This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
File:                     eJaox-m6CdLx1EhjZwviE_wMohA.cer (raw, json)
Hash identifier:          vXSA6XXUtLBH49IZE2ym0zTE7lk8uysjtKDo/os66X8=
Subject key identifier:   78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7758CF650E118CA1A6AAB5D8CA157501
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:17:47 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213719
                          IP: 103.143.173.0/24
                          IP: 2a14:e400::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:cf:65:0e:11:8c:a1:a6:aa:b5:d8:ca:15:75:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6e:28:cc:51:58:93:e2:b5:05:ae:57:c4:9b:
                    64:bb:82:9c:ae:8f:94:b6:c0:6b:d7:e7:01:cb:86:
                    71:cb:d3:be:0b:fd:56:bf:de:c3:1e:0e:99:ba:fe:
                    12:76:a8:2f:72:a3:e3:4a:fb:ac:6b:46:58:35:3f:
                    e9:d5:68:73:a1:6e:02:27:cf:38:5b:9b:d1:93:5b:
                    e4:64:69:9c:5b:39:0d:54:ae:6c:eb:45:17:be:92:
                    d0:2c:fe:9a:ef:0e:7a:b0:57:84:48:ed:72:b4:3f:
                    b0:3e:65:d7:b9:92:c9:1f:20:5b:3c:24:4b:e5:33:
                    57:57:71:69:73:58:24:68:23:fb:8d:32:e6:b9:03:
                    4c:b3:1d:2c:dd:15:7c:aa:02:fa:38:ec:a2:36:60:
                    83:8a:27:c3:03:39:4c:90:4b:fc:a1:18:0c:4d:93:
                    10:55:e3:12:5e:ac:04:4d:27:1f:e1:8c:bf:09:12:
                    98:20:3f:38:0d:c0:64:07:be:38:9b:70:58:81:b8:
                    ce:b9:63:35:e8:f0:a1:01:28:2e:19:69:11:90:d4:
                    82:af:0b:13:48:b0:60:d0:d9:4a:6f:81:0e:22:47:
                    2c:1b:e9:8f:ed:05:bb:60:c3:a8:4e:2c:5c:92:4f:
                    31:df:87:90:0f:62:27:f8:9d:b2:0c:7c:c8:b7:f1:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.173.0/24
                IPv6:
                  2a14:e400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213719

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:b7:d2:c6:72:71:aa:92:a2:22:26:8b:90:dc:3c:c6:4d:
         a6:f5:b8:b9:09:eb:65:5d:9c:1d:3a:f0:e3:6b:2e:34:ae:fa:
         cd:93:44:ea:5e:f5:6f:b7:26:ff:5a:c9:fe:fc:9d:9e:85:44:
         ca:61:40:c2:86:80:c7:6e:c3:88:da:74:70:af:6d:e5:67:bb:
         b6:6f:97:d9:81:a9:98:ff:91:9e:98:28:14:31:10:5a:ee:cf:
         63:0a:cb:dd:90:4e:53:93:13:2e:58:dc:1f:b7:84:81:4f:e2:
         09:70:ad:71:cd:01:86:a7:84:16:8d:e1:40:b2:77:0c:2b:06:
         20:33:71:e7:d6:92:55:3c:46:e6:e6:6b:8c:6b:a8:41:76:02:
         72:c4:f6:69:be:4d:68:02:4e:6d:40:38:df:9a:3c:f7:95:0a:
         2d:49:dd:3c:ef:87:33:97:d5:c4:23:5b:6d:89:98:c9:f3:a3:
         d1:6e:ed:93:9a:a7:b5:dd:8e:2b:4a:18:9e:a4:d3:07:47:ce:
         f8:53:b8:0d:77:08:e0:4f:cf:e4:a4:92:f1:1f:40:c0:47:70:
         18:5b:04:b8:08:5a:b0:d5:92:c0:5a:1e:4a:29:89:4a:18:14:
         0d:de:88:6a:d6:22:db:bd:d6:72:28:11:36:1f:4a:a3:0e:36:
         40:4d:98:c5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt3WM9lDhGMoaaqtdjKFXUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODk2YThjN2U5YmEwOWQyZjFkNDQ4NjM2NzBiZTIxM2ZjMGNhMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA924ozFFYk+K1Ba5XxJtku4Kcro+U
tsBr1+cBy4Zxy9O+C/1Wv97DHg6Zuv4SdqgvcqPjSvusa0ZYNT/p1WhzoW4CJ884
W5vRk1vkZGmcWzkNVK5s60UXvpLQLP6a7w56sFeESO1ytD+wPmXXuZLJHyBbPCRL
5TNXV3Fpc1gkaCP7jTLmuQNMsx0s3RV8qgL6OOyiNmCDiifDAzlMkEv8oRgMTZMQ
VeMSXqwETScf4Yy/CRKYID84DcBkB744m3BYgbjOuWM16PChASguGWkRkNSCrwsT
SLBg0NlKb4EOIkcsG+mP7QW7YMOoTixckk8x34eQD2In+J2yDHzIt/Hz2wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHiWqMfpugnS8dRIY2cL4hP8DKIQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzA5MGQ0
Mi1iNWY3LTRjZmUtYmQ2Yy02MTc4ZGJmZmY1NTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvMDkwZDQy
LWI1ZjctNGNmZS1iZDZjLTYxNzhkYmZmZjU1NS8xL2VKYW94LW02Q2RMeDFFaGpa
d3ZpRV93TW9oQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAZ4+tMA0EAgACMAcDBQMqFOQAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNC1zANBgkqhkiG9w0BAQsFAAOCAQEAa+G30sZycaqS
oiImi5DcPMZNpvW4uQnrZV2cHTrw42suNK76zZNE6l71b7cm/1rJ/vydnoVEymFA
woaAx27DiNp0cK9t5We7tm+X2YGpmP+RnpgoFDEQWu7PYwrL3ZBOU5MTLljcH7eE
gU/iCXCtcc0BhqeEFo3hQLJ3DCsGIDNx59aSVTxG5uZrjGuoQXYCcsT2ab5NaAJO
bUA435o895UKLUndPO+HM5fVxCNbbYmYyfOj0W7tk5qntd2OK0oYnqTTB0fO+FO4
DXcI4E/P5KSS8R9AwEdwGFsEuAhasNWSwFoeSimJShgUDd6IatYi273WcigRNh9K
ow42QE2YxQ==
-----END CERTIFICATE-----