This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer (raw, json) Hash identifier: ClBvLVfd4d+++ZCcmxgg3nedEigA8rM/VWjjF91LELg= Subject key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82FAEFA1574EB7DFDCA0418CB76A89 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49746 IP: 37.153.136.0/24 IP: 77.247.194.0/24 IP: 89.35.80.0/23 IP: 89.40.222.0/23 IP: 89.45.124.0/23 IP: 91.132.248.0/22 IP: 91.193.24.0/24 IP: 91.197.36.0/22 IP: 91.235.207.0/24 IP: 91.238.62.0/24 IP: 91.246.30.0/24 IP: 92.42.0.0/24 IP: 109.196.168.0/22 IP: 128.0.56.0/24 IP: 185.5.130.0/24 IP: 185.16.251.0/24 IP: 185.84.225.0/24 IP: 185.94.30.0/24 IP: 185.98.158.0/24 IP: 185.235.68.0 -- 185.235.70.255 IP: 185.240.136.0/22 IP: 185.245.244.0/23 IP: 185.249.0.0/22 IP: 192.144.24.0/22 IP: 193.33.105.0/24 IP: 193.39.88.0/22 IP: 193.176.99.0/24 IP: 193.228.12.0/22 IP: 193.239.176.0/24 IP: 194.32.82.0/24 IP: 194.48.255.0/24 IP: 194.61.80.0/24 IP: 194.61.82.0/23 IP: 194.76.32.0/22 IP: 194.106.206.0/24 IP: 194.169.202.0/24 IP: 195.8.46.0/24 IP: 195.35.100.0/24 IP: 195.189.156.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:fa:ef:a1:57:4e:b7:df:dc:a0:41:8c:b7:6a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:5f:d6:72:a8:57:37:91:64:cb:28:f6:7c: 80:64:a8:ca:2e:7f:0c:b0:75:08:9d:5e:09:82:0f: 6f:ec:12:a6:f5:b1:d6:25:e3:84:24:73:28:c5:07: 21:32:21:50:42:b4:08:dd:c1:42:dc:76:76:20:ac: 86:d5:85:87:66:09:a2:dc:85:52:bc:36:dd:c7:5f: 9f:b8:e4:0b:cf:2c:d5:f8:84:7a:b3:fe:c6:a3:43: 0b:76:53:23:6c:fb:5f:07:2b:9f:05:b3:de:6c:ae: b6:e6:54:52:b2:df:74:dd:68:ad:ae:81:a2:b0:dc: 8c:0d:c8:33:ae:75:6e:51:d7:00:8c:cb:0a:5d:7d: 84:e7:06:b1:df:ff:a0:6f:46:95:d8:bf:56:71:73: 17:7c:08:17:7a:1a:be:a8:9e:ad:62:22:cd:d6:53: 44:31:66:5f:7e:8a:4a:24:a1:be:17:6b:30:71:f6: 57:7b:47:16:b2:d2:79:ea:2f:18:30:52:85:2b:e0: 3c:1e:b7:d1:9e:68:9c:45:ef:03:3b:c9:a0:b4:9a: 55:22:92:e4:f9:40:ea:24:e7:3c:66:b3:63:81:a6: 63:75:41:2a:e0:9b:b5:bf:93:8e:07:d7:16:99:ec: f0:6f:99:81:1f:00:23:84:ce:40:dd:c3:82:d1:f1: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.136.0/24 77.247.194.0/24 89.35.80.0/23 89.40.222.0/23 89.45.124.0/23 91.132.248.0/22 91.193.24.0/24 91.197.36.0/22 91.235.207.0/24 91.238.62.0/24 91.246.30.0/24 92.42.0.0/24 109.196.168.0/22 128.0.56.0/24 185.5.130.0/24 185.16.251.0/24 185.84.225.0/24 185.94.30.0/24 185.98.158.0/24 185.235.68.0-185.235.70.255 185.240.136.0/22 185.245.244.0/23 185.249.0.0/22 192.144.24.0/22 193.33.105.0/24 193.39.88.0/22 193.176.99.0/24 193.228.12.0/22 193.239.176.0/24 194.32.82.0/24 194.48.255.0/24 194.61.80.0/24 194.61.82.0/23 194.76.32.0/22 194.106.206.0/24 194.169.202.0/24 195.8.46.0/24 195.35.100.0/24 195.189.156.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49746 Signature Algorithm: sha256WithRSAEncryption 8e:e7:06:66:8a:79:cb:be:df:7f:c3:4a:95:0c:bf:ef:b4:de: 71:d6:ac:10:47:7d:b5:70:f6:2b:bb:1a:12:d2:e4:92:d2:54: 47:f9:ec:4e:a7:e1:71:95:b6:45:b1:4b:65:2c:9d:4d:3b:e0: 52:76:c6:aa:21:ae:7a:13:d7:be:ce:b3:2e:28:a3:c6:ff:a2: 55:1c:ca:e0:51:86:56:86:f1:8f:4a:29:4c:d7:15:f1:98:61: a4:47:44:05:4a:d5:69:ad:10:ba:6d:ae:41:a8:67:ec:00:fb: 0d:50:69:72:2d:e0:d0:f2:21:dd:53:5f:95:eb:ac:4f:88:76: b1:d0:29:68:82:4d:c7:b1:f5:1e:0a:ab:85:cb:47:1d:4a:e3: 17:1d:dd:75:db:10:7f:14:1c:b5:03:42:b0:0b:b2:4a:df:bb: 61:5e:27:23:18:71:d2:21:41:e9:20:ad:25:2d:63:6f:83:a9: e0:f5:81:b3:da:50:1b:eb:68:28:d9:92:fb:c7:ca:57:ff:94: 57:bd:34:38:f4:cd:6b:5a:0f:21:e1:d2:ff:9c:9e:e1:42:e9: a7:b6:3f:07:62:c0:c7:50:78:81:54:1a:29:45:37:13:4b:95: 77:b2:f2:b2:06:db:61:ff:8c:23:eb:b1:91:d6:41:d1:b0:48: 4b:13:f3:ce -----BEGIN CERTIFICATE----- MIIGhjCCBW6gAwIBAgISAZt/gvrvoVdOt9/coEGMt2qJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGU4ODhhNzZlOTk4NTFiMDFmYjg2Y2VjNTM3ZDRkOGU2MTBkZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppxf1nKoVzeRZMso9nyAZKjKLn8M sHUInV4Jgg9v7BKm9bHWJeOEJHMoxQchMiFQQrQI3cFC3HZ2IKyG1YWHZgmi3IVS vDbdx1+fuOQLzyzV+IR6s/7Go0MLdlMjbPtfByufBbPebK625lRSst903WitroGi sNyMDcgzrnVuUdcAjMsKXX2E5wax3/+gb0aV2L9WcXMXfAgXehq+qJ6tYiLN1lNE MWZffopKJKG+F2swcfZXe0cWstJ56i8YMFKFK+A8HrfRnmicRe8DO8mgtJpVIpLk +UDqJOc8ZrNjgaZjdUEq4Ju1v5OOB9cWmezwb5mBHwAjhM5A3cOC0fEj3QIDAQAB o4IDkjCCA44wHQYDVR0OBBYEFEToiKdumYUbAfuGzsU31NjmEN4WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzgyZTJi YS00NDJjLTQyYjAtOTMxNS1iYzBkYmE5MzJiMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvODJlMmJh LTQ0MmMtNDJiMC05MzE1LWJjMGRiYTkzMmIzNS8xL1JPaUlwMjZaaFJzQi00Yk94 VGZVMk9ZUTNoWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBDwYIKwYB BQUHAQcBAf8Egf8wgfwwgfkEAgABMIHyAwQAJZmIAwQATffCAwQBWSNQAwQBWSje AwQBWS18AwQCW4T4AwQAW8EYAwQCW8UkAwQAW+vPAwQAW+4+AwQAW/YeAwQAXCoA AwQCbcSoAwQAgAA4AwQAuQWCAwQAuRD7AwQAuVThAwQAuV4eAwQAuWKeMAwDBAK5 60QDBAC560YDBAK58IgDBAG59fQDBAK5+QADBALAkBgDBADBIWkDBALBJ1gDBADB sGMDBALB5AwDBADB77ADBADCIFIDBADCMP8DBADCPVADBAHCPVIDBALCTCADBADC as4DBADCqcoDBADDCC4DBADDI2QDBADDvZwwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAMJSMA0GCSqGSIb3DQEBCwUAA4IBAQCO5wZminnLvt9/w0qVDL/vtN5x1qwQ R321cPYruxoS0uSS0lRH+exOp+FxlbZFsUtlLJ1NO+BSdsaqIa56E9e+zrMuKKPG /6JVHMrgUYZWhvGPSilM1xXxmGGkR0QFStVprRC6ba5BqGfsAPsNUGlyLeDQ8iHd U1+V66xPiHax0Clogk3HsfUeCquFy0cdSuMXHd112xB/FBy1A0KwC7JK37thXicj GHHSIUHpIK0lLWNvg6ng9YGz2lAb62go2ZL7x8pX/5RXvTQ49M1rWg8h4dL/nJ7h Qumntj8HYsDHUHiBVBopRTcTS5V3svKyBtth/4wj67GR1kHRsEhLE/PO -----END CERTIFICATE-----Generated at Mon Jan 26 18:45:12 2026 by rpki-client