d:a7:ef:25:4c:c6: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:19:76:44:4F:C9:A4:B2:0E:DA:66:5F:D5:97:3A:12:00:BC:74:E4 X509v3 Authority Key Identifier: keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.138.0/24 Signature Algorithm: sha256WithRSAEncryption a0:fa:51:11:61:d6:d5:06:0c:e1:7b:1b:e3:61:53:dd:31:bf: 4e:7d:6a:f1:6c:4b:78:53:66:b9:8f:45:d6:bb:bd:aa:5f:fb: f5:04:c1:b7:62:dc:d3:39:b7:7f:f0:ff:7d:ed:4d:cb:61:eb: 59:0a:70:72:a1:e0:c3:85:3a:89:27:7f:9b:8e:da:b0:51:a6: d0:db:a6:97:8c:3f:fd:97:97:9e:e9:d5:76:f0:32:c9:16:6a: 46:86:a8:25:ac:3e:f0:77:19:db:84:02:4e:99:62:5b:8c:d1: cd:41:9b:15:0d:21:d3:7b:77:bc:1f:c0:5b:50:73:ce:65:80: 47:83:1d:13:1f:94:f6:a7:b2:49:7b:d8:43:d1:1a:80:fb:7b: 34:54:72:3b:7f:a4:cc:c7:52:d0:d5:76:00:a2:5f:f2:cf:96: 9f:26:0f:36:b1:69:f0:c4:76:53:db:f3:04:06:77:c3:82:a3: 41:00:19:ae:b1:32:33:bd:a7:f8:84:4d:95:38:6d:9d:07:a5: bd:40:27:99:03:ff:f4:a0:cf:ad:78:ff:b1:ac:37:5d:54:a0: 7c:9f:62:ce:09:28:de:bf:98:39:58:00:bd:9b:99:70:47:fa: 72:c3:7c:45:41:42:f9:58:af:f0:d7:16:a1:95:93:28:c2:8a: 45:79:4d:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FRH7dTBX1FE/iZhRabn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2Y4M2RlZTkyZDhkM2UyOGQ3MzYyZGZjNzE4NzU1M2Q4 OGM3NWMwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjE5NzY0NDRmYzlhNGIyMGVkYTY2NWZkNTk3M2ExMjAwYmM3NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKTxlZpKYDju+DLliOA8L5lL9Plf mTyhzZ09XfAYDYLJLVXOl+eY40fskP88NiS2XiBKNrp3xu7xCr8yM5KVUUL3P1iZ gMG4kJSe3Ncoc310Bg/texxQbfVnd7ITnpStAm5Ggj/MDuXCjTWg43QW9+G3CzxD 7seAUh2S0fqSonvscRBWBWMbdPxNwNlWGCxoO3GRTthlAO2nodQIKW9Oj/G8v8C9 BLJHEmLXAXXAgx45OUbz/LYkZmvGzipe2Pc3/fkQ+f1aMHBLxjF+AbIcBmHEvKDH b9Bs/cv+YG1dfQyvd1loZOBDbRG/nly4td7Kb37rGfI5tQ1tp+8lTMZhvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYZdkRPyaSyDtpmX9WXOhIAvHTkMB8GA1UdIwQY MBaAFHE/g97pLY0+KNc2Lfxxh1U9iMdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAt NzkxNDM4MzM2M2Y3LzEvdGhsMlJFX0pwTElPMm1aZjFaYzZFZ0M4ZE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAtNzkxNDM4MzM2M2Y3 LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW6KMA0G CSqGSIb3DQEBCwUAA4IBAQCg+lERYdbVBgzhexvjYVPdMb9OfWrxbEt4U2a5j0XW u72qX/v1BMG3YtzTObd/8P997U3LYetZCnByoeDDhTqJJ3+bjtqwUabQ26aXjD/9 l5ee6dV28DLJFmpGhqglrD7wdxnbhAJOmWJbjNHNQZsVDSHTe3e8H8BbUHPOZYBH gx0TH5T2p7JJe9hD0RqA+3s0VHI7f6TMx1LQ1XYAol/yz5afJg82sWnwxHZT2/ME BnfDgqNBABmusTIzvaf4hE2VOG2dB6W9QCeZA//0oM+teP+xrDddVKB8n2LOCSje v5g5WAC9m5lwR/pyw3xFQUL5WK/w1xahlZMowopFeU02 -----END CERTIFICATE-----Generated at Mon Jan 26 14:43:31 2026 by rpki-client