This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/voadC2JBDf0kY270gpj8Ay3wj_4.roa File: voadC2JBDf0kY270gpj8Ay3wj_4.roa (raw, json) Hash identifier: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI= Subject key identifier: BE:86:9D:0B:62:41:0D:FD:24:63:6E:F4:82:98:FC:03:2D:F0:8F:FE Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC36CCD0F774E8C192ED7591BB68B Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/voadC2JBDf0kY270gpj8Ay3wj_4.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203941 IP address blocks: 212.7.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c3:6c:cd:0f:77:4e:8c:19:2e:d7:59:1b:b6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be869d0b62410dfd24636ef48298fc032df08ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:89:50:fb:54:fd:ba:fc:50:89:c8:b2:bd: 43:8f:b2:b3:c0:25:ab:c3:6b:90:28:ed:48:4b:28: 90:6e:93:1c:76:8f:f6:30:67:ab:d8:bb:1e:c0:a3: 8e:81:06:c4:46:c2:56:fb:77:c6:e3:0e:14:20:ab: a6:10:58:b3:62:7a:22:20:7e:b4:ac:08:0b:40:12: 39:fd:8d:65:5b:89:ea:a1:9c:3a:65:4c:60:7a:83: b5:df:0d:3a:39:5c:8c:6e:3f:46:0b:22:5a:c2:4e: 18:04:c2:f7:76:9c:99:c8:8a:48:a8:18:44:b9:fc: 49:0a:82:d5:0c:03:56:ec:4b:29:6e:ef:14:88:98: 2e:9a:f2:06:6e:ea:87:ae:58:88:45:d8:3a:b6:47: 84:a3:f8:d3:61:61:a9:5f:5d:91:a5:03:ca:d5:06: 82:47:98:ff:d8:b3:ac:d7:9c:d7:67:a2:c7:92:12: 91:55:1d:cc:f0:8e:be:dd:fd:68:9d:c2:5c:32:f6: 47:01:ad:a4:1c:21:08:77:13:78:b6:6d:07:f8:9c: 4e:2c:c8:25:08:ae:4b:b6:57:00:e0:7d:58:d1:fd: 54:02:2e:dc:3c:ab:24:14:14:0c:9e:39:ec:6a:6f: e7:8b:7a:8d:28:a6:d5:23:35:88:ea:4c:9e:02:a9: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:9D:0B:62:41:0D:FD:24:63:6E:F4:82:98:FC:03:2D:F0:8F:FE X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/voadC2JBDf0kY270gpj8Ay3wj_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.7.218.0/23 Signature Algorithm: sha256WithRSAEncryption 31:b0:70:ac:ba:92:ef:1c:27:11:14:94:f7:d4:b4:5b:8b:b5: bc:1b:18:98:db:15:a0:bf:a2:c2:7b:cb:fe:ad:f2:ff:9b:7a: 42:c5:f9:07:28:a9:21:f6:0c:5d:41:90:9c:79:1d:70:16:29: 3a:21:f3:54:fe:b2:da:5e:35:47:44:1d:69:08:20:17:6c:62: e9:2b:25:d0:42:3d:0f:e4:d7:e5:f2:6f:3f:30:05:6e:e8:04: 52:4b:87:c5:d0:fb:c1:23:2b:f8:95:38:22:b1:1f:76:e4:e2: 5a:ec:e9:e0:97:62:ca:7a:30:bc:69:1a:9a:c8:f3:6d:81:79: 2d:8b:33:0f:11:33:dc:67:74:7d:22:62:1b:e0:c7:6d:45:d9: 74:b2:21:15:b7:6d:5a:65:e2:5a:5f:ad:90:63:69:8b:79:54: 5f:41:95:4d:eb:3a:57:84:53:c5:23:33:ce:35:bc:16:8f:f1: 68:4a:79:a6:c3:a9:8a:82:78:8c:fa:ae:9a:28:69:2e:67:0d: 68:65:78:a6:14:0d:07:9d:ad:06:32:01:02:c4:d0:a5:b9:12: 11:35:67:32:14:84:6d:ab:31:10:03:70:30:0c:ee:4e:da:f4: 51:12:2e:4e:16:9b:cc:c6:9b:1c:a4:40:1e:24:1c:d8:52:98: 16:8e:0d:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MNszQ93TowZLtdZG7aLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTg2OWQwYjYyNDEwZGZkMjQ2MzZlZjQ4Mjk4ZmMwMzJkZjA4ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYaJUPtU/br8UInIsr1Dj7KzwCWr w2uQKO1ISyiQbpMcdo/2MGer2LsewKOOgQbERsJW+3fG4w4UIKumEFizYnoiIH60 rAgLQBI5/Y1lW4nqoZw6ZUxgeoO13w06OVyMbj9GCyJawk4YBML3dpyZyIpIqBhE ufxJCoLVDANW7Espbu8UiJgumvIGbuqHrliIRdg6tkeEo/jTYWGpX12RpQPK1QaC R5j/2LOs15zXZ6LHkhKRVR3M8I6+3f1oncJcMvZHAa2kHCEIdxN4tm0H+JxOLMgl CK5LtlcA4H1Y0f1UAi7cPKskFBQMnjnsam/ni3qNKKbVIzWI6kyeAqk/3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL6GnQtiQQ39JGNu9IKY/AMt8I/+MB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvdm9hZEMySkJEZjBrWTI3MGdwajhBeTN3al80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1AfaMA0G CSqGSIb3DQEBCwUAA4IBAQAxsHCsupLvHCcRFJT31LRbi7W8GxiY2xWgv6LCe8v+ rfL/m3pCxfkHKKkh9gxdQZCceR1wFik6IfNU/rLaXjVHRB1pCCAXbGLpKyXQQj0P 5Nfl8m8/MAVu6ARSS4fF0PvBIyv4lTgisR925OJa7Ongl2LKejC8aRqayPNtgXkt izMPETPcZ3R9ImIb4MdtRdl0siEVt21aZeJaX62QY2mLeVRfQZVN6zpXhFPFIzPO NbwWj/FoSnmmw6mKgniM+q6aKGkuZw1oZXimFA0Hna0GMgECxNCluRIRNWcyFIRt qzEQA3AwDO5O2vRREi5OFpvMxpscpEAeJBzYUpgWjg1n -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:35 2026 by rpki-client