This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/kohaMOAFUb9m1qAoziqxSlDrzkI.roa File: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (raw, json) Hash identifier: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA= Subject key identifier: 92:88:5A:30:E0:05:51:BF:66:D6:A0:28:CE:2A:B1:4A:50:EB:CE:42 Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Certificate serial: 019B7E3864A8C12F0D148D952CE1EECFEA7A Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/kohaMOAFUb9m1qAoziqxSlDrzkI.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6205 IP address blocks: 5.250.255.0/24 maxlen: 24 185.123.54.0/24 maxlen: 24 194.53.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:64:a8:c1:2f:0d:14:8d:95:2c:e1:ee:cf:ea:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92885a30e00551bf66d6a028ce2ab14a50ebce42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:3d:53:77:df:f6:6c:41:50:b6:55:a6:85: a2:67:8b:97:d5:3b:90:22:e5:3c:30:97:76:6d:ab: d3:f9:15:b6:13:18:04:08:88:2c:f8:42:06:53:a6: 33:c8:86:1a:f7:a6:8c:38:5a:f5:8d:73:bb:3b:cc: d6:a5:78:69:76:1f:b3:31:c9:e2:36:5a:1f:17:0e: 6a:04:1f:97:a8:e9:2d:79:6d:1c:9d:0b:97:b1:71: 7f:26:4d:12:0a:85:5e:80:2f:32:13:4a:cd:86:7c: 1e:5f:4a:ab:71:3f:64:56:75:c9:47:d4:ec:2a:3f: 6e:1b:9b:da:c9:2f:0d:53:ca:f7:3c:5e:cf:b8:5e: 5d:6a:e9:40:c1:97:32:77:10:34:bb:0b:7b:a1:f5: 5e:2e:a5:fc:7e:8e:10:3c:2e:a9:e7:18:23:b6:d5: 51:95:19:71:d1:59:a6:59:2a:2e:60:3d:04:1f:47: 37:94:25:d2:7b:31:47:37:b0:e0:dc:df:37:15:ff: 55:76:aa:78:7a:36:b4:9f:bf:b1:ab:e2:2d:64:cd: 34:c6:94:70:30:53:d0:67:25:ec:06:ea:29:c9:86: 79:43:86:ab:f8:e5:e9:4f:f5:f6:5c:65:d1:09:28: 84:38:28:12:3b:82:e5:81:3e:87:d3:ed:e7:37:67: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:88:5A:30:E0:05:51:BF:66:D6:A0:28:CE:2A:B1:4A:50:EB:CE:42 X509v3 Authority Key Identifier: keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/kohaMOAFUb9m1qAoziqxSlDrzkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.250.255.0/24 185.123.54.0/24 194.53.138.0/24 Signature Algorithm: sha256WithRSAEncryption 06:3a:83:40:2d:95:fc:70:b3:f6:47:b6:30:69:a5:92:75:61: ed:76:50:b5:c7:48:93:a5:e5:4c:4d:b8:ba:89:d9:15:66:7a: 9e:e0:5c:7a:89:a3:da:5e:57:b9:2a:a0:d1:58:c2:c9:3a:75: 83:43:79:80:e2:40:eb:d3:81:cb:90:7f:ad:d2:2a:0f:bc:0e: f5:c5:42:d9:ae:92:bf:5a:1a:6c:ff:d2:4c:89:e7:b6:34:ff: a0:74:08:06:c5:8a:37:e6:8d:3e:02:c3:75:e0:fe:8d:10:f6: 39:7a:3a:32:f9:07:51:4b:9c:3b:b1:d3:7b:55:2b:ce:96:f9: 78:f9:42:58:6e:d0:e5:d1:b8:97:49:97:02:6a:58:fc:fe:dc: f3:d6:35:49:43:0b:8c:aa:3d:82:f8:2b:ad:c9:25:e4:a5:2f: f0:9b:8a:90:b5:fd:bb:ad:60:cc:d6:bf:51:3e:30:93:19:41: 54:27:7a:ce:2e:cd:45:39:95:e3:4d:03:c3:e7:4b:65:58:4a: b6:2f:e4:22:2d:b9:57:3b:b8:d2:8b:8d:08:0d:78:24:61:4e: 4d:54:76:81:bf:df:6b:72:61:44:1b:88:e5:8c:f0:3a:de:24: e4:03:4e:97:80:19:d3:84:cc:0e:bb:68:77:47:ed:1b:a6:ab: 96:66:41:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OGSowS8NFI2VLOHuz+p6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj MDY3NTkwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjg4NWEzMGUwMDU1MWJmNjZkNmEwMjhjZTJhYjE0YTUwZWJjZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj09U3ff9mxBULZVpoWiZ4uX1TuQ IuU8MJd2bavT+RW2ExgECIgs+EIGU6YzyIYa96aMOFr1jXO7O8zWpXhpdh+zMcni NlofFw5qBB+XqOkteW0cnQuXsXF/Jk0SCoVegC8yE0rNhnweX0qrcT9kVnXJR9Ts Kj9uG5vayS8NU8r3PF7PuF5daulAwZcydxA0uwt7ofVeLqX8fo4QPC6p5xgjttVR lRlx0VmmWSouYD0EH0c3lCXSezFHN7Dg3N83Ff9Vdqp4eja0n7+xq+ItZM00xpRw MFPQZyXsBuopyYZ5Q4ar+OXpT/X2XGXRCSiEOCgSO4LlgT6H0+3nN2dk3QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJKIWjDgBVG/ZtagKM4qsUpQ685CMB8GA1UdIwQY MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt MTJmNDFhMGNjMGMxLzEva29oYU1PQUZVYjltMXFBb3ppcXhTbERyemtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABfr/AwQA uXs2AwQAwjWKMA0GCSqGSIb3DQEBCwUAA4IBAQAGOoNALZX8cLP2R7YwaaWSdWHt dlC1x0iTpeVMTbi6idkVZnqe4Fx6iaPaXle5KqDRWMLJOnWDQ3mA4kDr04HLkH+t 0ioPvA71xULZrpK/Whps/9JMiee2NP+gdAgGxYo35o0+AsN14P6NEPY5ejoy+QdR S5w7sdN7VSvOlvl4+UJYbtDl0biXSZcCalj8/tzz1jVJQwuMqj2C+CutySXkpS/w m4qQtf27rWDM1r9RPjCTGUFUJ3rOLs1FOZXjTQPD50tlWEq2L+QiLblXO7jSi40I DXgkYU5NVHaBv99rcmFEG4jljPA63iTkA06XgBnThMwOu2h3R+0bpquWZkF2 -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:01 2026 by rpki-client