This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/AREZ7-I4dY-lVbG1KNvmj3abde0.roa File: AREZ7-I4dY-lVbG1KNvmj3abde0.roa (raw, json) Hash identifier: 5iBy3FivOVWf36BTRuKIxy1pHWbIkHkYDe7qIgLbr7U= Subject key identifier: 01:11:19:EF:E2:38:75:8F:A5:55:B1:B5:28:DB:E6:8F:76:9B:75:ED Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e Certificate serial: 019B7EA5F6C365D22779BE8275E8C548709D Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/AREZ7-I4dY-lVbG1KNvmj3abde0.roa Signing time: Fri 02 Jan 2026 12:19:24 +0000 ROA not before: Fri 02 Jan 2026 12:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134094 IP address blocks: 185.190.16.0/24 maxlen: 24 185.190.17.0/24 maxlen: 24 185.190.18.0/24 maxlen: 24 185.190.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:f6:c3:65:d2:27:79:be:82:75:e8:c5:48:70:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e Validity Not Before: Jan 2 12:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=011119efe238758fa555b1b528dbe68f769b75ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:26:8b:5e:82:0a:86:cc:70:3c:38:8b:86: 03:c2:c4:54:84:5a:0c:55:b7:80:92:73:fe:44:ab: a7:06:e4:00:9c:c5:3c:1c:1e:b5:25:08:82:6e:28: 92:41:60:32:86:fc:89:6b:85:60:d9:7d:47:f0:48: 7a:f0:54:56:7f:a4:a7:0f:f4:8f:2c:b3:f0:22:a9: b5:e6:d2:2d:be:a6:e6:b8:a1:57:c6:1b:f5:1f:88: 18:64:f0:dc:13:55:f3:0d:2f:ca:6a:b9:6a:24:52: 69:de:fe:77:97:67:78:67:0a:e2:1d:c3:d9:ca:fd: 20:7f:49:8d:63:e5:60:89:03:96:f8:1b:78:98:df: af:9d:95:a8:84:18:51:ca:10:45:5f:e6:f7:6f:f3: 20:94:23:df:7d:ae:c6:10:4e:30:1d:31:cb:04:08: 57:28:aa:04:2d:34:d0:4f:b1:9b:81:18:a8:0f:78: 56:d8:08:d2:f4:96:a2:a8:b5:3b:87:ce:fc:33:42: 3a:6c:52:47:bf:46:19:38:44:e2:3f:76:e8:c9:cc: 62:c9:73:bd:88:a3:e4:2c:6e:e8:e0:e7:ff:c5:d3: 67:ca:05:d7:5b:e3:93:cb:2c:7a:c5:5d:86:35:d5: 12:73:71:46:a8:1b:05:cc:3b:4f:05:62:61:a9:68: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:11:19:EF:E2:38:75:8F:A5:55:B1:B5:28:DB:E6:8F:76:9B:75:ED X509v3 Authority Key Identifier: keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/AREZ7-I4dY-lVbG1KNvmj3abde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.16.0/22 Signature Algorithm: sha256WithRSAEncryption b0:03:f9:22:7c:c9:8a:f6:62:d1:d2:a0:5c:8e:ec:ab:7f:d1: 1c:9e:33:fa:ba:dd:d5:b4:f0:bf:f5:af:4e:e6:21:37:be:24: c7:16:45:ce:cf:33:c3:fc:0c:88:99:78:b2:52:b7:7c:e6:f8: 0d:8d:c3:41:3b:3b:2a:3d:f4:0f:fa:03:1c:9d:8d:ec:c7:cf: a9:4c:9b:df:e6:1c:82:fc:7e:09:9b:17:1e:ee:48:2e:ac:71: c3:87:c8:e1:5a:c9:aa:af:09:b0:fd:f3:2d:c1:16:e8:1e:a2: 26:46:16:97:97:e7:95:56:f1:35:6f:83:96:aa:90:4f:33:80: 91:4d:ea:fb:26:57:d1:8b:8c:bd:e1:1e:41:66:15:63:42:13: 2a:ec:39:f8:58:88:d4:be:01:9b:87:74:1c:38:61:fa:f8:4e: bd:c7:1d:e6:9c:eb:67:94:ff:60:60:41:16:00:4b:23:2c:b8: fd:56:5c:4c:06:5f:ec:5b:01:8e:4e:ae:ff:0f:05:5f:0c:c6: 20:03:62:b8:64:cf:cb:f9:b5:98:93:54:09:45:2d:0a:f4:1c: 41:98:a5:06:38:a7:cd:88:a7:b5:2b:0c:2e:f0:c3:34:b5:bf: 08:1b:b4:98:ab:ac:cb:29:8f:aa:bf:3a:19:0d:fe:75:a3:9c: 66:aa:ad:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pfbDZdIneb6CdejFSHCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0M2I1MzIyYjhlYTM4YTdhMDQ0ZGNiMDY3MWE3NWRiYTEw NDNkN2UwHhcNMjYwMTAyMTIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTExMTllZmUyMzg3NThmYTU1NWIxYjUyOGRiZTY4Zjc2OWI3NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr0mi16CCobMcDw4i4YDwsRUhFoM VbeAknP+RKunBuQAnMU8HB61JQiCbiiSQWAyhvyJa4Vg2X1H8Eh68FRWf6SnD/SP LLPwIqm15tItvqbmuKFXxhv1H4gYZPDcE1XzDS/KarlqJFJp3v53l2d4ZwriHcPZ yv0gf0mNY+VgiQOW+Bt4mN+vnZWohBhRyhBFX+b3b/MglCPffa7GEE4wHTHLBAhX KKoELTTQT7GbgRioD3hW2AjS9JaiqLU7h878M0I6bFJHv0YZOETiP3boycxiyXO9 iKPkLG7o4Of/xdNnygXXW+OTyyx6xV2GNdUSc3FGqBsFzDtPBWJhqWgS3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAERGe/iOHWPpVWxtSjb5o92m3XtMB8GA1UdIwQY MBaAFKQ7UyK46jinoETcsGcadduhBD1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAt NzFlOTViMDRiM2VjLzEvQVJFWjctSTRkWS1sVmJHMUtOdm1qM2FiZGUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAtNzFlOTViMDRiM2Vj LzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub4QMA0G CSqGSIb3DQEBCwUAA4IBAQCwA/kifMmK9mLR0qBcjuyrf9EcnjP6ut3VtPC/9a9O 5iE3viTHFkXOzzPD/AyImXiyUrd85vgNjcNBOzsqPfQP+gMcnY3sx8+pTJvf5hyC /H4Jmxce7kgurHHDh8jhWsmqrwmw/fMtwRboHqImRhaXl+eVVvE1b4OWqpBPM4CR Ter7JlfRi4y94R5BZhVjQhMq7Dn4WIjUvgGbh3QcOGH6+E69xx3mnOtnlP9gYEEW AEsjLLj9VlxMBl/sWwGOTq7/DwVfDMYgA2K4ZM/L+bWYk1QJRS0K9BxBmKUGOKfN iKe1Kwwu8MM0tb8IG7SYq6zLKY+qvzoZDf51o5xmqq3A -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:33 2026 by rpki-client