This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer File: roOCT9wp6-SsKGygGETfhtTXXsA.cer (raw, json) Hash identifier: b49+KmOEkikZxnaaNDTp+orPJekt0+Hsp4JxxDPTQ2Y= Subject key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB450E8475F4999ACFB22BDFB04FCA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213804 IP: 144.86.188.0/24 IP: 2001:67c:1354::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:45:0e:84:75:f4:99:9a:cf:b2:2b:df:b0:4f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:70:ca:4e:b7:52:fa:a2:29:c2:e0:27:ba: b6:fb:ed:b0:76:70:3c:50:00:4b:ee:e9:46:a5:12: 33:c6:9c:b7:59:6c:22:9a:d7:95:76:98:b5:81:f2: 48:7f:aa:d0:88:a1:5e:06:e1:a6:25:ba:0c:68:ef: 18:6e:a4:7a:28:fc:b8:fc:2b:74:ad:35:a4:f1:67: 8b:1b:e6:1e:c4:79:e2:d8:f2:cb:f4:82:ba:f8:74: 2e:89:25:d8:4d:b8:45:43:4b:c6:1d:01:db:b4:4e: b5:54:d4:6d:2b:77:89:cf:76:46:28:ea:04:77:0c: ab:9c:2c:17:58:5d:a3:ee:f8:ff:5b:73:d9:19:62: 9f:34:84:ec:81:f7:b3:9f:43:1d:fb:0c:cc:6f:e6: 3f:42:c1:18:db:ab:76:1f:4d:41:e5:dd:cc:be:dc: 52:d8:39:35:82:3a:4b:76:d7:34:a9:f4:b4:cf:dc: 39:c7:ee:d2:25:75:13:d6:75:9c:81:cb:95:2f:82: b9:68:7b:55:88:7f:f1:90:19:9d:b2:58:f5:21:3f: 1e:01:bb:80:d2:05:ff:a3:55:77:b1:90:78:f8:2b: 63:4f:39:a5:ac:5f:38:79:61:83:36:5f:07:31:a2: e2:92:b9:ff:8e:f2:34:f2:0b:d4:d7:96:9c:f8:a7: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.86.188.0/24 IPv6: 2001:67c:1354::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213804 Signature Algorithm: sha256WithRSAEncryption 95:28:0c:05:a3:d7:c5:0f:cf:a1:99:f8:86:90:8c:05:09:4e: 0d:9c:a0:53:33:25:83:96:20:0f:f9:9c:84:08:64:88:b1:3c: 86:3a:19:4b:22:d0:50:27:3c:2d:51:94:3f:18:8a:b1:77:23: 61:ae:8e:a5:3f:8f:ec:f3:64:7f:ad:2e:9f:db:03:bd:89:06: 7f:8f:80:d1:75:e9:15:84:70:b1:98:40:96:9a:15:2d:7f:ea: 08:aa:f5:de:79:df:e2:d6:69:95:b5:0d:03:6d:a5:33:06:fa: cb:b8:de:a0:e1:80:a2:fb:51:02:0c:ed:37:1d:f4:4f:28:90: 9a:80:ea:7c:c4:e5:2d:c0:44:f2:1e:b0:f8:1f:10:79:56:01: 51:1d:96:ca:47:9c:7e:e0:5d:d0:6e:f2:9a:b7:ae:54:0c:63: 70:98:8e:4f:4f:08:91:92:15:3a:16:45:a1:5e:dc:09:17:5c: 8d:b3:31:cb:61:82:bf:51:1a:14:cd:c4:56:a3:0e:92:96:ae: f7:96:2d:3b:66:fe:5f:98:40:4a:8f:c7:d0:a3:54:83:95:fe: 90:c1:73:91:46:9c:a8:fb:5e:64:58:35:b3:b7:44:f2:21:d5: 33:b0:7b:31:87:6b:48:72:cb:36:f4:d5:f9:79:ee:76:7b:2d: 37:a8:e0:ce -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt260UOhHX0mZrPsivfsE/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTgzODI0ZmRjMjllYmU0YWMyODZjYTAxODQ0ZGY4NmQ0ZDc1ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOtwyk63UvqiKcLgJ7q2++2wdnA8 UABL7ulGpRIzxpy3WWwimteVdpi1gfJIf6rQiKFeBuGmJboMaO8YbqR6KPy4/Ct0 rTWk8WeLG+YexHni2PLL9IK6+HQuiSXYTbhFQ0vGHQHbtE61VNRtK3eJz3ZGKOoE dwyrnCwXWF2j7vj/W3PZGWKfNITsgfezn0Md+wzMb+Y/QsEY26t2H01B5d3MvtxS 2Dk1gjpLdtc0qfS0z9w5x+7SJXUT1nWcgcuVL4K5aHtViH/xkBmdslj1IT8eAbuA 0gX/o1V3sZB4+CtjTzmlrF84eWGDNl8HMaLikrn/jvI08gvU15ac+KdeRwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFK6Dgk/cKevkrChsoBhE34bU117AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzcxNzRl ZS0zMDc2LTQ5NmMtYjI1OS05NzAwNTQ2YjU3MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNzE3NGVl LTMwNzYtNDk2Yy1iMjU5LTk3MDA1NDZiNTcxMS8xL3JvT0NUOXdwNi1Tc0tHeWdH RVRmaHRUWFhzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAkFa8MA8EAgACMAkDBwAgAQZ8E1QwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDA0MsMA0GCSqGSIb3DQEBCwUAA4IBAQCVKAwFo9fF D8+hmfiGkIwFCU4NnKBTMyWDliAP+ZyECGSIsTyGOhlLItBQJzwtUZQ/GIqxdyNh ro6lP4/s82R/rS6f2wO9iQZ/j4DRdekVhHCxmECWmhUtf+oIqvXeed/i1mmVtQ0D baUzBvrLuN6g4YCi+1ECDO03HfRPKJCagOp8xOUtwETyHrD4HxB5VgFRHZbKR5x+ 4F3QbvKat65UDGNwmI5PTwiRkhU6FkWhXtwJF1yNszHLYYK/URoUzcRWow6Slq73 li07Zv5fmEBKj8fQo1SDlf6QwXORRpyo+15kWDWzt0TyIdUzsHsxh2tIcss29NX5 ee52ey03qODO -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:57 2026 by rpki-client