This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer (raw, json) Hash identifier: VYqJRvGtpeYW278c1KJTMzRtz+E/ImDq5N+9A+rsLlo= Subject key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15B21E8D5451AFDEDCB726777A73A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.54.103.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b2:1e:8d:54:51:af:de:dc:b7:26:77:7a:73:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=030b00e6074502e6538391feab18358281a3279b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:55:fb:4e:2b:ab:43:0f:0b:ff:d3:e3:6d: 02:20:30:d2:2a:de:c3:e3:96:02:ed:1a:20:72:2d: a2:79:e1:a0:11:41:56:3c:0b:2a:40:3d:54:e6:ef: e8:a5:0e:7a:45:82:c8:92:ca:11:a5:60:24:d1:92: 6e:0d:9e:a9:a2:c1:68:d1:a3:a9:19:f2:0a:1b:01: 6b:d5:73:cf:fb:58:07:2a:9e:8f:14:bb:aa:5f:e3: 61:64:12:c9:5a:6a:76:69:a6:70:da:e3:d6:7c:9f: 9b:48:a4:b4:da:41:af:5f:39:07:d6:a0:01:d7:94: d7:19:34:d2:c2:76:b7:72:4f:c2:4e:2e:4d:2b:39: 87:9a:a5:11:56:45:06:f1:10:67:7d:0b:e2:ba:fd: d0:61:97:c3:d4:fc:13:9d:9c:5e:fc:d4:0e:c5:3f: 99:9b:77:72:d0:28:49:26:56:bb:02:8e:69:ce:c9: 87:38:31:b9:60:97:11:ba:57:c0:e7:66:64:a8:8f: e2:7e:d9:d6:f8:c2:1c:b6:84:00:1d:7d:73:c3:be: 87:50:c9:fa:e3:5b:25:40:b4:ff:84:7a:1c:30:4f: 69:bc:39:e4:58:27:a2:25:a2:f8:e3:fe:98:ac:e6: aa:95:e6:70:c2:ac:86:ab:40:c9:11:25:95:db:e9: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.103.0/24 Signature Algorithm: sha256WithRSAEncryption 55:4c:8d:c0:ec:1f:8b:e2:cd:8f:3e:ca:d6:be:b6:17:5a:c6: 18:74:2a:a0:19:a3:7f:a3:22:90:79:ee:4d:d5:15:e3:29:d6: d1:f7:ca:ab:df:d5:49:85:3a:53:32:4e:bc:94:2a:9e:fa:a4: 3c:31:e5:72:25:60:79:fc:5b:17:ee:39:3f:e9:d2:d9:2c:6a: 95:07:82:64:c1:11:87:d6:58:66:fb:59:13:b6:ba:e5:89:bb: 17:88:e9:c6:c4:7c:d3:c1:2b:fb:67:20:43:12:d6:6b:a8:21: b1:5d:6b:40:36:db:61:bc:1a:6c:71:15:3e:04:8b:2e:c3:28: c2:45:ed:9c:aa:2c:8f:66:3c:69:bd:f3:11:95:c3:e1:1a:c3: dc:4a:61:bd:3f:d7:8d:e4:84:50:48:dd:24:07:ed:0a:d3:c4: 48:b5:5b:61:68:d1:b6:5b:41:fd:70:f3:4e:f4:e0:67:8a:37: 7c:85:b5:f7:51:46:d1:40:05:95:b0:d8:7f:d6:6a:77:84:d5: d9:ac:6f:c3:d1:90:19:78:85:57:e4:09:7f:13:d8:d2:10:31: cd:ce:f3:90:56:9b:45:f8:80:15:1a:fd:40:f5:7f:d9:3f:90: e7:d3:2d:9a:7c:06:87:c4:56:8b:e8:16:47:45:3a:38:78:f2: c5:04:c6:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FbIejVRRr97ctyZ3enOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzBiMDBlNjA3NDUwMmU2NTM4MzkxZmVhYjE4MzU4MjgxYTMyNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1NV+04rq0MPC//T420CIDDSKt7D 45YC7Rogci2ieeGgEUFWPAsqQD1U5u/opQ56RYLIksoRpWAk0ZJuDZ6posFo0aOp GfIKGwFr1XPP+1gHKp6PFLuqX+NhZBLJWmp2aaZw2uPWfJ+bSKS02kGvXzkH1qAB 15TXGTTSwna3ck/CTi5NKzmHmqURVkUG8RBnfQviuv3QYZfD1PwTnZxe/NQOxT+Z m3dy0ChJJla7Ao5pzsmHODG5YJcRulfA52ZkqI/iftnW+MIctoQAHX1zw76HUMn6 41slQLT/hHocME9pvDnkWCeiJaL44/6YrOaqleZwwqyGq0DJESWV2+m/xQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAMLAOYHRQLmU4OR/qsYNYKBoyebMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2MyNjQ1 OC1mZGE4LTRmMGEtOTU3YS03NzU2NDM4NTQ0Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvYzI2NDU4 LWZkYTgtNGYwYS05NTdhLTc3NTY0Mzg1NDRjYS8xL0F3c0E1Z2RGQXVaVGc1SC1x eGcxZ29Hako1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuTZnMA0GCSqGSIb3DQEBCwUAA4IBAQBVTI3A 7B+L4s2PPsrWvrYXWsYYdCqgGaN/oyKQee5N1RXjKdbR98qr39VJhTpTMk68lCqe +qQ8MeVyJWB5/FsX7jk/6dLZLGqVB4JkwRGH1lhm+1kTtrrlibsXiOnGxHzTwSv7 ZyBDEtZrqCGxXWtANtthvBpscRU+BIsuwyjCRe2cqiyPZjxpvfMRlcPhGsPcSmG9 P9eN5IRQSN0kB+0K08RItVthaNG2W0H9cPNO9OBnijd8hbX3UUbRQAWVsNh/1mp3 hNXZrG/D0ZAZeIVX5Al/E9jSEDHNzvOQVptF+IAVGv1A9X/ZP5Dn0y2afAaHxFaL 6BZHRTo4ePLFBMZ9 -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:55 2026 by rpki-client