This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NN0KPN8ygBGg_9V998omIJuDR-A.roa File: NN0KPN8ygBGg_9V998omIJuDR-A.roa (raw, json) Hash identifier: tCdZEnpj0jBLwN2Mo68zosJRv/am8oINDAqabmiuoLk= Subject key identifier: 34:DD:0A:3C:DF:32:80:11:A0:FF:D5:7D:F7:CA:26:20:9B:83:47:E0 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D254D0280FD8A281D23E0D519DF38 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NN0KPN8ygBGg_9V998omIJuDR-A.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4648 IP address blocks: 89.35.159.0/24 maxlen: 24 89.44.207.0/24 maxlen: 24 103.212.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:25:4d:02:80:fd:8a:28:1d:23:e0:d5:19:df:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34dd0a3cdf328011a0ffd57df7ca26209b8347e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:b6:00:f7:14:1d:5a:f5:3d:63:b9:b8:90: ee:7d:a6:e3:12:41:7b:6d:a7:53:f0:2d:45:c8:d1: ff:2a:43:59:83:16:d0:54:60:97:c8:c9:f8:03:65: 08:08:74:a0:5b:b8:86:52:dd:98:ab:78:00:dc:0e: a3:b6:90:0e:33:14:cb:ee:84:a8:51:f1:85:98:3b: ad:6e:8f:dd:0c:a2:a2:67:05:11:cf:78:d7:bf:f5: 72:89:1f:05:b1:a9:89:f7:24:b9:f3:44:bc:12:8b: a1:4a:ec:e7:50:39:ff:d5:d0:86:ae:b2:08:99:02: 77:73:47:f1:b9:7a:35:a2:da:5a:6d:0e:2a:7d:00: 97:39:19:95:a7:45:d5:9a:9b:13:0c:bf:7f:c4:57: 5b:1c:d4:96:3f:c4:96:e0:27:99:b5:9d:e2:44:57: d6:51:0d:32:e1:51:54:b1:44:46:50:ce:a1:f7:0c: d4:c7:e1:5d:f3:7d:f1:0f:34:18:bc:45:8a:de:8a: c8:69:d7:49:d9:2e:ac:0f:eb:2c:77:04:fa:2e:8c: 3e:af:99:d4:b3:9b:a9:fa:c3:45:5b:23:b8:a1:be: 61:4f:20:1a:77:6e:16:9c:85:94:38:e0:d9:79:f4: 32:82:f6:89:6b:82:b6:35:f0:66:bf:34:03:56:8d: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:0A:3C:DF:32:80:11:A0:FF:D5:7D:F7:CA:26:20:9B:83:47:E0 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NN0KPN8ygBGg_9V998omIJuDR-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.159.0/24 89.44.207.0/24 103.212.80.0/23 Signature Algorithm: sha256WithRSAEncryption 17:f7:b9:6e:b3:e3:40:26:c7:2c:5f:6a:d8:c2:17:7c:9a:9f: 8d:ad:7a:c4:03:5e:52:7e:5a:99:7b:82:1e:bc:c1:81:a1:55: d3:36:c8:38:31:66:f5:c3:2e:25:b1:d3:a5:2d:6d:37:ab:49: 3c:a6:60:19:e2:25:d0:2a:4e:20:6f:1d:bd:aa:ae:52:80:8a: f7:ab:9b:11:8a:23:e0:a3:41:23:b5:a0:8b:4c:13:15:13:96: 7d:82:e2:0d:e4:81:5b:ac:9a:bf:92:39:9e:29:9c:b4:69:34: 92:ce:73:21:88:13:1d:1c:99:16:57:6a:e9:4c:9c:2b:52:44: fe:9d:36:6b:e1:47:18:5b:c7:e8:a0:35:bc:e6:fa:29:6b:56: a2:18:6d:ba:f9:65:04:8e:85:e9:91:a6:41:78:4d:20:26:87: 40:48:17:a5:f9:be:b7:41:fa:36:b9:88:5b:34:dd:4d:be:5f: b4:46:f2:d7:25:7d:30:45:65:51:d0:1f:99:05:87:61:99:13: 13:e7:48:1f:13:27:4d:65:de:3d:5d:8b:35:2f:85:e1:69:ac: c6:a5:67:fc:83:c9:f7:77:af:3d:a5:1b:64:a1:93:ea:d1:6b: 9d:2a:b3:f8:88:00:26:f5:fb:e9:83:cf:1a:00:53:96:2f:6f: 7d:31:b9:d1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XSVNAoD9iigdI+DVGd84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGRkMGEzY2RmMzI4MDExYTBmZmQ1N2RmN2NhMjYyMDliODM0N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt62APcUHVr1PWO5uJDufabjEkF7 badT8C1FyNH/KkNZgxbQVGCXyMn4A2UICHSgW7iGUt2Yq3gA3A6jtpAOMxTL7oSo UfGFmDutbo/dDKKiZwURz3jXv/VyiR8FsamJ9yS580S8EouhSuznUDn/1dCGrrII mQJ3c0fxuXo1otpabQ4qfQCXORmVp0XVmpsTDL9/xFdbHNSWP8SW4CeZtZ3iRFfW UQ0y4VFUsURGUM6h9wzUx+Fd833xDzQYvEWK3orIaddJ2S6sD+ssdwT6Low+r5nU s5up+sNFWyO4ob5hTyAad24WnIWUOODZefQygvaJa4K2NfBmvzQDVo3cUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDTdCjzfMoARoP/VfffKJiCbg0fgMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvTk4wS1BOOHlnQkdnXzlWOTk4b21JSnVEUi1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSOfAwQA WSzPAwQBZ9RQMA0GCSqGSIb3DQEBCwUAA4IBAQAX97lus+NAJscsX2rYwhd8mp+N rXrEA15SflqZe4IevMGBoVXTNsg4MWb1wy4lsdOlLW03q0k8pmAZ4iXQKk4gbx29 qq5SgIr3q5sRiiPgo0EjtaCLTBMVE5Z9guIN5IFbrJq/kjmeKZy0aTSSznMhiBMd HJkWV2rpTJwrUkT+nTZr4UcYW8fooDW85vopa1aiGG26+WUEjoXpkaZBeE0gJodA SBel+b63Qfo2uYhbNN1Nvl+0RvLXJX0wRWVR0B+ZBYdhmRMT50gfEydNZd49XYs1 L4XhaazGpWf8g8n3d689pRtkoZPq0WudKrP4iAAm9fvpg88aAFOWL299MbnR -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:30 2026 by rpki-client