This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer File: avOqAUC3mDUA6oKfPDa7-2WvmXI.cer (raw, json) Hash identifier: k9eMSgcW+bgKXUxiR7+2coK0geWQtzfQP2M/hAW+gAQ= Subject key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE29B3B560DE29E136DA9C5579DE3D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203702 IP: 185.126.220.0/22 IP: 194.124.201.0 -- 194.124.203.255 IP: 2a03:9660::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:29:b3:b5:60:de:29:e1:36:da:9c:55:79:de:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:c4:2f:fa:02:27:8e:fe:51:8d:9e:df:21: 25:34:a2:23:cd:6f:1d:d5:87:08:ef:2e:26:c6:32: b4:08:4f:da:a5:ff:6b:17:ae:78:1a:17:a4:f1:be: c2:f5:00:1b:e3:f1:7c:4c:6c:8b:ba:5e:69:79:87: ec:0d:c5:a7:ce:84:2e:ce:cc:b0:0a:37:7f:f4:72: 4a:fa:b8:ad:a9:96:ca:4b:c8:71:2f:57:3f:40:78: 99:ae:1b:05:f6:65:0e:0c:84:7b:28:3e:f7:eb:06: 7f:49:1a:f1:ea:7c:47:e6:e6:ac:fc:f8:4d:3d:d1: bf:7d:b8:a2:86:07:98:91:90:ef:50:f1:80:a3:9f: bc:d1:1d:da:71:a5:14:57:7b:d2:43:a7:00:fb:7f: cd:3a:3d:da:db:ad:de:82:32:83:90:46:01:fc:52: de:7f:13:dd:5a:8d:02:e9:90:8e:09:2e:d0:85:e1: 62:5c:fe:df:e6:e9:85:0b:2b:c4:e2:8e:c4:7d:95: c1:e2:ca:1c:0d:bd:71:60:5b:d9:23:65:d7:10:ea: 43:a3:f7:92:7a:95:59:7d:73:3b:f1:3f:ca:6e:8c: 5e:3a:91:ac:54:a7:b7:e1:3c:7c:cc:1f:ef:0b:4d: a2:6e:e0:c6:30:fa:6e:56:3a:6e:14:36:31:11:3b: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.220.0/22 194.124.201.0-194.124.203.255 IPv6: 2a03:9660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203702 Signature Algorithm: sha256WithRSAEncryption 63:e1:2f:ed:3e:a1:14:27:6b:93:b2:cc:ae:13:a8:11:53:28: 3c:34:8c:6a:a5:2a:8e:2a:a1:b2:80:b7:05:9c:8d:a1:d3:e4: 30:47:11:ee:3a:c7:60:21:1f:d9:2e:26:e3:06:07:e6:a6:45: 1f:1d:56:dd:f9:7d:8e:7d:7a:72:4e:dd:7a:dd:4a:22:f2:ce: d5:22:83:da:5f:59:28:8b:01:7f:f2:6f:63:e5:07:48:dc:8b: 5e:e5:af:d4:b5:3f:94:46:31:dc:ae:2e:19:8f:77:d4:4a:0b: eb:26:da:bd:d8:ca:0f:43:72:da:a0:ad:8d:a9:67:69:01:6b: 4a:72:3b:4a:8a:69:54:aa:00:44:13:3c:3d:b0:22:41:4c:bd: a1:7a:4b:14:bc:72:65:f3:5b:ee:a5:5e:8b:b4:a2:82:af:18: d5:31:d3:db:80:a8:02:8d:39:f6:b9:93:c9:9b:51:1a:e0:35: 32:3a:ca:c8:a7:98:62:e1:a4:a5:1b:3f:21:29:69:b6:74:7c: 62:d5:26:74:88:7b:1a:25:3c:29:a4:66:b2:f2:d4:73:3f:a9: c8:00:a3:1c:54:0e:18:dd:9f:6d:c3:07:ee:2e:03:a7:6c:80: 2a:56:ef:bb:a3:0a:de:0b:18:fc:70:53:d7:4a:67:a2:b7:79: 29:7b:3f:92 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt87imztWDeKeE22pxVed49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWYzYWEwMTQwYjc5ODM1MDBlYTgyOWYzYzM2YmJmYjY1YWY5OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRTEL/oCJ47+UY2e3yElNKIjzW8d 1YcI7y4mxjK0CE/apf9rF654Ghek8b7C9QAb4/F8TGyLul5peYfsDcWnzoQuzsyw Cjd/9HJK+ritqZbKS8hxL1c/QHiZrhsF9mUODIR7KD736wZ/SRrx6nxH5uas/PhN PdG/fbiihgeYkZDvUPGAo5+80R3acaUUV3vSQ6cA+3/NOj3a263egjKDkEYB/FLe fxPdWo0C6ZCOCS7QheFiXP7f5umFCyvE4o7EfZXB4socDb1xYFvZI2XXEOpDo/eS epVZfXM78T/KboxeOpGsVKe34Tx8zB/vC02ibuDGMPpuVjpuFDYxETs9vQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFGrzqgFAt5g1AOqCnzw2u/tlr5lyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzMyYjFh Yy00MTg5LTQ5ZmQtYTk5OS1iOGYzYjc3OWU1NGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMzJiMWFj LTQxODktNDlmZC1hOTk5LWI4ZjNiNzc5ZTU0Yi8xL2F2T3FBVUMzbURVQTZvS2ZQ RGE3LTJXdm1YSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQCuX7cMAwDBADCfMkDBALCfMgwDQQCAAIwBwMF ACoDlmAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxu2MA0GCSqGSIb3DQEBCwUA A4IBAQBj4S/tPqEUJ2uTssyuE6gRUyg8NIxqpSqOKqGygLcFnI2h0+QwRxHuOsdg IR/ZLibjBgfmpkUfHVbd+X2OfXpyTt163Uoi8s7VIoPaX1koiwF/8m9j5QdI3Ite 5a/UtT+URjHcri4Zj3fUSgvrJtq92MoPQ3LaoK2NqWdpAWtKcjtKimlUqgBEEzw9 sCJBTL2heksUvHJl81vupV6LtKKCrxjVMdPbgKgCjTn2uZPJm1Ea4DUyOsrIp5hi 4aSlGz8hKWm2dHxi1SZ0iHsaJTwppGay8tRzP6nIAKMcVA4Y3Z9twwfuLgOnbIAq Vu+7owreCxj8cFPXSmeit3kpez+S -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:23 2026 by rpki-client