This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer File: pAoIH7qPsz77RiWe-T9oeNcBUOs.cer (raw, json) Hash identifier: WscQn6yGClZ7l6aMe9t869tamXXImuLiHRGnJ/Du7JI= Subject key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8584163BD86AC63E18B0A8E137C5A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25238 IP: 195.234.204.0/22 IP: 2001:678:9a4::/48 IP: 2001:67c:2620::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:84:16:3b:d8:6a:c6:3e:18:b0:a8:e1:37:c5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a40a081fba8fb33efb46259ef93f6878d70150eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:42:ed:0c:41:c7:5d:6d:01:2e:a3:13:84: 17:5d:70:11:86:fc:25:49:f1:f7:f0:32:46:52:3c: fe:0e:73:9c:e6:a0:22:f3:af:ae:19:f0:eb:d1:78: 9b:4b:88:e4:ca:43:dc:ea:ee:59:91:80:b7:63:77: 5b:a1:72:ff:02:7b:8c:3b:be:63:95:be:d5:96:d7: 16:7c:27:f8:00:7b:c9:ae:24:14:91:f8:6c:a5:16: 4e:96:6b:70:09:bc:f9:71:8a:80:b1:e4:7a:94:ec: dd:4b:40:2b:9b:23:87:d0:d1:95:85:ab:eb:4f:cc: bb:9c:22:ee:3c:c5:c1:3a:5f:36:a1:17:65:a5:dd: 22:91:c3:a5:ee:ec:08:be:53:d0:06:0f:ea:55:37: 03:b8:47:ef:bf:85:43:4b:81:fd:c2:58:e6:25:1c: 3e:fc:10:4f:88:10:47:48:7d:24:0d:2a:40:a0:ae: 71:86:c3:ff:25:5c:fd:ac:26:db:11:b4:83:7e:e6: 13:0c:84:9e:2a:fa:95:5f:5c:28:5c:3c:ae:a4:33: bd:cc:d7:93:03:d7:76:96:16:dc:9f:9e:d2:4f:44: 60:0a:f7:d0:88:7a:43:18:98:8f:31:c6:25:88:78: a4:b4:c1:08:63:10:09:32:7b:6a:0d:cb:1c:0f:ff: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.204.0/22 IPv6: 2001:678:9a4::/48 2001:67c:2620::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25238 Signature Algorithm: sha256WithRSAEncryption 73:07:a8:d4:bf:fe:62:f5:38:17:d7:37:ad:81:20:bc:2f:b1: 8b:ea:84:29:e8:13:49:04:1f:dc:bd:33:88:fb:4c:62:c5:e0: 04:b8:6e:20:39:a3:18:96:83:8c:60:25:e5:b0:1f:aa:20:13: 3f:b9:93:20:b0:94:44:63:54:b5:e3:30:fd:a6:7e:95:fd:8f: 8a:f1:3f:2a:57:5f:a3:38:00:fa:e4:f4:d7:99:b2:d7:6f:7e: eb:4e:02:38:ac:68:4b:88:ad:8c:95:f5:cc:bc:6f:52:28:2a: 92:e9:92:34:10:e9:22:4e:5d:d4:80:fe:6d:e5:b2:0f:ab:d8: 10:13:a4:04:61:e7:82:ea:9b:7a:b5:af:72:c3:00:2a:16:ad: 21:0d:b6:1c:bf:d1:bc:2a:db:90:e7:26:d9:c6:a7:2f:ae:b1: 42:ff:89:01:99:10:e6:b8:42:17:00:ed:51:77:ad:4a:12:30: 2a:e8:cf:e7:31:e5:9e:97:10:94:69:10:00:6c:bb:4e:bd:9c: 74:4e:ae:4b:bb:80:aa:47:27:9f:8a:1a:e1:50:af:71:f8:eb: 64:02:ef:d3:9d:0d:85:d2:a1:8e:46:1c:2d:2d:bf:16:15:23: 0b:71:a5:30:f7:93:22:1a:43:2e:8f:ac:95:16:32:4e:21:2d: 65:ed:38:a5 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt/hYQWO9hqxj4YsKjhN8WlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDBhMDgxZmJhOGZiMzNlZmI0NjI1OWVmOTNmNjg3OGQ3MDE1MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrhC7QxBx11tAS6jE4QXXXARhvwl SfH38DJGUjz+DnOc5qAi86+uGfDr0XibS4jkykPc6u5ZkYC3Y3dboXL/AnuMO75j lb7VltcWfCf4AHvJriQUkfhspRZOlmtwCbz5cYqAseR6lOzdS0ArmyOH0NGVhavr T8y7nCLuPMXBOl82oRdlpd0ikcOl7uwIvlPQBg/qVTcDuEfvv4VDS4H9wljmJRw+ /BBPiBBHSH0kDSpAoK5xhsP/JVz9rCbbEbSDfuYTDISeKvqVX1woXDyupDO9zNeT A9d2lhbcn57ST0RgCvfQiHpDGJiPMcYliHiktMEIYxAJMntqDcscD//UUQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFKQKCB+6j7M++0Ylnvk/aHjXAVDrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2NiMjdh MC05NGQyLTQ5YWEtODVlYS1hZTkxZTQ2NjJkOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvY2IyN2Ew LTk0ZDItNDlhYS04NWVhLWFlOTFlNDY2MmQ5My8xL3BBb0lIN3FQc3o3N1JpV2Ut VDlvZU5jQlVPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAMBAIAATAGAwQCw+rMMBgEAgACMBIDBwAgAQZ4CaQDBwAgAQZ8 JiAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICYpYwDQYJKoZIhvcNAQELBQADggEB AHMHqNS//mL1OBfXN62BILwvsYvqhCnoE0kEH9y9M4j7TGLF4AS4biA5oxiWg4xg JeWwH6ogEz+5kyCwlERjVLXjMP2mfpX9j4rxPypXX6M4APrk9NeZstdvfutOAjis aEuIrYyV9cy8b1IoKpLpkjQQ6SJOXdSA/m3lsg+r2BATpARh54Lqm3q1r3LDACoW rSENthy/0bwq25DnJtnGpy+usUL/iQGZEOa4QhcA7VF3rUoSMCroz+cx5Z6XEJRp EABsu069nHROrku7gKpHJ5+KGuFQr3H462QC79OdDYXSoY5GHC0tvxYVIwtxpTD3 kyIaQy6PrJUWMk4hLWXtOKU= -----END CERTIFICATE-----Generated at Tue Jan 20 15:38:35 2026 by rpki-client