This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/AzOuI_MehMbEwOyMsmf5J1qkufY.roa
File:                     AzOuI_MehMbEwOyMsmf5J1qkufY.roa (raw, json)
Hash identifier:          3C8SoQIITsfe+wm6WBHpC3xat86Y/B16K+Vi5ChAreo=
Subject key identifier:   03:33:AE:23:F3:1E:84:C6:C4:C0:EC:8C:B2:67:F9:27:5A:A4:B9:F6
Certificate issuer:       /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial:       019B7C124B7CE9B79F3BB97C4FDE186ED3C3
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/AzOuI_MehMbEwOyMsmf5J1qkufY.roa
Signing time:             Fri 02 Jan 2026 00:18:52 +0000
ROA not before:           Fri 02 Jan 2026 00:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29608
IP address blocks:        185.150.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:4b:7c:e9:b7:9f:3b:b9:7c:4f:de:18:6e:d3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
        Validity
            Not Before: Jan  2 00:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0333ae23f31e84c6c4c0ec8cb267f9275aa4b9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:90:42:d4:a1:e6:71:82:5f:7c:ae:00:1e:32:
                    66:97:cb:47:be:ea:e2:52:74:08:25:9f:4d:20:1f:
                    8d:d8:b2:89:19:38:3b:11:c7:94:50:0c:78:77:4a:
                    3a:cb:87:51:e5:6b:3c:08:31:6f:78:3d:e5:fe:5e:
                    d2:39:2c:99:cd:b8:34:95:ae:d1:bd:f9:dd:85:d9:
                    cb:fb:81:c5:f0:89:2c:13:77:98:19:df:88:e3:24:
                    3c:54:91:5d:95:33:6e:c8:1b:84:2c:1c:c5:9e:30:
                    15:b0:45:0b:73:ed:d9:6d:0b:1b:25:bd:0a:be:4f:
                    af:d3:4f:ba:ce:c3:ca:51:ff:1c:2b:b7:2b:28:b9:
                    31:62:50:22:4f:5c:ac:e6:f8:2c:9a:c7:39:39:fd:
                    93:73:af:e5:7a:d5:0a:27:9b:5f:53:de:3c:08:3b:
                    61:e0:01:f4:2a:e7:e6:2f:e6:bf:da:6f:3e:9c:ea:
                    a1:73:9a:60:b6:8f:b5:40:1f:1e:65:2f:af:91:f9:
                    ec:73:b3:b8:fa:a7:09:ca:4f:5b:55:04:83:f1:70:
                    15:a6:74:d0:9d:d3:d5:b6:a4:5a:bb:df:7e:45:58:
                    ed:8b:e2:01:2f:d7:9d:c3:c8:18:01:95:cd:a7:68:
                    31:fa:94:17:d2:ba:74:c7:2e:ec:0a:b1:ce:e6:b3:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:33:AE:23:F3:1E:84:C6:C4:C0:EC:8C:B2:67:F9:27:5A:A4:B9:F6
            X509v3 Authority Key Identifier:
                keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/AzOuI_MehMbEwOyMsmf5J1qkufY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:19:32:56:9d:66:d2:06:4a:23:0c:0d:54:e5:ce:b8:48:dd:
         ba:d1:dd:4f:1d:ec:b2:7d:fc:e9:82:28:a4:89:fd:f0:96:26:
         9c:ec:09:a6:89:e3:81:72:35:f7:7f:8d:4a:2c:c2:8c:a9:06:
         a8:15:3f:d6:3d:8f:d6:b4:79:52:5d:f3:10:3c:2d:25:81:8f:
         89:b1:53:19:4a:dd:62:8a:ba:0d:b5:29:50:40:7c:52:62:a5:
         d6:13:75:52:2a:79:59:c1:18:18:aa:4e:b6:db:ba:09:c9:ec:
         98:67:76:a2:32:e4:be:ca:26:02:12:a3:06:fd:e3:cc:b4:b3:
         18:c0:ee:39:32:0c:c6:aa:a6:a1:74:da:df:3d:2a:16:76:a4:
         be:ae:9c:81:87:e6:5e:c4:a8:c0:e4:92:cb:ee:79:09:c2:4e:
         dc:88:12:c8:15:d7:ad:5b:ea:bd:13:e6:05:15:eb:a7:aa:f3:
         42:c4:19:d9:1a:e3:11:d1:d0:df:be:a2:07:72:04:54:c9:2a:
         7c:0c:33:c6:0a:28:46:d6:53:a5:e5:f2:d6:c8:2b:01:37:49:
         72:63:6e:c7:40:9a:cc:52:52:d2:8a:6f:74:3d:05:80:06:bf:
         36:ee:5e:24:b9:6b:71:cf:cb:cd:20:2b:11:33:4a:43:98:82:
         24:0d:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:09 2026 by rpki-client