Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer
File: 0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer (raw, json)
Hash identifier: z1j9y7afUMbO6bte85EmWhYTyPMfCSsSFhpLxgcUeYI=
Subject key identifier: D3:37:3D:1D:C6:14:8C:B2:70:95:08:76:AB:AF:D7:40:1D:43:32:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F177EFC42CC0DDBE7C815E5C90F2CF41E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 07:47:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 196902
IP: 193.105.48.0/24
IP: 2001:67c:f6c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:7e:fc:42:cc:0d:db:e7:c8:15:e5:c9:0f:2c:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 07:47:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3373d1dc6148cb270950876abafd7401d4332b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:85:db:ce:15:29:c6:d8:6b:f7:b8:45:da:
24:c8:45:57:cc:4b:01:07:70:60:0d:e1:68:33:38:
dd:b8:4d:6f:d5:04:f0:03:d3:65:05:2c:a8:bc:61:
5f:67:1d:45:b5:76:91:d1:57:fa:1c:fb:41:89:5b:
10:9d:15:c3:05:a3:da:86:c5:6c:04:cb:19:19:0b:
62:ae:88:b7:20:c2:e8:d3:bd:0a:f1:6e:be:0c:ba:
04:be:f2:d9:a6:ac:c6:ac:97:ea:a1:49:f8:20:59:
cf:ed:f0:28:4b:68:64:25:55:55:de:d4:d8:a2:86:
e8:32:e6:d2:c8:68:f2:f0:5b:ff:70:2b:ba:fb:05:
6c:34:00:bc:88:94:67:74:e5:bf:a0:70:68:7b:33:
02:00:c9:3d:5c:0f:ba:07:4f:7a:ce:45:1c:76:f8:
ee:89:8d:26:09:ff:9e:32:6d:8b:53:cb:00:12:a7:
c9:99:45:47:19:c2:6f:01:1b:30:37:29:27:33:30:
16:4c:b9:bd:5f:15:be:3b:4f:e8:4c:17:d9:c5:b4:
8c:db:35:e3:76:7a:e3:2d:2a:6a:c8:c2:b5:8a:35:
f3:d6:61:dd:7f:2f:e0:cc:45:74:fc:7e:aa:35:82:
d4:0b:4e:db:d7:53:37:84:78:44:fa:e6:92:f3:c7:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:37:3D:1D:C6:14:8C:B2:70:95:08:76:AB:AF:D7:40:1D:43:32:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.48.0/24
IPv6:
2001:67c:f6c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196902
Signature Algorithm: sha256WithRSAEncryption
35:c0:c9:6a:1c:a7:86:17:6f:5e:f5:7a:ef:23:65:d5:e9:7e:
db:61:aa:65:d1:b7:52:dc:b5:81:6a:16:b0:10:87:7c:f1:ae:
5f:5f:2c:1e:5b:cb:73:02:8d:6c:33:bb:91:54:7e:80:95:19:
9e:79:ec:40:ee:63:11:c0:e2:61:5a:27:35:b5:51:9a:35:74:
67:68:e7:72:94:77:d9:60:da:2e:eb:25:67:d6:78:2e:7b:90:
c9:0b:67:83:00:4d:65:75:b1:65:96:8b:6f:23:ca:fb:26:ea:
03:ae:47:c4:0f:7f:06:7f:9d:07:ed:68:e5:cb:c7:44:c6:d0:
5e:ae:5a:51:79:0e:d5:24:73:45:bb:b2:f3:4c:57:d7:6f:0f:
c5:fc:31:a6:ca:db:d2:db:58:b7:00:aa:c1:39:12:1c:90:14:
a5:9c:9c:e9:7a:55:0f:2c:01:87:09:c8:86:af:5f:c3:80:b5:
3c:0f:78:3f:32:36:ae:78:67:f8:56:bb:6b:93:92:cb:e6:88:
01:c1:ad:af:98:42:c8:05:e8:ea:15:f1:17:8e:df:d2:fa:79:
d7:b4:ae:1d:31:c8:2b:65:82:45:47:81:26:e4:29:9b:1a:92:
d5:8b:fa:97:35:f4:e9:61:50:55:5e:b2:50:c5:6c:17:37:08:
2c:49:f8:05
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZ8XfvxCzA3b58gV5ckPLPQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMDc0NzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzM3M2QxZGM2MTQ4Y2IyNzA5NTA4NzZhYmFmZDc0MDFkNDMzMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qqF284VKcbYa/e4RdokyEVXzEsB
B3BgDeFoMzjduE1v1QTwA9NlBSyovGFfZx1FtXaR0Vf6HPtBiVsQnRXDBaPahsVs
BMsZGQtiroi3IMLo070K8W6+DLoEvvLZpqzGrJfqoUn4IFnP7fAoS2hkJVVV3tTY
ooboMubSyGjy8Fv/cCu6+wVsNAC8iJRndOW/oHBoezMCAMk9XA+6B096zkUcdvju
iY0mCf+eMm2LU8sAEqfJmUVHGcJvARswNyknMzAWTLm9XxW+O0/oTBfZxbSM2zXj
dnrjLSpqyMK1ijXz1mHdfy/gzEV0/H6qNYLUC07b11M3hHhE+uaS88dBEwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFNM3PR3GFIyycJUIdquv10AdQzKwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzM3OGQy
OC01OTRlLTRhMGQtODk4Yi1jNzQwMDcwOWE4ZGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvMzc4ZDI4
LTU5NGUtNGEwZC04OThiLWM3NDAwNzA5YThkZC8xLzB6YzlIY1lVakxKd2xRaDJx
Nl9YUUIxRE1yQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAwWkwMA8EAgACMAkDBwAgAQZ8D2wwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAwEmMA0GCSqGSIb3DQEBCwUAA4IBAQA1wMlqHKeG
F29e9XrvI2XV6X7bYapl0bdS3LWBahawEId88a5fXyweW8tzAo1sM7uRVH6AlRme
eexA7mMRwOJhWic1tVGaNXRnaOdylHfZYNou6yVn1ngue5DJC2eDAE1ldbFllotv
I8r7JuoDrkfED38Gf50H7Wjly8dExtBerlpReQ7VJHNFu7LzTFfXbw/F/DGmytvS
21i3AKrBORIckBSlnJzpelUPLAGHCciGr1/DgLU8D3g/MjaueGf4Vrtrk5LL5ogB
wa2vmELIBejqFfEXjt/S+nnXtK4dMcgrZYJFR4Em5CmbGpLVi/qXNfTpYVBVXrJQ
xWwXNwgsSfgF
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:55 2026 by rpki-client