This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer File: qQ2awu8R1UaTddbebGv3IRKeO3E.cer (raw, json) Hash identifier: yNaijlAmaHBUlxqC4tRcGwXEezwjnq2eSWNBPES2BdU= Subject key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C0C35DD5B1ED76BE9CE136F5A859 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198221 IP: 193.168.54.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c0:c3:5d:d5:b1:ed:76:be:9c:e1:36:f5:a8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8f:cf:2a:93:ec:2a:0f:b7:d8:45:97:6e:6f: c2:7d:9e:af:e1:c9:40:ce:a9:24:a7:51:ec:d3:45: 1b:d5:65:b8:a1:18:26:e8:e4:e1:00:ec:7f:40:56: db:43:aa:21:e3:91:c5:07:84:99:82:cc:de:ec:6f: d2:b9:3d:52:89:3d:5a:12:85:4a:c4:7e:8d:96:77: 2c:1e:38:ea:52:cf:90:96:ac:1a:b4:dc:7f:7e:f9: 1b:87:85:0d:75:64:0d:9a:fa:b2:de:c5:10:18:1b: 17:37:1e:22:9d:e8:58:ef:b2:90:26:29:39:a8:45: 4c:1d:da:49:e7:e9:13:6a:ab:28:b6:b0:5b:15:b7: 84:79:d7:4b:74:51:c1:10:d1:7f:d1:09:4e:28:fa: f5:0e:01:2a:6a:b5:51:5e:1b:7f:2e:0c:f0:08:e2: 60:cb:49:86:dd:97:72:ef:d6:d5:d8:44:cb:d5:66: 23:9e:7c:d7:53:d3:bc:58:8e:7f:9b:14:86:fe:93: e6:88:fe:74:4c:f6:e0:5c:68:15:d2:8d:dc:ca:a2: 17:6c:37:5c:c3:d6:ac:c9:b8:c0:d7:88:58:a8:9b: 6f:8c:ee:2d:5d:df:7d:50:5e:2e:81:d1:4b:21:aa: 35:60:8c:19:29:7c:39:88:d0:cd:cc:ba:d8:55:10: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.54.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198221 Signature Algorithm: sha256WithRSAEncryption 0b:8b:01:94:9f:d4:8d:5c:f2:a6:d1:29:57:56:58:9f:91:63: 43:80:de:79:8a:07:00:ee:e5:04:4f:3a:3c:f6:d8:12:de:bd: 2a:81:d3:63:38:0b:5d:05:16:11:b6:8c:6d:2c:3a:b4:af:66: 60:a3:ee:3e:ff:fa:cc:f0:dc:2a:63:b9:7c:1b:3b:9b:88:f3: 51:98:c1:fa:e1:4d:49:3b:2a:a9:17:fd:f4:2c:c8:19:12:03: 1b:34:2b:b5:73:83:82:03:f8:6c:67:d0:2a:32:f4:68:d3:29: 91:f1:84:3e:45:97:29:32:5f:6b:e2:3b:50:1a:74:f1:4c:dd: 52:23:d5:52:e0:41:56:73:23:e2:8d:a5:6a:17:24:04:7f:99: 30:33:79:af:91:40:d5:96:0c:fb:93:8d:08:6c:03:6e:10:e8: 91:ad:c3:4c:45:81:84:39:0b:0c:29:97:3e:53:50:82:e2:62: 23:1d:57:23:2d:69:67:0b:53:9e:67:60:74:08:18:81:ae:56: 00:f9:09:c6:fc:d2:c1:07:84:37:0f:86:bc:12:11:e9:c0:13: 02:77:fc:01:ca:46:64:4b:a6:e0:9e:e5:db:ca:7e:ef:f8:2b: 6a:69:2f:e3:1c:a4:b8:08:8a:f7:f8:cf:77:c7:c1:d0:5f:86: 02:01:b4:2d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NMDDXdWx7Xa+nOE29ahZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTBkOWFjMmVmMTFkNTQ2OTM3NWQ2ZGU2YzZiZjcyMTEyOWUzYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y/PKpPsKg+32EWXbm/CfZ6v4clA zqkkp1Hs00Ub1WW4oRgm6OThAOx/QFbbQ6oh45HFB4SZgsze7G/SuT1SiT1aEoVK xH6NlncsHjjqUs+QlqwatNx/fvkbh4UNdWQNmvqy3sUQGBsXNx4inehY77KQJik5 qEVMHdpJ5+kTaqsotrBbFbeEeddLdFHBENF/0QlOKPr1DgEqarVRXht/LgzwCOJg y0mG3Zdy79bV2ETL1WYjnnzXU9O8WI5/mxSG/pPmiP50TPbgXGgV0o3cyqIXbDdc w9asybjA14hYqJtvjO4tXd99UF4ugdFLIao1YIwZKXw5iNDNzLrYVRAWWQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKkNmsLvEdVGk3XW3mxr9yESnjtxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzU5YzI0 ZS1hMjFmLTQ2YjItOWVhMS1iM2E2NzA3ZWFkMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNTljMjRl LWEyMWYtNDZiMi05ZWExLWIzYTY3MDdlYWQwNC8xL3FRMmF3dThSMVVhVGRkYmVi R3YzSVJLZU8zRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwag2MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMGTTANBgkqhkiG9w0BAQsFAAOCAQEAC4sBlJ/UjVzyptEpV1ZYn5FjQ4DeeYoH AO7lBE86PPbYEt69KoHTYzgLXQUWEbaMbSw6tK9mYKPuPv/6zPDcKmO5fBs7m4jz UZjB+uFNSTsqqRf99CzIGRIDGzQrtXODggP4bGfQKjL0aNMpkfGEPkWXKTJfa+I7 UBp08UzdUiPVUuBBVnMj4o2lahckBH+ZMDN5r5FA1ZYM+5ONCGwDbhDoka3DTEWB hDkLDCmXPlNQguJiIx1XIy1pZwtTnmdgdAgYga5WAPkJxvzSwQeENw+GvBIR6cAT Anf8AcpGZEum4J7l28p+7/gramkv4xykuAiK9/jPd8fB0F+GAgG0LQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:48 2026 by rpki-client