This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer File: oeqN4xzspVgDzzrxTUpyea6ERtA.cer (raw, json) Hash identifier: feS2MYOnm9X0+Rauol892ewVq9zHxmtWNVyZTzDslIc= Subject key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B05DA2EAEA194A67DA030BD9C84BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206492 IP: 5.154.170.0/24 IP: 45.150.248.0/22 IP: 185.185.32.0/22 IP: 194.148.52.0/22 IP: 2a0b:4d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:05:da:2e:ae:a1:94:a6:7d:a0:30:bd:9c:84:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:d9:5b:eb:0e:16:dc:43:6d:74:8d:0f:16: 54:1a:13:95:3e:0d:4b:f4:4e:f6:58:10:58:26:d2: e6:75:31:23:04:90:33:91:a2:7e:b4:9f:e6:b3:58: bd:e4:e7:a2:02:93:94:18:65:74:ea:29:7a:1a:62: 36:58:c1:c9:e1:39:25:6e:5b:28:ac:f8:c6:43:c0: b9:bf:37:5a:5a:e0:6a:1d:a3:f0:9f:51:c3:99:94: b2:14:9d:ad:e2:20:a3:38:45:a4:28:3d:d3:65:40: c3:cd:a7:3e:17:8d:fc:e7:6b:47:19:af:46:32:66: 79:5f:70:72:d7:c0:98:97:f1:16:ab:a5:45:f5:e5: 9a:fc:a3:37:b7:81:77:f5:9f:33:7d:d2:74:a1:48: 50:e4:4b:27:7f:ae:09:bd:ef:f3:bb:6a:72:e0:c4: e1:bb:89:84:91:ad:2f:9f:23:d4:b0:c3:9c:ad:13: 72:20:57:ec:b0:d8:20:45:ff:a2:2f:04:cb:75:1f: c5:e0:38:3c:db:0c:13:20:20:09:f1:8e:ce:14:7d: 6d:c6:2e:57:fa:5c:d4:67:c5:f8:06:99:21:44:c3: 1f:3e:e2:f8:49:24:08:3c:06:6f:92:52:3c:72:64: 32:f6:42:66:3f:9c:0f:89:12:ed:39:a6:28:c3:af: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.170.0/24 45.150.248.0/22 185.185.32.0/22 194.148.52.0/22 IPv6: 2a0b:4d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206492 Signature Algorithm: sha256WithRSAEncryption 6c:3a:48:fb:fa:b9:b4:0f:25:43:fc:51:20:c6:ba:39:04:5b: 2b:7d:75:9c:75:1b:f1:d6:f2:9a:59:4b:28:9c:57:ad:36:62: e1:40:57:3a:52:10:37:42:c5:5c:f1:43:8c:51:bc:1f:1d:64: c8:3a:75:9f:0e:68:84:78:87:21:65:7c:c9:85:93:64:d7:28: 2b:47:08:a6:fb:9f:e3:63:e7:95:22:e4:b2:70:6f:b8:46:7b: 78:fc:6a:f6:ac:86:76:b4:22:71:f4:e7:42:39:95:e3:6d:4c: 68:8b:b8:aa:15:d5:19:15:b3:79:e3:c3:3a:30:bf:4a:4f:61: bc:7d:2a:cd:7b:3c:b3:05:ae:5b:b7:56:0c:7d:17:16:5a:cb: bf:4c:2c:de:4a:02:53:27:9d:c6:ee:19:5a:67:12:fa:ad:c3: 93:59:57:c5:bd:22:65:35:0d:47:de:07:0e:52:0e:07:bd:bd: b6:d5:e1:fe:b3:e2:c7:c3:56:3c:09:6d:a3:c0:15:69:7e:3b: 79:d6:7f:17:06:2d:c8:0f:ee:df:8f:cd:b0:c6:b0:9b:11:ba: 83:9f:8c:fd:b5:4f:5b:e3:b0:f2:3f:0c:78:e2:4a:33:d2:08: d2:57:4a:30:8d:cd:ad:35:31:ec:22:fe:31:19:97:ac:4f:26: 1b:17:3f:72 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt6WwXaLq6hlKZ9oDC9nIS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWVhOGRlMzFjZWNhNTU4MDNjZjNhZjE0ZDRhNzI3OWFlODQ0NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBfZW+sOFtxDbXSNDxZUGhOVPg1L 9E72WBBYJtLmdTEjBJAzkaJ+tJ/ms1i95OeiApOUGGV06il6GmI2WMHJ4Tklblso rPjGQ8C5vzdaWuBqHaPwn1HDmZSyFJ2t4iCjOEWkKD3TZUDDzac+F43852tHGa9G MmZ5X3By18CYl/EWq6VF9eWa/KM3t4F39Z8zfdJ0oUhQ5Esnf64Jve/zu2py4MTh u4mEka0vnyPUsMOcrRNyIFfssNggRf+iLwTLdR/F4Dg82wwTICAJ8Y7OFH1txi5X +lzUZ8X4BpkhRMMfPuL4SSQIPAZvklI8cmQy9kJmP5wPiRLtOaYow69mUQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFKHqjeMc7KVYA8868U1KcnmuhEbQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2NhOTlk OC04NTI3LTQ1YjgtYWY2YS03NjUyNjJmMjllYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvY2E5OWQ4 LTg1MjctNDViOC1hZjZhLTc2NTI2MmYyOWVhZi8xL29lcU40eHpzcFZnRHp6cnhU VXB5ZWE2RVJ0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQABZqqAwQCLZb4AwQCubkgAwQCwpQ0MA0EAgAC MAcDBQMqC02AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmnDANBgkqhkiG9w0B AQsFAAOCAQEAbDpI+/q5tA8lQ/xRIMa6OQRbK311nHUb8dbymllLKJxXrTZi4UBX OlIQN0LFXPFDjFG8Hx1kyDp1nw5ohHiHIWV8yYWTZNcoK0cIpvuf42PnlSLksnBv uEZ7ePxq9qyGdrQicfTnQjmV421MaIu4qhXVGRWzeePDOjC/Sk9hvH0qzXs8swWu W7dWDH0XFlrLv0ws3koCUyedxu4ZWmcS+q3Dk1lXxb0iZTUNR94HDlIOB729ttXh /rPix8NWPAlto8AVaX47edZ/FwYtyA/u34/NsMawmxG6g5+M/bVPW+Ow8j8MeOJK M9II0ldKMI3NrTUx7CL+MRmXrE8mGxc/cg== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:02 2026 by rpki-client