This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer File: OroRckcuqAJl0SmCln3gqLC8WQE.cer (raw, json) Hash identifier: HVZ3uKrSMisN23Il7W8Q9VQ7nAxzB5uXivZU8IvTvJs= Subject key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B73CC0F653F070C3BF62F2BD6962F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200320 AS: 201426 AS: 201942 IP: 46.31.68.0/24 IP: 46.226.144.0/21 IP: 46.253.138.0/24 IP: 69.40.204.0/22 IP: 91.205.220.0/24 IP: 91.246.52.0/24 IP: 109.205.60.0/24 IP: 185.21.135.0/24 IP: 185.58.196.0/22 IP: 185.119.112.0/22 IP: 185.204.102.0/24 IP: 185.219.7.0/24 IP: 185.232.41.0/24 IP: 185.243.152.0/22 IP: 188.93.117.0/24 IP: 193.46.216.0/22 IP: 193.56.3.0/24 IP: 193.57.146.0/23 IP: 193.57.164.0/23 IP: 193.163.117.0/24 IP: 194.26.143.0/24 IP: 195.96.132.0/24 IP: 195.182.204.0/23 IP: 195.184.72.0/23 IP: 212.23.223.0/24 IP: 2a02:6520::/32 IP: 2a0c:8e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:73:cc:0f:65:3f:07:0c:3b:f6:2f:2b:d6:96:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b5:9b:4f:7c:a6:e1:ba:3f:ee:88:eb:a8:e6: 08:1f:2e:27:7b:f1:63:84:50:1b:96:4b:a8:62:c6: 6d:f7:72:d4:6a:12:19:47:4a:df:d1:0f:df:d2:33: e8:64:87:de:01:05:bd:06:1d:ba:d8:db:d2:9a:14: d2:0b:e0:58:86:c2:fa:c9:72:80:88:9c:74:bf:93: e3:b7:ba:4b:07:cf:18:f0:ae:88:96:0c:b3:30:47: 46:c6:8e:cc:ea:c7:5e:71:0e:24:28:ae:a3:5d:25: 97:86:31:3e:56:4b:59:14:09:e7:e2:66:1d:25:84: 43:90:c1:a7:83:6a:ed:3f:22:23:df:95:74:de:fb: b1:4f:e5:30:c4:c3:9c:0a:99:46:af:fa:12:d7:e8: cf:7b:d2:30:95:d3:25:5d:fb:5d:ed:d1:8a:32:cc: 8c:fa:10:97:9b:18:3c:b9:f6:21:38:8a:09:90:82: 0c:be:6e:ba:68:2b:a5:0e:01:49:7e:a6:67:83:49: 6a:df:25:45:dc:22:81:52:7e:ac:b3:45:f7:1e:64: 67:b7:a1:2e:54:8b:80:04:99:b9:84:18:f6:17:2d: 01:4f:c3:e3:5c:65:ba:31:d2:f3:c5:ed:54:8c:6e: 60:4b:15:2f:c5:cd:fa:7c:da:59:53:2b:a1:11:66: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.68.0/24 46.226.144.0/21 46.253.138.0/24 69.40.204.0/22 91.205.220.0/24 91.246.52.0/24 109.205.60.0/24 185.21.135.0/24 185.58.196.0/22 185.119.112.0/22 185.204.102.0/24 185.219.7.0/24 185.232.41.0/24 185.243.152.0/22 188.93.117.0/24 193.46.216.0/22 193.56.3.0/24 193.57.146.0/23 193.57.164.0/23 193.163.117.0/24 194.26.143.0/24 195.96.132.0/24 195.182.204.0/23 195.184.72.0/23 212.23.223.0/24 IPv6: 2a02:6520::/32 2a0c:8e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200320 201426 201942 Signature Algorithm: sha256WithRSAEncryption 96:1e:b3:9a:cd:53:5d:51:fb:3b:1e:f5:eb:47:ec:3a:07:e3: 24:bb:9a:40:19:07:b9:2d:26:c1:26:91:1b:fd:d5:21:bc:f3: 82:24:61:09:ac:f8:53:3f:89:69:1d:e3:58:d9:fb:ef:c5:7f: 71:a2:e8:46:6f:d2:51:ae:90:98:53:66:18:ba:4e:45:59:03: 11:93:3e:1f:bd:15:b6:3e:a1:e3:c9:2b:e6:11:1e:bf:44:57: d1:63:ce:7c:07:12:ad:b8:6a:9d:65:76:e9:aa:7c:a3:23:1b: 18:de:83:46:5d:6b:ce:13:0d:99:5b:2c:bb:c6:2f:bb:e4:19: 22:db:d7:94:e3:b7:27:a7:10:1a:62:1a:49:45:fe:f6:17:ee: 12:e6:ab:8a:af:08:e5:e6:0c:ad:87:c8:33:29:3a:c3:54:58: 9d:69:b9:94:5a:73:97:c3:77:f6:b4:c2:9a:66:6c:4d:ec:cf: af:e2:4b:a1:b7:f3:1e:ac:aa:b8:31:8a:59:13:ca:da:6c:66: 67:78:d6:25:40:5e:22:99:e0:7a:73:72:c7:45:f1:e1:29:b4: 24:f1:5b:05:c6:83:39:ca:1b:81:b6:3f:e0:ff:81:1d:ed:16: ca:11:90:c9:ee:d7:ba:f1:77:c6:93:8e:e6:ba:c7:e6:50:ac: d4:83:70:66 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAZt6W3PMD2U/Bww79i8r1pYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWJhMTE3MjQ3MmVhODAyNjVkMTI5ODI5NjdkZTBhOGIwYmM1OTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbWbT3ym4bo/7ojrqOYIHy4ne/Fj hFAblkuoYsZt93LUahIZR0rf0Q/f0jPoZIfeAQW9Bh262NvSmhTSC+BYhsL6yXKA iJx0v5Pjt7pLB88Y8K6IlgyzMEdGxo7M6sdecQ4kKK6jXSWXhjE+VktZFAnn4mYd JYRDkMGng2rtPyIj35V03vuxT+UwxMOcCplGr/oS1+jPe9IwldMlXftd7dGKMsyM +hCXmxg8ufYhOIoJkIIMvm66aCulDgFJfqZng0lq3yVF3CKBUn6ss0X3HmRnt6Eu VIuABJm5hBj2Fy0BT8PjXGW6MdLzxe1UjG5gSxUvxc36fNpZUyuhEWYtkQIDAQAB o4IDVTCCA1EwHQYDVR0OBBYEFDq6EXJHLqgCZdEpgpZ94KiwvFkBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzdiMWM1 NS1kZGQwLTQyODEtODM3OC00ZGQwNDM0NmFiYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvN2IxYzU1 LWRkZDAtNDI4MS04Mzc4LTRkZDA0MzQ2YWJjMy8xL09yb1Jja2N1cUFKbDBTbUNs bjNncUxDOFdRRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHJBggrBgEF BQcBBwEB/wSBuTCBtjCBnQQCAAEwgZYDBAAuH0QDBAMu4pADBAAu/YoDBAJFKMwD BABbzdwDBABb9jQDBABtzTwDBAC5FYcDBAK5OsQDBAK5d3ADBAC5zGYDBAC52wcD BAC56CkDBAK585gDBAC8XXUDBALBLtgDBADBOAMDBAHBOZIDBAHBOaQDBADBo3UD BADCGo8DBADDYIQDBAHDtswDBAHDuEgDBADUF98wFAQCAAIwDgMFACoCZSADBQMq DI5AMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwMOgAIDAxLSAgMDFNYwDQYJKoZI hvcNAQELBQADggEBAJYes5rNU11R+zse9etH7DoH4yS7mkAZB7ktJsEmkRv91SG8 84IkYQms+FM/iWkd41jZ++/Ff3Gi6EZv0lGukJhTZhi6TkVZAxGTPh+9FbY+oePJ K+YRHr9EV9FjznwHEq24ap1ldumqfKMjGxjeg0Zda84TDZlbLLvGL7vkGSLb15Tj tyenEBpiGklF/vYX7hLmq4qvCOXmDK2HyDMpOsNUWJ1puZRac5fDd/a0wppmbE3s z6/iS6G38x6sqrgxilkTytpsZmd41iVAXiKZ4HpzcsdF8eEptCTxWwXGgznKG4G2 P+D/gR3tFsoRkMnu17rxd8aTjua6x+ZQrNSDcGY= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:57 2026 by rpki-client