Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.cer (raw, json)
Hash identifier: 8/I0prbXv0pympv0+55x4Uv+cHrBf1nUi0lgOuUM9gc=
Subject key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA39AA8E6036AD1E8C32E98A4EE6696
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:17:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49573
IP: 185.211.188.0/22
IP: 2a0b:6940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:9a:a8:e6:03:6a:d1:e8:c3:2e:98:a4:ee:66:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:f5:03:31:74:ab:ab:b0:7d:af:1a:28:44:
96:41:22:13:f9:a3:84:e0:e8:29:07:72:d2:0d:5b:
96:fe:65:50:66:ee:a4:96:ac:53:83:32:2a:eb:51:
e9:53:f6:75:2c:55:ff:06:c6:91:20:5f:cf:c2:aa:
60:ae:cf:a4:55:a6:56:c0:0b:3a:3b:5d:56:6d:5c:
86:10:1a:88:4d:63:4d:1a:2f:67:da:99:9d:89:40:
bc:ef:c2:6b:bb:98:fd:d8:81:03:71:eb:15:f2:21:
18:25:e6:37:3d:69:79:c0:5d:3d:20:49:b7:9e:74:
e4:b7:3a:b2:92:34:1d:8b:ca:d7:02:a2:0a:24:d9:
66:54:73:f9:35:3b:cd:1d:b7:4d:7a:33:0f:c4:9b:
ba:da:7d:3d:0b:28:f5:25:5f:26:40:6d:87:ab:fc:
db:d0:72:78:9d:9f:70:a9:a4:60:cd:dd:c6:29:1a:
4c:5e:f1:e7:77:eb:35:ce:c6:30:28:94:2a:3e:fc:
08:8c:46:c2:df:82:1d:94:11:b0:8f:2a:e2:5f:a5:
91:95:b6:ff:d0:42:d9:1f:41:8b:7e:47:64:05:ed:
25:49:cd:c5:6b:89:5a:48:02:13:19:79:22:9f:2c:
56:f3:15:b5:8e:22:4f:cf:f4:77:68:f4:ef:77:9f:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.188.0/22
IPv6:
2a0b:6940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49573
Signature Algorithm: sha256WithRSAEncryption
10:8f:de:0a:4e:aa:52:b1:a2:6d:f6:c7:fe:10:01:36:2b:96:
03:73:5c:d9:8e:2d:77:f9:f5:71:c1:f1:93:c1:16:26:0d:15:
1e:2a:56:92:74:e4:fd:d8:74:b8:1e:2d:a5:2b:a0:41:95:af:
84:7c:cb:52:13:87:a9:09:4e:29:a0:f6:af:f8:3f:01:78:4c:
c9:8c:f4:2a:02:a5:fa:f1:cc:6f:86:17:0e:f5:86:46:05:43:
50:71:dc:97:99:91:13:0f:8f:9e:94:c8:1f:d1:3e:b2:d5:c2:
a5:de:99:c1:f0:90:61:65:f0:94:24:ff:42:1e:d3:d3:ff:44:
e6:a5:30:77:2f:ac:f9:8d:97:f1:58:c4:ba:1c:d5:f7:03:73:
46:a8:f6:9c:f4:24:fd:01:89:5a:07:7a:18:c3:7f:19:65:cc:
b5:3c:7e:56:02:01:78:b5:46:1f:d6:fe:f7:c0:81:84:8c:31:
2b:58:7e:4c:f8:35:87:39:4b:15:e5:95:21:62:5d:44:9d:56:
09:2f:61:1d:d7:a6:a8:55:6d:54:25:99:49:6b:4d:fe:7d:77:
4f:e9:36:d1:71:b8:35:e6:2c:4c:73:c2:01:dc:4c:d6:d9:f2:
e1:ec:3f:7b:33:50:0d:7d:f0:25:e0:1a:5b:68:87:87:57:6f:
ff:36:74:64
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZt7o5qo5gNq0ejDLpik7maWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjQzNGIzMmI5ZmJlM2RlOTViYzc3MWQ2ZDJiM2M3OWFhMDE0YmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hj1AzF0q6uwfa8aKESWQSIT+aOE
4OgpB3LSDVuW/mVQZu6klqxTgzIq61HpU/Z1LFX/BsaRIF/Pwqpgrs+kVaZWwAs6
O11WbVyGEBqITWNNGi9n2pmdiUC878Jru5j92IEDcesV8iEYJeY3PWl5wF09IEm3
nnTktzqykjQdi8rXAqIKJNlmVHP5NTvNHbdNejMPxJu62n09Cyj1JV8mQG2Hq/zb
0HJ4nZ9wqaRgzd3GKRpMXvHnd+s1zsYwKJQqPvwIjEbC34IdlBGwjyriX6WRlbb/
0ELZH0GLfkdkBe0lSc3Fa4laSAITGXkinyxW8xW1jiJPz/R3aPTvd59QKQIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFPtDSzK5++Pelbx3HW0rPHmqAUv1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzI5MDk4
Yi1mMGYyLTRiMTAtYjJlMi0xZmIzZDU1NGZlZDUvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMjkwOThi
LWYwZjItNGIxMC1iMmUyLTFmYjNkNTU0ZmVkNS8xLzEtME5MTXJuNzQ5NlZ2SGNk
YlNzOGVhb0JTX1UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEArnTvDANBAIAAjAHAwUDKgtpQDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMAwaUwDQYJKoZIhvcNAQELBQADggEBABCP3gpOqlKx
om32x/4QATYrlgNzXNmOLXf59XHB8ZPBFiYNFR4qVpJ05P3YdLgeLaUroEGVr4R8
y1ITh6kJTimg9q/4PwF4TMmM9CoCpfrxzG+GFw71hkYFQ1Bx3JeZkRMPj56UyB/R
PrLVwqXemcHwkGFl8JQk/0Ie09P/ROalMHcvrPmNl/FYxLoc1fcDc0ao9pz0JP0B
iVoHehjDfxllzLU8flYCAXi1Rh/W/vfAgYSMMStYfkz4NYc5SxXllSFiXUSdVgkv
YR3XpqhVbVQlmUlrTf59d0/pNtFxuDXmLExzwgHcTNbZ8uHsP3szUA198CXgGlto
h4dXb/82dGQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:50:33 2026 by rpki-client