This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3Oz8P6b4aweONPUHcfhDjY82LW4.roa
File: 3Oz8P6b4aweONPUHcfhDjY82LW4.roa (raw, json)
Hash identifier: +z9X/U1j5b5IClUjkT36cYWKQB0S/0D/Wcfi+nCLSAE=
Subject key identifier: DC:EC:FC:3F:A6:F8:6B:07:8E:34:F5:07:71:F8:43:8D:8F:36:2D:6E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183EB9632E38E2977D6B6487C170485B26F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3Oz8P6b4aweONPUHcfhDjY82LW4.roa
Signing time: Tue 18 Oct 2022 14:53:52 +0000
ROA not before: Tue 18 Oct 2022 14:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.33.62.0/24 maxlen: 24
2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:96:32:e3:8e:29:77:d6:b6:48:7c:17:04:85:b2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 18 14:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcecfc3fa6f86b078e34f50771f8438d8f362d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:65:8c:0c:aa:33:f0:1e:3e:d0:d3:5c:cf:
fd:84:8d:b8:fb:c6:d4:24:a4:6e:bf:1e:26:22:fd:
52:c6:18:b4:c6:2e:3b:98:f9:7a:4a:a5:33:ec:67:
9d:5c:42:56:f0:1e:19:a9:ba:04:92:7f:ad:f3:d4:
df:84:d8:fb:4b:34:24:37:0a:ab:aa:2e:fd:4a:aa:
c3:5a:df:04:0e:95:26:49:23:d6:8b:29:48:af:30:
e9:63:2f:95:95:ce:7a:ea:04:71:02:41:1f:23:d9:
9a:0b:b7:86:b3:ac:7a:c4:a9:59:d4:d4:50:a2:78:
ee:3d:0a:90:9a:a7:1d:37:9d:cb:8c:08:b2:ec:b9:
7f:bd:d7:9e:6a:29:80:70:02:a0:6c:9c:2f:20:b2:
8e:6d:25:23:46:d5:a2:a2:b0:6d:b3:d0:c6:7b:7b:
37:cc:cc:4d:fd:27:a4:b9:95:16:57:43:37:82:1f:
16:61:86:4d:1f:03:83:45:a6:e9:c6:14:34:20:05:
4b:14:f7:9d:fd:41:ad:10:71:31:41:d8:20:0e:d6:
de:57:14:d2:a4:76:b4:37:e8:50:36:08:25:c1:ba:
20:4c:17:c2:5a:1e:a6:59:62:e9:70:40:73:e2:cb:
85:24:20:b8:9f:08:5d:51:5e:89:c8:37:f3:99:81:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EC:FC:3F:A6:F8:6B:07:8E:34:F5:07:71:F8:43:8D:8F:36:2D:6E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3Oz8P6b4aweONPUHcfhDjY82LW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.62.0/24
IPv6:
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
7c:48:bf:b6:12:8c:8b:0d:cc:00:69:88:54:7b:98:fa:4d:09:
ee:d6:f0:0d:01:5f:37:21:4e:63:b6:80:f3:f3:90:60:1f:d1:
0f:25:c7:b9:95:28:48:8d:00:b3:3e:56:6c:de:be:58:70:16:
f0:ea:08:56:ef:71:17:2b:5f:45:16:32:71:ca:df:82:ca:28:
79:3d:6c:a7:a7:19:d6:7a:18:b6:93:67:65:15:26:ad:9c:a7:
23:56:c1:c8:e7:d2:f3:d6:d3:34:3e:a9:09:b3:82:19:0f:67:
c4:98:fd:ee:7f:70:b5:83:d3:6e:48:80:7e:64:40:36:65:90:
c4:f4:26:16:b6:41:d8:7f:91:b7:37:50:08:2d:4c:ea:a9:81:
10:7f:46:24:f8:0a:78:01:cc:b9:dc:d2:40:23:ab:03:02:e8:
10:5d:bd:36:c1:ad:4f:d0:fe:de:5f:c3:34:cc:0c:fb:a3:08:
72:dc:f0:8c:23:b8:7b:6d:a1:2e:07:3c:48:70:b6:03:a3:9d:
43:eb:7b:5c:6a:a7:81:f1:8f:85:7f:2c:44:f6:5a:ee:b8:28:
ce:d3:97:cb:ff:a0:69:d4:9d:38:bf:43:3a:05:cb:82:cd:3c:
07:6a:3a:60:d1:0d:d7:94:1d:48:f5:0f:ac:1f:0b:fe:9a:e3:
7e:01:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:21:01 2025 by rpki-client