This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer File: oLqoCzEKSu7SwjPP54LE83mmYgA.cer (raw, json) Hash identifier: YCojVYn67YTgji9sft1eEc6XzOeyuYGpaWXTLIxbbuA= Subject key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5342239679AE3BC4B00D3B49EEE43 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213084 IP: 195.69.181.0 -- 195.69.183.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:34:22:39:67:9a:e3:bc:4b:00:d3:b4:9e:ee:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:f9:41:94:34:7c:cd:00:ee:17:39:c5:40: a4:a7:dd:7b:75:7b:ec:c9:1c:82:7a:6e:47:b8:2c: 76:d1:3b:3f:11:97:e0:e3:b5:9f:18:90:19:90:02: 37:3c:bb:4d:7e:6f:8d:cb:57:73:87:dc:1f:df:8a: 4a:fe:08:a8:83:2b:57:1d:08:ee:6e:8e:10:c8:bf: 13:c4:81:4c:1e:20:7e:9d:2f:20:7f:00:27:93:f4: 5f:67:dd:9d:cd:c4:9c:c7:93:95:f0:25:47:d6:df: ac:69:56:d3:5b:89:de:68:aa:e6:b9:c7:1e:d6:3d: 57:ae:cd:4f:cc:46:bd:59:81:f1:c4:8f:d8:65:98: 31:3e:0f:07:ca:99:e7:da:06:bd:e8:ba:01:f8:71: b2:9f:15:55:b2:a0:cc:34:8c:80:5a:61:22:51:c1: 1c:03:ca:4f:33:24:4f:41:1b:a9:f7:27:48:10:36: ee:b7:fb:03:06:81:69:15:06:85:12:85:c8:9b:48: 01:df:5a:74:fc:0d:f0:b1:c0:7f:f7:85:0d:4b:b5: 57:ee:58:b7:5f:d5:c2:83:62:f6:fa:46:79:69:c2: 01:ee:e1:47:df:76:4d:93:fe:18:5b:04:d4:76:1b: 6d:9a:9a:eb:2e:02:c2:ea:8b:f4:3c:b3:d6:88:ca: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.181.0-195.69.183.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213084 Signature Algorithm: sha256WithRSAEncryption 0b:64:14:d6:9c:ae:4a:69:45:13:21:4e:94:fd:bd:ad:b3:3e: f1:fd:c1:59:36:23:fa:e3:70:0d:9e:b0:b4:59:98:55:b9:ed: ba:07:5c:97:da:72:52:32:d9:e0:ff:33:2a:9a:17:98:86:72: ab:34:0e:9e:ba:1f:3a:79:d6:be:3c:c1:2a:b3:8f:7f:66:0f: 66:04:57:2e:7c:5e:c6:9b:cd:d2:97:fb:5e:b3:cc:cc:1c:2b: 13:0c:aa:94:3a:b0:ef:4e:34:a9:b4:6a:65:d5:74:7f:7d:3e: 49:6c:32:c1:bc:e3:b3:3f:b5:7e:51:61:c8:d2:59:28:33:53: 53:8e:d5:f7:b4:4e:46:46:c4:c8:bf:ca:24:1a:c3:3e:58:f5: 25:d3:b2:74:1a:63:cc:de:ee:fd:f6:3f:85:a8:e3:28:c2:cf: 2a:8b:63:f3:71:b4:43:06:fc:89:9c:35:2b:0b:62:4e:ca:87: d7:61:8b:ac:79:98:bd:f4:9c:70:58:df:b5:8c:96:b7:3a:53: 4b:82:18:2d:b1:86:e6:a0:b8:cf:2c:50:7f:88:5c:4c:c5:1f: fc:9e:d7:68:e3:c0:2f:f9:1f:00:c5:cc:99:86:06:12:36:ac: 22:a6:4d:2d:68:c1:d0:e1:7d:99:3c:30:05:2d:58:5a:cd:3a: 6d:ed:17:f5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt7pTQiOWea47xLANO0nu5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGJhYTgwYjMxMGE0YWVlZDJjMjMzY2ZlNzgyYzRmMzc5YTY2MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWL5QZQ0fM0A7hc5xUCkp917dXvs yRyCem5HuCx20Ts/EZfg47WfGJAZkAI3PLtNfm+Ny1dzh9wf34pK/giogytXHQju bo4QyL8TxIFMHiB+nS8gfwAnk/RfZ92dzcScx5OV8CVH1t+saVbTW4neaKrmucce 1j1Xrs1PzEa9WYHxxI/YZZgxPg8Hypnn2ga96LoB+HGynxVVsqDMNIyAWmEiUcEc A8pPMyRPQRup9ydIEDbut/sDBoFpFQaFEoXIm0gB31p0/A3wscB/94UNS7VX7li3 X9XCg2L2+kZ5acIB7uFH33ZNk/4YWwTUdhttmprrLgLC6ov0PLPWiMrrPQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFKC6qAsxCkru0sIzz+eCxPN5pmIAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzg4ODkx NS02OTg3LTQxMDItYWU0ZC0wMmQ1NDgxMmNjNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvODg4OTE1 LTY5ODctNDEwMi1hZTRkLTAyZDU0ODEyY2M2ZS8xL29McW9DekVLU3U3U3dqUFA1 NExFODNtbVlnQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBADDRbUDBAPDRbAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDA0BcMA0GCSqGSIb3DQEBCwUAA4IBAQALZBTWnK5KaUUTIU6U/b2t sz7x/cFZNiP643ANnrC0WZhVue26B1yX2nJSMtng/zMqmheYhnKrNA6euh86eda+ PMEqs49/Zg9mBFcufF7Gm83Sl/tes8zMHCsTDKqUOrDvTjSptGpl1XR/fT5JbDLB vOOzP7V+UWHI0lkoM1NTjtX3tE5GRsTIv8okGsM+WPUl07J0GmPM3u799j+FqOMo ws8qi2PzcbRDBvyJnDUrC2JOyofXYYuseZi99JxwWN+1jJa3OlNLghgtsYbmoLjP LFB/iFxMxR/8ntdo48Av+R8AxcyZhgYSNqwipk0taMHQ4X2ZPDAFLVhazTpt7Rf1 -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:38 2026 by rpki-client