This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/AzOuI_MehMbEwOyMsmf5J1qkufY.roa
File: AzOuI_MehMbEwOyMsmf5J1qkufY.roa (raw, json)
Hash identifier: 3C8SoQIITsfe+wm6WBHpC3xat86Y/B16K+Vi5ChAreo=
Subject key identifier: 03:33:AE:23:F3:1E:84:C6:C4:C0:EC:8C:B2:67:F9:27:5A:A4:B9:F6
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 019B7C124B7CE9B79F3BB97C4FDE186ED3C3
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/AzOuI_MehMbEwOyMsmf5J1qkufY.roa
Signing time: Fri 02 Jan 2026 00:18:52 +0000
ROA not before: Fri 02 Jan 2026 00:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29608
IP address blocks: 185.150.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:4b:7c:e9:b7:9f:3b:b9:7c:4f:de:18:6e:d3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Jan 2 00:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0333ae23f31e84c6c4c0ec8cb267f9275aa4b9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:42:d4:a1:e6:71:82:5f:7c:ae:00:1e:32:
66:97:cb:47:be:ea:e2:52:74:08:25:9f:4d:20:1f:
8d:d8:b2:89:19:38:3b:11:c7:94:50:0c:78:77:4a:
3a:cb:87:51:e5:6b:3c:08:31:6f:78:3d:e5:fe:5e:
d2:39:2c:99:cd:b8:34:95:ae:d1:bd:f9:dd:85:d9:
cb:fb:81:c5:f0:89:2c:13:77:98:19:df:88:e3:24:
3c:54:91:5d:95:33:6e:c8:1b:84:2c:1c:c5:9e:30:
15:b0:45:0b:73:ed:d9:6d:0b:1b:25:bd:0a:be:4f:
af:d3:4f:ba:ce:c3:ca:51:ff:1c:2b:b7:2b:28:b9:
31:62:50:22:4f:5c:ac:e6:f8:2c:9a:c7:39:39:fd:
93:73:af:e5:7a:d5:0a:27:9b:5f:53:de:3c:08:3b:
61:e0:01:f4:2a:e7:e6:2f:e6:bf:da:6f:3e:9c:ea:
a1:73:9a:60:b6:8f:b5:40:1f:1e:65:2f:af:91:f9:
ec:73:b3:b8:fa:a7:09:ca:4f:5b:55:04:83:f1:70:
15:a6:74:d0:9d:d3:d5:b6:a4:5a:bb:df:7e:45:58:
ed:8b:e2:01:2f:d7:9d:c3:c8:18:01:95:cd:a7:68:
31:fa:94:17:d2:ba:74:c7:2e:ec:0a:b1:ce:e6:b3:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:AE:23:F3:1E:84:C6:C4:C0:EC:8C:B2:67:F9:27:5A:A4:B9:F6
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/AzOuI_MehMbEwOyMsmf5J1qkufY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.88.0/22
Signature Algorithm: sha256WithRSAEncryption
99:19:32:56:9d:66:d2:06:4a:23:0c:0d:54:e5:ce:b8:48:dd:
ba:d1:dd:4f:1d:ec:b2:7d:fc:e9:82:28:a4:89:fd:f0:96:26:
9c:ec:09:a6:89:e3:81:72:35:f7:7f:8d:4a:2c:c2:8c:a9:06:
a8:15:3f:d6:3d:8f:d6:b4:79:52:5d:f3:10:3c:2d:25:81:8f:
89:b1:53:19:4a:dd:62:8a:ba:0d:b5:29:50:40:7c:52:62:a5:
d6:13:75:52:2a:79:59:c1:18:18:aa:4e:b6:db:ba:09:c9:ec:
98:67:76:a2:32:e4:be:ca:26:02:12:a3:06:fd:e3:cc:b4:b3:
18:c0:ee:39:32:0c:c6:aa:a6:a1:74:da:df:3d:2a:16:76:a4:
be:ae:9c:81:87:e6:5e:c4:a8:c0:e4:92:cb:ee:79:09:c2:4e:
dc:88:12:c8:15:d7:ad:5b:ea:bd:13:e6:05:15:eb:a7:aa:f3:
42:c4:19:d9:1a:e3:11:d1:d0:df:be:a2:07:72:04:54:c9:2a:
7c:0c:33:c6:0a:28:46:d6:53:a5:e5:f2:d6:c8:2b:01:37:49:
72:63:6e:c7:40:9a:cc:52:52:d2:8a:6f:74:3d:05:80:06:bf:
36:ee:5e:24:b9:6b:71:cf:cb:cd:20:2b:11:33:4a:43:98:82:
24:0d:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:09 2026 by rpki-client