Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/072bvUeZC8zDmqI0Q8sHOUBR9xE.cer
File: 072bvUeZC8zDmqI0Q8sHOUBR9xE.cer (raw, json)
Hash identifier: jHJkKr4Awv/4Vv0s76fGbAOVozAwUst8Tg7i8r1sEbc=
Subject key identifier: D3:BD:9B:BD:47:99:0B:CC:C3:9A:A2:34:43:CB:07:39:40:51:F7:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA46BAD1E1638100B6F5888B860AC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42336
AS: 210602
AS: 212381
IP: 87.239.224.0/21
IP: 89.46.116.0/22
IP: 91.245.160.0/20
IP: 94.177.100.0/22
IP: 94.177.140.0/22
IP: 109.107.133.0/24
IP: 176.121.24.0/21
IP: 185.203.40.0/22
IP: 193.33.118.0/23
IP: 195.128.164.0/23
IP: 2a11:ce40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:46:ba:d1:e1:63:81:00:b6:f5:88:8b:86:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3bd9bbd47990bccc39aa23443cb07394051f711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:72:22:44:56:9f:c9:1f:6f:25:ae:3e:08:
c7:50:1c:8a:7d:58:98:f6:ed:3d:0d:94:14:68:f0:
0e:d6:13:cd:3b:30:98:8b:67:5a:49:cd:4a:a5:92:
5d:45:bc:b6:6a:6a:0c:45:cf:df:11:30:b4:6e:73:
6c:22:04:b3:ee:89:5e:e7:14:4f:7a:15:9e:ab:3c:
76:00:f9:b0:90:03:17:f4:ad:2b:5d:cf:59:5b:ce:
8a:18:36:55:6b:b9:f4:dc:73:b1:a5:63:4e:ef:51:
7a:0a:ab:0e:5b:f3:b4:95:1e:c2:02:06:00:8f:a7:
2b:b0:cf:3d:27:05:9c:31:96:2a:34:e9:dc:b5:40:
ff:f9:4e:78:91:b7:c5:b9:ce:9d:74:a6:dd:1d:fd:
24:12:23:11:55:1c:67:3f:6c:d0:ec:46:84:d5:28:
21:0a:8c:59:f9:59:02:3c:dd:00:83:6b:a5:df:e3:
8e:a1:90:98:2a:94:0c:94:34:bc:7a:21:28:b0:b4:
10:4a:3f:38:22:14:cc:1f:a6:a9:76:29:44:98:0e:
f9:54:75:53:bd:72:01:0c:51:a6:e4:2a:83:f6:ba:
ca:79:4f:21:2f:d8:07:25:ca:bb:33:4b:c7:3d:d7:
ed:9a:66:b6:6c:75:2e:0e:1d:08:e7:ca:a6:b6:11:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:9B:BD:47:99:0B:CC:C3:9A:A2:34:43:CB:07:39:40:51:F7:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.224.0/21
89.46.116.0/22
91.245.160.0/20
94.177.100.0/22
94.177.140.0/22
109.107.133.0/24
176.121.24.0/21
185.203.40.0/22
193.33.118.0/23
195.128.164.0/23
IPv6:
2a11:ce40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42336
210602
212381
Signature Algorithm: sha256WithRSAEncryption
9b:fb:15:97:08:1e:8c:51:64:f4:ec:59:a0:63:22:a2:a5:20:
b1:b7:7c:9e:28:ef:00:f1:98:6c:a6:0e:a4:22:c2:3e:6b:78:
1f:0f:23:db:da:c2:82:56:f3:7b:40:e5:f3:b7:f2:a5:07:2a:
bc:98:88:89:02:c1:b0:34:51:2c:1e:e5:cd:1a:f6:de:62:e6:
3b:9f:67:04:d4:93:ef:8d:98:d5:80:8a:9c:42:a1:49:2f:94:
02:08:c6:0e:11:e8:00:8d:7e:6c:e2:0e:5b:64:6f:29:5b:d0:
da:9c:2f:e4:38:7c:c6:95:b4:07:d2:15:a8:96:49:91:75:d5:
ae:eb:26:22:fe:91:e2:2d:49:91:34:2c:68:80:c0:47:9a:70:
56:b5:ea:d1:d0:7a:eb:e3:6d:68:29:6b:7f:c7:f1:18:98:c0:
36:3b:7e:b5:fc:0c:8b:c2:02:c4:3d:21:f8:cf:b2:ce:8e:f9:
fa:90:e1:dd:48:cd:3d:1b:2d:4a:7f:fb:50:d4:aa:ce:a3:e6:
93:b4:32:27:d7:00:15:c8:a2:d3:7e:c6:50:e6:43:27:91:f0:
95:e7:26:a6:f0:a1:b7:50:90:b9:14:c6:f3:af:d2:7e:7c:03:
f4:ce:c4:9e:a7:59:2f:ad:5c:8f:57:3e:97:f1:72:27:d3:79:
4e:32:d3:13
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAZ8Y+ka60eFjgQC29YiLhgrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2JkOWJiZDQ3OTkwYmNjYzM5YWEyMzQ0M2NiMDczOTQwNTFmNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKZyIkRWn8kfbyWuPgjHUByKfViY
9u09DZQUaPAO1hPNOzCYi2daSc1KpZJdRby2amoMRc/fETC0bnNsIgSz7ole5xRP
ehWeqzx2APmwkAMX9K0rXc9ZW86KGDZVa7n03HOxpWNO71F6CqsOW/O0lR7CAgYA
j6crsM89JwWcMZYqNOnctUD/+U54kbfFuc6ddKbdHf0kEiMRVRxnP2zQ7EaE1Sgh
CoxZ+VkCPN0Ag2ul3+OOoZCYKpQMlDS8eiEosLQQSj84IhTMH6apdilEmA75VHVT
vXIBDFGm5CqD9rrKeU8hL9gHJcq7M0vHPdftmma2bHUuDh0I58qmthH+6QIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFNO9m71HmQvMw5qiNEPLBzlAUfcRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzgwOTBj
Mi04MTgwLTRmM2YtODE0Mi1hMjM4NTU4NzJiODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvODA5MGMy
LTgxODAtNGYzZi04MTQyLWEyMzg1NTg3MmI4Ni8xLzA3MmJ2VWVaQzh6RG1xSTBR
OHNIT1VCUjl4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF
BwEHAQH/BFUwUzBCBAIAATA8AwQDV+/gAwQCWS50AwQEW/WgAwQCXrFkAwQCXrGM
AwQAbWuFAwQDsHkYAwQCucsoAwQBwSF2AwQBw4CkMA0EAgACMAcDBQMqEc5AMCQG
CCsGAQUFBwEIAQH/BBUwE6ARMA8CAwClYAIDAzaqAgMDPZ0wDQYJKoZIhvcNAQEL
BQADggEBAJv7FZcIHoxRZPTsWaBjIqKlILG3fJ4o7wDxmGymDqQiwj5reB8PI9va
woJW83tA5fO38qUHKryYiIkCwbA0USwe5c0a9t5i5jufZwTUk++NmNWAipxCoUkv
lAIIxg4R6ACNfmziDltkbylb0NqcL+Q4fMaVtAfSFaiWSZF11a7rJiL+keItSZE0
LGiAwEeacFa16tHQeuvjbWgpa3/H8RiYwDY7frX8DIvCAsQ9IfjPss6O+fqQ4d1I
zT0bLUp/+1DUqs6j5pO0MifXABXIotN+xlDmQyeR8JXnJqbwobdQkLkUxvOv0n58
A/TOxJ6nWS+tXI9XPpfxcifTeU4y0xM=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:16 2026 by rpki-client