This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer File: azroDOy1b1swA4g6leJvRB10ny4.cer (raw, json) Hash identifier: E+i6cNesMRekLUuF8aqg9AKpnaLCO5mgIZfEUMntxXo= Subject key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B314F3DA6AE969C613102811753BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30720 IP: 80.85.160.0/20 IP: 2a01:6a40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:31:4f:3d:a6:ae:96:9c:61:31:02:81:17:53:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:e2:8f:78:d4:a1:2f:6e:53:15:88:b1:ee: d6:0f:23:9a:00:a8:d5:34:c7:76:bf:63:5b:80:df: 3d:6a:9a:9c:36:ea:5e:e1:3f:fc:17:8d:8f:97:8c: 70:a0:8e:e6:b8:8d:77:18:1a:eb:da:7f:f5:f9:6a: 19:f3:38:ca:85:4a:b3:cb:b7:1d:ee:0e:8a:2d:e8: 4a:d7:74:77:3a:78:fc:f8:6c:7a:f8:e8:3e:b6:c9: 65:91:7d:5a:c1:5d:c6:ff:32:57:98:63:ac:b3:62: 0e:0c:d8:23:42:ad:02:7e:e8:69:b3:7f:86:9f:25: 59:68:1a:db:1f:a0:bd:6f:19:06:c5:f1:fe:bc:1c: 06:6d:f8:bb:85:cd:71:f9:7d:2a:31:65:2b:59:81: d1:23:ba:af:00:28:74:f3:64:d0:6a:3d:05:43:ba: e9:8b:07:8e:5f:ca:eb:f4:1b:f1:66:14:f0:4c:69: 0e:55:97:80:3b:94:3a:24:ac:6e:c5:e8:78:45:58: 1e:20:5d:e1:68:fd:1f:48:80:f6:4e:43:c5:20:9e: d6:5e:3c:a5:cb:7b:69:16:ae:d4:a8:ce:be:37:1e: aa:b8:47:1c:7f:dd:f6:56:bc:64:86:6d:78:b8:df: 35:df:0f:00:0f:0e:8e:72:75:4e:f9:63:87:ba:5d: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.160.0/20 IPv6: 2a01:6a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30720 Signature Algorithm: sha256WithRSAEncryption 72:56:7e:6a:fa:47:b9:f8:a5:f8:96:f3:56:b9:00:fe:89:39: bd:ce:61:78:24:95:2f:b5:c8:cc:5b:78:01:dc:9a:3c:78:45: c0:47:65:ba:73:5a:e5:73:a1:c2:f8:cf:b1:05:cb:18:cf:2e: 7d:04:83:b6:67:d3:fe:c0:4f:fe:fe:46:68:d7:90:47:4d:88: c9:fe:b3:bb:ef:78:95:da:57:36:c2:43:fc:7f:39:a9:d5:46: 2d:01:20:15:c3:fe:bf:a5:48:c0:45:0d:dc:e3:2d:b8:fc:78: 63:1b:90:ee:cb:db:88:80:e5:e8:37:b6:36:ac:d6:26:c1:13: ec:2f:a3:d5:8a:77:ba:36:d8:8e:65:a1:5e:22:d2:d8:02:cc: 67:bd:9d:59:89:b6:d5:f5:3e:e9:b5:26:78:c8:d8:38:fe:68: 4e:f9:96:f6:c8:dc:12:f7:82:4d:21:c5:6d:25:e6:ef:5d:6f: 0c:42:91:11:ce:c9:fb:26:95:05:09:a4:cc:fe:47:a7:a6:5d: b5:9a:b0:dc:47:ce:fe:07:92:6a:25:10:b7:df:d7:bf:69:58: 84:1d:e7:93:e6:53:82:17:b8:5c:3c:c7:06:fb:67:8f:65:1b: 0b:0e:cc:1f:c1:9e:e6:1b:65:1e:2f:86:dc:42:43:a1:85:55: aa:52:2c:ca -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt6WzFPPaaulpxhMQKBF1O8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjNhZTgwY2VjYjU2ZjViMzAwMzg4M2E5NWUyNmY0NDFkNzQ5ZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJfij3jUoS9uUxWIse7WDyOaAKjV NMd2v2NbgN89apqcNupe4T/8F42Pl4xwoI7muI13GBrr2n/1+WoZ8zjKhUqzy7cd 7g6KLehK13R3Onj8+Gx6+Og+tsllkX1awV3G/zJXmGOss2IODNgjQq0Cfuhps3+G nyVZaBrbH6C9bxkGxfH+vBwGbfi7hc1x+X0qMWUrWYHRI7qvACh082TQaj0FQ7rp iweOX8rr9BvxZhTwTGkOVZeAO5Q6JKxuxeh4RVgeIF3haP0fSID2TkPFIJ7WXjyl y3tpFq7UqM6+Nx6quEccf932Vrxkhm14uN813w8ADw6OcnVO+WOHul2iRwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFGs66AzstW9bMAOIOpXib0QddJ8uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzYzNzM3 Ny1jYWRjLTRmZDQtYjY2ZC1jOWE1NmM1ZDNlOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvNjM3Mzc3 LWNhZGMtNGZkNC1iNjZkLWM5YTU2YzVkM2U5MS8xL2F6cm9ET3kxYjFzd0E0ZzZs ZUp2UkIxMG55NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEUFWgMA0EAgACMAcDBQAqAWpAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAngAMA0GCSqGSIb3DQEBCwUAA4IBAQByVn5q+ke5+KX4 lvNWuQD+iTm9zmF4JJUvtcjMW3gB3Jo8eEXAR2W6c1rlc6HC+M+xBcsYzy59BIO2 Z9P+wE/+/kZo15BHTYjJ/rO773iV2lc2wkP8fzmp1UYtASAVw/6/pUjARQ3c4y24 /HhjG5Duy9uIgOXoN7Y2rNYmwRPsL6PVine6NtiOZaFeItLYAsxnvZ1ZibbV9T7p tSZ4yNg4/mhO+Zb2yNwS94JNIcVtJebvXW8MQpERzsn7JpUFCaTM/kenpl21mrDc R87+B5JqJRC339e/aViEHeeT5lOCF7hcPMcG+2ePZRsLDswfwZ7mG2UeL4bcQkOh hVWqUizK -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:09 2026 by rpki-client