This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer
File:                     aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer (raw, json)
Hash identifier:          QJQTP4LBvbHDouBG/f+xkSjQZWLT7bZQcgw1sfAMf6c=
Subject key identifier:   69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F15912611E587304891546DFCA198A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:21:18 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 205073
                          IP: 185.231.0.0/22
                          IP: 2a0d:b300::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:91:26:11:e5:87:30:48:91:54:6d:fc:a1:98:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:21:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=695dce5e37a862538a0f66883de206ffb7c93b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:5c:61:67:98:39:a4:1a:f6:fb:1a:35:47:
                    8e:21:eb:3c:0e:ce:b6:61:0d:33:dd:a1:37:98:bd:
                    05:1e:44:55:1c:cc:ae:e2:85:41:ad:63:a1:88:25:
                    4f:0e:6b:1d:c7:ea:36:c1:0f:98:e4:9b:1a:36:9b:
                    72:46:5b:80:97:2c:33:1d:4d:88:59:56:42:6e:1f:
                    05:79:fc:cf:fa:ba:70:6b:06:5d:0c:61:28:85:ce:
                    02:27:87:08:8d:2c:82:64:8e:16:3a:3b:ee:2d:d1:
                    c6:f9:24:62:39:7c:82:1d:77:22:c6:a6:24:96:ae:
                    02:a3:19:37:b0:95:b4:61:1d:9a:41:19:37:91:df:
                    8a:23:00:d6:a5:c6:68:f7:a3:19:84:da:dd:1e:c5:
                    0d:6b:95:7a:e8:f6:e0:f0:b6:7f:e2:98:ca:79:04:
                    79:72:68:9d:55:64:84:8d:c1:7e:96:cd:4b:1a:d6:
                    9b:60:8e:1a:50:2c:b1:a3:ab:1c:ed:5f:32:3e:b8:
                    45:c3:ea:9e:9f:aa:0f:d5:2d:7f:53:3b:60:26:5c:
                    c7:a5:f3:85:49:56:eb:ef:b0:b1:65:98:d1:9d:c0:
                    0e:5f:56:40:39:05:4c:3d:fa:d0:b5:3c:e9:b2:8b:
                    4f:23:67:7a:bf:68:e0:17:33:0e:c6:42:be:18:7f:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.0.0/22
                IPv6:
                  2a0d:b300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205073

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:7a:fc:bf:09:6f:a4:34:57:58:0d:8e:7f:72:af:0f:dc:
         44:58:a9:67:8b:5c:0e:3b:bd:7e:d3:de:b2:2c:61:9d:a0:b2:
         9b:49:95:12:14:72:3a:a6:25:ad:5d:05:33:d3:78:38:01:40:
         0a:a8:2c:55:24:7f:38:d2:5c:68:62:cf:04:87:91:1d:ee:4b:
         7b:46:4c:8b:5a:de:9d:6b:a5:12:21:83:98:e7:d3:b0:b4:09:
         13:6f:46:69:83:d4:7b:77:ef:b0:a0:91:9c:28:94:ba:0f:6b:
         b5:f5:e4:ff:7a:30:99:37:43:9b:81:e3:5e:0c:7a:5f:4e:72:
         5b:ff:e0:dc:96:4c:7c:52:e1:88:46:91:bd:38:2e:5e:66:54:
         de:66:77:d8:17:49:79:4d:23:1d:fc:a8:8a:9c:48:8f:a5:29:
         a6:62:0b:fe:fd:4b:53:d9:74:be:ef:26:77:0b:26:c9:c9:37:
         a0:27:1f:68:f7:38:db:69:74:f1:a7:c6:32:d7:48:2c:77:fd:
         a8:fe:4c:c8:e1:3d:ea:28:1e:b5:4e:bd:ea:06:08:ec:8e:31:
         3c:cf:b6:86:9c:d9:94:0f:5d:8d:f3:da:a8:e5:12:63:c4:6c:
         19:8a:e4:af:67:01:b9:35:d7:61:3a:a0:ee:42:ea:f2:fe:5e:
         7c:fe:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----