This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3VN_mKw8cYe3sz0fKgUxpbou5M4.roa File: 3VN_mKw8cYe3sz0fKgUxpbou5M4.roa (raw, json) Hash identifier: xSMBQ9yLxTG95yZ6FCYKRLFO6dM2q3ZJgR5SLMwzId0= Subject key identifier: DD:53:7F:98:AC:3C:71:87:B7:B3:3D:1F:2A:05:31:A5:BA:2E:E4:CE Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A23AE36C67B013E08CC921FEC7460E Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3VN_mKw8cYe3sz0fKgUxpbou5M4.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 195.40.20.0/23 maxlen: 23 212.134.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3a:e3:6c:67:b0:13:e0:8c:c9:21:fe:c7:46:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd537f98ac3c7187b7b33d1f2a0531a5ba2ee4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:37:91:db:b3:d9:b0:02:bd:f8:9c:f8:b6: c8:62:3c:56:9b:8e:ce:2b:2f:0a:a9:a3:b2:0c:ca: 8a:4e:a3:6a:39:8f:f2:14:e7:8c:6f:72:f8:47:b3: 0a:15:7b:5b:88:d2:93:d8:44:5f:f3:a5:00:76:30: d9:63:83:b4:d6:9a:0c:fd:77:cb:7d:82:41:87:87: c3:89:b2:d4:d6:0a:bb:d2:1d:fd:b0:d7:f0:ad:5b: f4:b7:a9:35:0a:19:b0:d7:77:f8:fe:b3:cb:4e:bd: 3b:81:c0:4f:e2:03:60:e6:27:98:f3:4c:2a:c8:28: 0e:5a:33:4d:f0:e3:9c:76:96:4b:52:13:31:40:b8: b8:cf:ad:db:98:cc:2e:82:b8:a0:c1:0c:4c:80:d7: d0:78:ca:38:c3:2b:ed:d5:83:29:29:ab:f7:79:66: 9e:cc:41:3b:72:d2:1c:3e:94:e3:58:16:8d:55:17: 2a:4f:3a:33:1d:08:3d:8d:d4:0a:88:23:d9:6b:74: 5b:5e:a6:87:f5:ac:c4:d7:86:0b:aa:27:22:d4:6f: 41:fd:f8:17:d2:bf:a3:8e:5a:39:df:56:47:75:13: e7:6a:71:bc:e0:49:7a:c2:a9:f3:ca:83:80:c6:8e: cb:9f:e2:04:a6:1e:e4:cb:3e:1a:4c:98:3e:c8:11: 72:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:7F:98:AC:3C:71:87:B7:B3:3D:1F:2A:05:31:A5:BA:2E:E4:CE X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3VN_mKw8cYe3sz0fKgUxpbou5M4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.20.0/23 212.134.75.0/24 Signature Algorithm: sha256WithRSAEncryption a0:f6:61:28:4c:22:57:a6:f5:15:ca:73:c4:bd:cf:64:2b:f3: 0a:49:cb:af:db:ec:49:9d:88:cb:28:98:eb:9a:cf:aa:33:ff: 3c:81:72:55:d0:fe:a2:ff:26:88:11:74:26:88:0d:e8:75:8a: 00:20:12:3d:0a:4c:1a:ab:0f:31:c2:54:e2:be:08:87:c9:e7: c4:a8:80:9e:be:cb:99:64:5d:22:ba:cc:82:61:43:7d:24:ac: 29:56:7d:87:e8:86:f7:ea:c3:2d:8a:f0:ab:ac:0b:8b:f5:1d: 5f:6e:8c:6d:2f:e1:fe:41:ab:76:8e:e8:dc:e5:0a:f6:87:e6: 92:2e:1b:66:64:34:ca:1b:bb:01:37:46:da:1c:d3:b3:48:6c: c1:c9:60:c5:8f:51:d8:0e:99:0b:fc:db:84:56:c4:e2:cf:66: 8f:7a:5e:49:13:9d:8d:b6:5a:85:48:99:e9:a1:ac:5c:9e:3b: fa:88:83:f6:4a:62:20:d5:98:34:37:65:93:f0:99:8a:27:3f: f1:36:be:57:c8:fb:e5:0f:68:64:09:18:e4:f6:28:fa:4f:31: bb:2f:d4:4a:dc:6c:fe:91:a2:0e:0b:3c:a3:f6:56:da:0f:eb: 36:30:90:77:8c:d5:5a:d1:f2:5c:8b:50:0f:63:ed:9e:ed:b4: 81:06:a7:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ojrjbGewE+CMySH+x0YOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDUzN2Y5OGFjM2M3MTg3YjdiMzNkMWYyYTA1MzFhNWJhMmVlNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaA3kduz2bACvfic+LbIYjxWm47O Ky8KqaOyDMqKTqNqOY/yFOeMb3L4R7MKFXtbiNKT2ERf86UAdjDZY4O01poM/XfL fYJBh4fDibLU1gq70h39sNfwrVv0t6k1Chmw13f4/rPLTr07gcBP4gNg5ieY80wq yCgOWjNN8OOcdpZLUhMxQLi4z63bmMwugrigwQxMgNfQeMo4wyvt1YMpKav3eWae zEE7ctIcPpTjWBaNVRcqTzozHQg9jdQKiCPZa3RbXqaH9azE14YLqici1G9B/fgX 0r+jjlo531ZHdRPnanG84El6wqnzyoOAxo7Ln+IEph7kyz4aTJg+yBFyyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN1Tf5isPHGHt7M9HyoFMaW6LuTOMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvM1ZOX21LdzhjWWUzc3owZktnVXhwYm91NU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwygUAwQA 1IZLMA0GCSqGSIb3DQEBCwUAA4IBAQCg9mEoTCJXpvUVynPEvc9kK/MKScuv2+xJ nYjLKJjrms+qM/88gXJV0P6i/yaIEXQmiA3odYoAIBI9Ckwaqw8xwlTivgiHyefE qICevsuZZF0iusyCYUN9JKwpVn2H6Ib36sMtivCrrAuL9R1fboxtL+H+Qat2jujc 5Qr2h+aSLhtmZDTKG7sBN0baHNOzSGzByWDFj1HYDpkL/NuEVsTiz2aPel5JE52N tlqFSJnpoaxcnjv6iIP2SmIg1Zg0N2WT8JmKJz/xNr5XyPvlD2hkCRjk9ij6TzG7 L9RK3Gz+kaIOCzyj9lbaD+s2MJB3jNVa0fJci1APY+2e7bSBBqd+ -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:30 2026 by rpki-client