This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer (raw, json) Hash identifier: WdPnlkmQCW1I+ZfWutoXmKyP9e6njQjjrmFYS4ksqMU= Subject key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED058D8FAAA5525A7130CC51752CA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57505 AS: 208919 IP: 45.138.188.0/22 IP: 194.147.219.0/24 IP: 2a12:67c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:05:8d:8f:aa:a5:52:5a:71:30:cc:51:75:2c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1a55bf2888753e44675b61dda30394d90156c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:d5:a2:6e:21:25:85:3a:20:dc:b4:fd:86: 72:bf:6a:b4:92:79:62:6e:76:36:d3:3c:ad:01:92: 79:14:e6:de:b7:c3:9e:25:81:f6:e0:3d:fa:07:71: 6c:93:79:54:ce:35:3a:c0:91:cb:9a:d7:bc:40:e7: 82:59:42:f9:69:d4:8d:6b:49:78:70:98:75:d6:7d: 2c:30:4c:5f:e2:bc:e4:33:d5:5b:35:10:fd:14:c3: 84:62:7c:05:eb:16:c4:9b:64:85:49:20:4c:79:37: 87:c0:9f:d0:5f:07:b7:a9:37:0d:db:e4:3b:bc:fd: b0:cf:2d:68:79:47:e9:bf:2c:5b:24:2b:7c:55:99: 1b:59:cf:4e:19:73:ce:4f:4e:54:02:97:e7:78:1a: 5e:13:b8:bc:9d:55:94:d0:17:ca:5a:ae:ac:63:b4: c9:c5:3a:91:8e:52:ec:b3:7b:f7:1d:50:29:11:b2: 0d:3a:92:22:7d:d8:b6:62:0b:67:8f:a8:5b:86:38: 71:06:2c:d3:76:a4:d5:85:a0:df:13:a6:4e:c7:7b: 36:47:6d:bf:ca:24:9c:83:c0:99:a1:e8:cb:6f:07: f0:d8:d3:a0:93:a8:57:98:6e:f2:65:ec:60:b2:65: 50:7f:cf:a1:50:4e:c5:58:a2:c8:91:b4:a4:d0:05: 6b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.188.0/22 194.147.219.0/24 IPv6: 2a12:67c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57505 208919 Signature Algorithm: sha256WithRSAEncryption 88:7c:41:25:1b:49:df:d9:85:d5:e1:81:c7:55:fd:b5:07:5b: 1e:f6:a3:36:2a:d0:13:a7:0a:1d:5f:eb:1a:bf:97:66:ff:cb: 6e:c9:5b:0a:5e:65:3c:6f:73:01:46:62:90:ce:e8:e9:89:fb: 72:8b:03:1b:84:34:80:3d:51:c1:58:75:b2:3d:65:8f:96:aa: 56:65:9c:95:28:ac:0a:f4:68:15:84:ab:1b:4f:54:66:2a:5b: 0c:88:96:44:7f:9f:f8:57:22:a8:62:66:30:dd:37:45:72:d5: 27:a9:1b:ec:e5:bd:76:cd:71:75:92:a4:95:e9:99:3c:bd:54: 2e:e2:0b:c9:ab:7d:bc:40:62:99:99:af:93:9a:2f:76:a6:6a: 1a:66:42:57:62:54:39:73:69:c0:7d:d3:d5:57:e4:fd:a3:d6: 0e:2c:91:95:f8:15:59:4b:8f:7d:34:94:e4:32:1f:e0:56:0b: d8:04:38:3e:35:4b:cb:c0:61:3b:33:49:7f:82:6d:5f:fc:49: f2:4e:dc:24:14:ea:80:6c:6e:6c:d4:62:56:8f:b1:4c:ce:94: ef:a6:7c:7c:03:04:03:2e:d6:b6:0c:49:ec:7f:d8:3b:76:94: f7:54:64:20:ea:b6:39:e9:95:a4:91:b6:6e:ff:37:cf:ce:20: 2e:36:4c:d7 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt87QWNj6qlUlpxMMxRdSyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWE1NWJmMjg4ODc1M2U0NDY3NWI2MWRkYTMwMzk0ZDkwMTU2YzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPDVom4hJYU6INy0/YZyv2q0knli bnY20zytAZJ5FObet8OeJYH24D36B3Fsk3lUzjU6wJHLmte8QOeCWUL5adSNa0l4 cJh11n0sMExf4rzkM9VbNRD9FMOEYnwF6xbEm2SFSSBMeTeHwJ/QXwe3qTcN2+Q7 vP2wzy1oeUfpvyxbJCt8VZkbWc9OGXPOT05UApfneBpeE7i8nVWU0BfKWq6sY7TJ xTqRjlLss3v3HVApEbINOpIifdi2Ygtnj6hbhjhxBizTdqTVhaDfE6ZOx3s2R22/ yiScg8CZoejLbwfw2NOgk6hXmG7yZexgsmVQf8+hUE7FWKLIkbSk0AVrJwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFKGlW/KIh1PkRnW2HdowOU2QFWwKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzJkYWIx OC03YmI3LTRhYTEtOThhZC0yN2M5ZDkxMTQyMzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMmRhYjE4 LTdiYjctNGFhMS05OGFkLTI3YzlkOTExNDIzOC8xL29hVmI4b2lIVS1SR2RiWWQy akE1VFpBVmJBby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLYq8AwQAwpPbMA0EAgACMAcDBQMqEmfAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDgoQIDAzAXMA0GCSqGSIb3DQEBCwUAA4IB AQCIfEElG0nf2YXV4YHHVf21B1se9qM2KtATpwodX+sav5dm/8tuyVsKXmU8b3MB RmKQzujpiftyiwMbhDSAPVHBWHWyPWWPlqpWZZyVKKwK9GgVhKsbT1RmKlsMiJZE f5/4VyKoYmYw3TdFctUnqRvs5b12zXF1kqSV6Zk8vVQu4gvJq328QGKZma+Tmi92 pmoaZkJXYlQ5c2nAfdPVV+T9o9YOLJGV+BVZS499NJTkMh/gVgvYBDg+NUvLwGE7 M0l/gm1f/EnyTtwkFOqAbG5s1GJWj7FMzpTvpnx8AwQDLta2DEnsf9g7dpT3VGQg 6rY56ZWkkbZu/zfPziAuNkzX -----END CERTIFICATE-----Generated at Sun Jan 25 18:24:30 2026 by rpki-client