This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer File: aqb54-JiKngVolnljVUkOcJVoxs.cer (raw, json) Hash identifier: fd9qYK02brST0n6jSWkSgamyDpPYZ+MoLEfSksgNbDE= Subject key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3248441F4AE66A0262858D16CA8AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207211 IP: 185.157.204.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:24:84:41:f4:ae:66:a0:26:28:58:d1:6c:a8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:71:89:02:f1:53:b0:10:83:c7:63:f1:76: ed:64:1a:f6:0e:b4:1d:e8:d3:9b:be:5a:65:2c:f2: a4:a9:6b:eb:cf:dd:27:39:97:f0:30:74:3c:b9:01: 24:46:33:60:fa:fa:4c:b0:14:52:69:a8:ad:18:db: 27:ae:a4:2a:e9:68:59:cd:fe:19:a2:f1:0f:90:c3: 32:69:57:e5:8c:fa:1c:f1:e5:4c:71:42:f5:3e:b8: b3:2e:d2:33:db:c8:3f:43:ec:e8:b7:d9:a7:d1:3b: 90:1b:95:6f:07:47:a0:27:43:0a:e8:de:a9:a6:e3: 22:f1:3e:d2:ae:d6:10:31:7a:db:ff:a8:c9:92:7a: 0b:a9:4c:d1:93:73:a4:c1:45:17:ae:3e:60:32:f5: 0a:55:25:b2:78:f1:c1:d3:4a:c5:b9:11:b5:7f:4e: 52:2a:56:fd:5c:72:4c:36:63:d0:3b:8a:60:07:a4: a9:41:d9:04:e3:4e:6e:57:03:50:14:ac:13:b7:9b: b8:17:54:57:11:cd:8b:91:b4:c2:c2:f4:b6:03:14: 35:1e:5a:e3:ce:02:4c:68:d9:55:3d:94:8f:98:5b: 9c:19:bd:9c:6f:e1:56:a3:e7:69:24:00:0c:20:73: 02:b7:b8:bd:66:d4:03:61:e6:35:aa:07:ca:1d:f5: f3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207211 Signature Algorithm: sha256WithRSAEncryption 73:7f:63:68:64:9b:ca:49:55:b7:5f:8f:c1:bd:29:92:9d:14: 57:15:1d:77:c6:ad:59:93:6d:ad:3c:75:5d:9b:5e:07:96:fe: 6f:2c:ce:80:65:5d:34:33:21:80:34:cf:08:6e:13:05:2e:af: a2:f4:ea:82:a6:de:7e:52:a9:e7:a4:18:72:13:60:da:e7:c3: 4e:2a:4f:f5:ee:15:5f:eb:bc:ea:40:49:5e:ca:08:d2:1b:ec: ae:cc:a4:7f:8a:3e:75:92:fc:4c:43:d8:64:45:03:bc:fd:83: 4b:a7:48:54:fc:3e:03:49:9d:cf:be:9c:6a:64:c5:64:54:00: 84:d0:08:43:ad:04:87:60:76:1c:6d:a9:85:d5:c4:d1:a6:da: a2:e9:75:49:0a:bc:68:e2:df:65:ba:ae:bd:04:e6:8d:0a:3b: 98:88:09:e5:d6:29:02:65:23:b0:e4:3f:da:b2:e9:c6:60:e1: 85:13:55:6b:50:b1:57:1b:08:0d:db:23:74:45:c0:c2:d5:ec: 88:af:76:d3:f6:34:dd:18:ef:a0:a4:58:c2:4b:93:a6:6d:77: 30:31:a2:1f:76:f8:92:c6:a7:51:a4:a3:8b:32:53:f3:6b:7f: d1:01:29:fa:c6:4f:3e:29:49:02:32:c0:3a:e5:e0:a7:00:4f: 43:bd:99:b1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4oySEQfSuZqAmKFjRbKivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWE2ZjllM2UyNjIyYTc4MTVhMjU5ZTU4ZDU1MjQzOWMyNTVhMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IlxiQLxU7AQg8dj8XbtZBr2DrQd 6NObvlplLPKkqWvrz90nOZfwMHQ8uQEkRjNg+vpMsBRSaaitGNsnrqQq6WhZzf4Z ovEPkMMyaVfljPoc8eVMcUL1PrizLtIz28g/Q+zot9mn0TuQG5VvB0egJ0MK6N6p puMi8T7SrtYQMXrb/6jJknoLqUzRk3OkwUUXrj5gMvUKVSWyePHB00rFuRG1f05S Klb9XHJMNmPQO4pgB6SpQdkE405uVwNQFKwTt5u4F1RXEc2LkbTCwvS2AxQ1Hlrj zgJMaNlVPZSPmFucGb2cb+FWo+dpJAAMIHMCt7i9ZtQDYeY1qgfKHfXzCwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGqm+ePiYip4FaJZ5Y1VJDnCVaMbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzkzNjgw Ni1iYjZkLTQ1ZjMtODgzNy1jNTA3MzRkMDIwZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvOTM2ODA2 LWJiNmQtNDVmMy04ODM3LWM1MDczNGQwMjBmMC8xL2FxYjU0LUppS25nVm9sbmxq VlVrT2NKVm94cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZ3MMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMpazANBgkqhkiG9w0BAQsFAAOCAQEAc39jaGSbyklVt1+Pwb0pkp0UVxUdd8at WZNtrTx1XZteB5b+byzOgGVdNDMhgDTPCG4TBS6vovTqgqbeflKp56QYchNg2ufD TipP9e4VX+u86kBJXsoI0hvsrsykf4o+dZL8TEPYZEUDvP2DS6dIVPw+A0mdz76c amTFZFQAhNAIQ60Eh2B2HG2phdXE0abaoul1SQq8aOLfZbquvQTmjQo7mIgJ5dYp AmUjsOQ/2rLpxmDhhRNVa1CxVxsIDdsjdEXAwtXsiK920/Y03RjvoKRYwkuTpm13 MDGiH3b4ksanUaSjizJT82t/0QEp+sZPPilJAjLAOuXgpwBPQ72ZsQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:05:35 2026 by rpki-client