This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer File: SAGluBYVjweoyorLN-l-LyCwaRE.cer (raw, json) Hash identifier: wG+r0tuBkSli5+SdWQeAflerp0LvzPyYHdNCn78tVs0= Subject key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB654817CA00904137408AA871F83D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206388 AS: 206495 AS: 207897 AS: 208005 IP: 81.28.252.0/22 IP: 91.199.9.0/24 IP: 91.199.18.0/24 IP: 91.199.27.0/24 IP: 91.199.30.0/24 IP: 109.95.60.0/22 IP: 185.186.240.0/22 IP: 185.187.86.0/23 IP: 194.9.56.0/23 IP: 194.9.80.0/23 IP: 194.150.68.0/22 IP: 2a04:1080::/29 IP: 2a04:6980::/29 IP: 2a0f:f1c0::/29 IP: 2a11:7700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:65:48:17:ca:00:90:41:37:40:8a:a8:71:f8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:79:54:46:b3:3b:c1:07:7e:fe:08:d1:12: c4:fb:fb:8f:48:72:03:8b:7d:1c:44:ce:ca:fc:3b: f1:ab:83:23:9a:00:b5:5a:ed:89:19:6e:fc:e7:cd: a7:95:79:63:ca:42:19:9d:86:a2:55:95:c4:e2:08: 5b:3a:9c:ef:81:c4:49:75:ba:73:58:cf:3e:65:d3: dd:95:c2:80:da:f3:84:98:64:10:c2:4e:46:6b:78: 32:a9:53:fe:23:f1:2d:e7:b6:73:b5:3e:e0:a4:a1: e1:bf:5c:33:e8:ac:98:ac:26:45:24:d8:2f:42:a6: ca:1b:e2:1b:0b:99:9e:2f:15:23:13:d3:2c:11:4a: fc:cc:f7:72:9b:b5:36:fb:b0:55:f4:1a:d2:f5:d7: db:76:31:5b:0b:d7:1e:ad:39:e5:35:2c:ee:19:5c: 54:dd:99:47:69:6f:97:61:85:aa:23:3c:87:70:32: 09:fc:3f:dd:16:19:71:15:ce:a3:74:c8:36:94:8f: 4e:dc:30:2a:11:ad:1d:3f:1a:06:17:52:27:72:4a: 63:e0:2f:b2:7f:92:f4:d3:25:d0:26:a0:08:cb:59: 75:ea:3f:3a:3e:50:f6:39:55:e6:85:ed:ac:d6:cb: 7a:1c:b3:68:04:e1:61:a8:99:ea:83:ef:71:67:94: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.28.252.0/22 91.199.9.0/24 91.199.18.0/24 91.199.27.0/24 91.199.30.0/24 109.95.60.0/22 185.186.240.0/22 185.187.86.0/23 194.9.56.0/23 194.9.80.0/23 194.150.68.0/22 IPv6: 2a04:1080::/29 2a04:6980::/29 2a0f:f1c0::/29 2a11:7700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206388 206495 207897 208005 Signature Algorithm: sha256WithRSAEncryption 2f:5c:0c:f6:c1:1d:b4:54:35:9e:3b:76:f2:1a:4a:7d:cb:64: 28:24:24:d5:74:a5:5f:b0:a5:a8:c2:29:ed:f5:56:14:01:b6: 47:d9:2b:80:fd:a1:5c:2f:39:ec:5e:19:4e:18:c4:24:c3:87: 1e:d9:90:2f:0e:bc:2f:77:c7:47:17:27:51:70:e7:66:3e:e7: 2d:78:e3:42:a8:72:97:57:b1:1b:9e:8c:29:48:49:d7:0e:67: bc:0a:2b:05:92:e8:f9:92:7a:27:d0:c1:d1:27:d9:7a:db:72: 04:85:ef:31:37:dc:4f:10:43:c2:05:ea:1f:58:3d:98:a2:5f: a9:9d:05:cf:c1:30:57:29:18:26:54:a9:65:f9:16:f5:ef:98: f6:8d:c3:ee:bf:e7:1c:9e:01:3a:9c:c3:a8:95:7b:fc:99:69: d9:8c:87:e0:16:03:3b:75:7c:a1:72:fe:e7:d7:41:50:7b:16: 5c:a7:f6:70:7c:b7:43:c0:62:cc:1c:c5:6d:2c:d6:80:f5:71: 97:94:b5:4d:28:4a:b4:e9:c6:e0:35:b1:d3:80:63:1f:e2:ca: bd:7d:aa:57:ca:e5:0e:2d:87:ca:3f:c8:bc:94:1f:c5:60:a5: 07:d7:7a:3b:cd:e6:a1:61:da:bf:03:d7:2c:e0:f0:41:64:5d: 3c:7c:fa:8b -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZt9y2VIF8oAkEE3QIqocfg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODAxYTViODE2MTU4ZjA3YThjYThhY2IzN2U5N2UyZjIwYjA2OTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUl5VEazO8EHfv4I0RLE+/uPSHID i30cRM7K/Dvxq4MjmgC1Wu2JGW78582nlXljykIZnYaiVZXE4ghbOpzvgcRJdbpz WM8+ZdPdlcKA2vOEmGQQwk5Ga3gyqVP+I/Et57ZztT7gpKHhv1wz6KyYrCZFJNgv QqbKG+IbC5meLxUjE9MsEUr8zPdym7U2+7BV9BrS9dfbdjFbC9cerTnlNSzuGVxU 3ZlHaW+XYYWqIzyHcDIJ/D/dFhlxFc6jdMg2lI9O3DAqEa0dPxoGF1Inckpj4C+y f5L00yXQJqAIy1l16j86PlD2OVXmhe2s1st6HLNoBOFhqJnqg+9xZ5S/GQIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFEgBpbgWFY8HqMqKyzfpfi8gsGkRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzcwOTBh OS1mZWVkLTRlYTEtODQ1OS1lZTgxMGI4M2FkY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNzA5MGE5 LWZlZWQtNGVhMS04NDU5LWVlODEwYjgzYWRjZC8xL1NBR2x1QllWandlb3lvckxO LWwtTHlDd2FSRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUF BwEHAQH/BHAwbjBIBAIAATBCAwQCURz8AwQAW8cJAwQAW8cSAwQAW8cbAwQAW8ce AwQCbV88AwQCubrwAwQBubtWAwQBwgk4AwQBwglQAwQCwpZEMCIEAgACMBwDBQMq BBCAAwUDKgRpgAMFAyoP8cADBQMqEXcAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQC AwMmNAIDAyafAgMDLBkCAwMshTANBgkqhkiG9w0BAQsFAAOCAQEAL1wM9sEdtFQ1 njt28hpKfctkKCQk1XSlX7ClqMIp7fVWFAG2R9krgP2hXC857F4ZThjEJMOHHtmQ Lw68L3fHRxcnUXDnZj7nLXjjQqhyl1exG56MKUhJ1w5nvAorBZLo+ZJ6J9DB0SfZ ettyBIXvMTfcTxBDwgXqH1g9mKJfqZ0Fz8EwVykYJlSpZfkW9e+Y9o3D7r/nHJ4B OpzDqJV7/Jlp2YyH4BYDO3V8oXL+59dBUHsWXKf2cHy3Q8BizBzFbSzWgPVxl5S1 TShKtOnG4DWx04BjH+LKvX2qV8rlDi2Hyj/IvJQfxWClB9d6O83moWHavwPXLODw QWRdPHz6iw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:43 2026 by rpki-client