This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kohByPE4yG1TGZr8eB0BbeKDx5U.roa File: kohByPE4yG1TGZr8eB0BbeKDx5U.roa (raw, json) Hash identifier: zZ7J6Xp0gUwLT5x+EDumiC5DpfSBiNr9xVlD5qZqNZc= Subject key identifier: 92:88:41:C8:F1:38:C8:6D:53:19:9A:FC:78:1D:01:6D:E2:83:C7:95 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106212DB9EA8C95FF37D4653E544C3 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kohByPE4yG1TGZr8eB0BbeKDx5U.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207483 IP address blocks: 188.132.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:62:12:db:9e:a8:c9:5f:f3:7d:46:53:e5:44:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928841c8f138c86d53199afc781d016de283c795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a9:79:3b:63:ad:13:93:61:6f:72:77:4e:67: 62:1a:d9:e3:70:ea:e9:3c:11:35:45:59:fc:88:32: 8c:80:41:05:8b:df:85:78:38:2d:ff:2f:ce:ad:f4: ad:35:03:1c:e3:fc:29:ce:b8:5e:0b:a9:95:b9:55: 57:e3:19:f4:b9:85:77:d9:ea:30:19:c0:c2:51:eb: 93:da:3e:03:ec:6c:78:e7:b7:e2:66:80:5f:18:92: 6d:f0:5a:4c:81:80:24:2a:dc:30:aa:ff:c9:a4:93: 96:44:cd:53:0c:cc:66:64:52:fc:87:e1:78:bf:55: 14:e6:fc:40:8f:ea:c4:1e:9b:ea:f0:46:9c:71:1b: f7:cf:d6:28:14:a9:b4:86:a6:47:be:16:4d:83:bb: cc:bd:f8:56:18:cb:00:82:42:4c:21:d4:40:f5:b7: a1:d3:0b:21:33:7c:b2:46:4b:91:a3:87:53:d3:01: 9d:dc:de:ea:6e:d6:76:2d:a3:01:5e:5c:bf:32:0e: 49:87:fe:1d:be:62:22:d2:91:34:fc:73:63:50:fd: 1f:be:3b:dd:88:bb:ee:0e:93:1a:88:c1:1b:0f:77: 3b:c7:ff:e5:22:65:9d:97:5d:dd:58:15:7f:ff:b1: 86:cb:57:9f:b9:84:24:e9:a8:d5:9a:a7:5f:3d:74: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:88:41:C8:F1:38:C8:6D:53:19:9A:FC:78:1D:01:6D:E2:83:C7:95 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kohByPE4yG1TGZr8eB0BbeKDx5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.141.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:c0:e4:ef:07:d7:fe:bc:9d:2f:7a:2c:9a:81:1e:35:64:99: 39:94:ce:bc:2c:32:98:d5:13:5e:3d:55:62:f7:54:81:9f:cd: 9d:76:fc:32:45:32:ac:16:b9:2f:12:6f:ab:9f:8c:ee:bf:2a: f6:35:7f:22:4e:52:d7:75:37:ba:81:aa:88:ba:10:19:cd:1a: 42:33:cc:55:87:a3:25:8d:4d:6c:81:c0:47:f3:ea:6a:81:97: bf:10:6e:29:bc:01:b9:12:95:e8:3c:da:83:e6:97:fc:37:62: e2:f0:2f:be:ac:c7:65:25:fa:f5:da:8c:a4:75:6d:fb:bd:3b: c1:38:84:3d:70:19:92:36:01:43:b2:df:a7:0a:01:ba:9b:78: 4d:ea:06:9b:03:02:a8:65:86:88:ec:cf:c8:2d:33:a0:da:73: 72:4e:0f:c7:dd:56:8f:9b:dc:2f:e6:62:52:d5:a8:05:13:c0: ce:fe:d0:12:88:74:06:87:08:f7:b9:bc:f0:86:eb:10:10:6a: 55:2a:f3:31:6f:d1:ae:fa:2d:13:2f:b5:91:74:b2:2a:e5:2b: 4d:6a:e3:8d:d7:d0:3a:5a:4c:88:b5:b6:98:dd:90:67:9e:7d: 42:02:9c:ec:69:bc:e2:ec:c4:79:c3:42:25:dd:3c:d8:2d:8a: f2:ac:02:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGIS256oyV/zfUZT5UTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjg4NDFjOGYxMzhjODZkNTMxOTlhZmM3ODFkMDE2ZGUyODNjNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9al5O2OtE5Nhb3J3TmdiGtnjcOrp PBE1RVn8iDKMgEEFi9+FeDgt/y/OrfStNQMc4/wpzrheC6mVuVVX4xn0uYV32eow GcDCUeuT2j4D7Gx457fiZoBfGJJt8FpMgYAkKtwwqv/JpJOWRM1TDMxmZFL8h+F4 v1UU5vxAj+rEHpvq8EaccRv3z9YoFKm0hqZHvhZNg7vMvfhWGMsAgkJMIdRA9beh 0wshM3yyRkuRo4dT0wGd3N7qbtZ2LaMBXly/Mg5Jh/4dvmIi0pE0/HNjUP0fvjvd iLvuDpMaiMEbD3c7x//lImWdl13dWBV//7GGy1efuYQk6ajVmqdfPXTV4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKIQcjxOMhtUxma/HgdAW3ig8eVMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEva29oQnlQRTR5RzFUR1pyOGVCMEJiZUtEeDVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISNMA0G CSqGSIb3DQEBCwUAA4IBAQAcwOTvB9f+vJ0veiyagR41ZJk5lM68LDKY1RNePVVi 91SBn82ddvwyRTKsFrkvEm+rn4zuvyr2NX8iTlLXdTe6gaqIuhAZzRpCM8xVh6Ml jU1sgcBH8+pqgZe/EG4pvAG5EpXoPNqD5pf8N2Li8C++rMdlJfr12oykdW37vTvB OIQ9cBmSNgFDst+nCgG6m3hN6gabAwKoZYaI7M/ILTOg2nNyTg/H3VaPm9wv5mJS 1agFE8DO/tASiHQGhwj3ubzwhusQEGpVKvMxb9Gu+i0TL7WRdLIq5StNauON19A6 WkyItbaY3ZBnnn1CApzsabzi7MR5w0Il3TzYLYryrALm -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:41 2026 by rpki-client