Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19Bc-33JaQKVbeyjKT5PgnGd-LU.cer
File: 19Bc-33JaQKVbeyjKT5PgnGd-LU.cer (raw, json)
Hash identifier: cel/aLyoMTAXMgBUeeiKy/C3lh1YXEfhizqwjLFMlDg=
Subject key identifier: D7:D0:5C:FB:7D:C9:69:02:95:6D:EC:A3:29:3E:4F:82:71:9D:F8:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11B97C9E49CF1EA25E5171645A7EC0B53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/08d3d6-0e2a-4e7a-b8f4-487130391a16/1/19Bc-33JaQKVbeyjKT5PgnGd-LU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/08d3d6-0e2a-4e7a-b8f4-487130391a16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 12:58:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.201.110.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:97:c9:e4:9c:f1:ea:25:e5:17:16:45:a7:ec:0b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 12:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7d05cfb7dc96902956deca3293e4f82719df8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:8f:98:fb:09:e2:5c:92:aa:e0:76:1c:da:
ea:9e:ed:fb:e4:6a:1a:57:49:28:27:5d:31:8c:20:
3b:32:01:9d:fb:ed:80:f4:7e:91:24:c6:10:63:ec:
96:90:33:46:7d:07:38:6a:c0:00:c2:fb:4f:ab:93:
f6:79:64:30:2b:2c:40:78:f5:38:09:dd:8f:90:26:
12:e8:60:54:38:04:ab:45:83:65:90:da:82:56:ef:
e5:ed:a3:ff:94:cf:a3:76:5d:f7:15:3e:8a:00:73:
bc:44:c0:86:78:ce:03:2b:2a:7d:c6:9f:16:ff:06:
0f:dd:db:68:90:bd:42:9a:d8:7d:22:65:ac:18:cd:
42:c6:66:37:6c:f5:d3:18:a1:34:cc:10:1e:2c:88:
8d:dd:78:ff:3e:3b:0f:dd:48:9c:6f:ff:44:e5:aa:
7c:89:20:ab:a0:23:98:ca:c4:08:cf:90:e0:93:2d:
f0:d6:e7:0c:ed:29:61:d8:9d:8c:0a:c5:8f:ea:e0:
8b:d8:d6:2e:03:77:d4:95:d1:54:f4:33:d2:e5:90:
8d:53:60:9c:b5:b4:83:1b:30:53:ec:e4:42:8c:6b:
e5:d2:fe:55:30:a4:1b:1d:07:1e:07:b7:84:d7:47:
bc:21:98:63:9e:a0:a5:11:f0:ac:63:d2:b1:70:d9:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:5C:FB:7D:C9:69:02:95:6D:EC:A3:29:3E:4F:82:71:9D:F8:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08d3d6-0e2a-4e7a-b8f4-487130391a16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08d3d6-0e2a-4e7a-b8f4-487130391a16/1/19Bc-33JaQKVbeyjKT5PgnGd-LU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:57:b8:14:39:f7:7e:e0:52:6f:73:1e:c6:59:ab:51:64:a6:
93:51:55:51:54:9b:e3:67:9f:57:29:85:de:58:3b:46:96:db:
e3:9f:78:5d:51:61:f5:88:73:f9:ce:23:1b:ce:fc:26:33:ad:
fc:54:c1:b9:73:90:cb:81:18:b1:38:33:90:72:c6:aa:55:10:
3b:60:3d:d5:51:69:ec:df:49:f5:b2:9a:0d:11:6c:0d:9e:ae:
ea:13:8b:f2:64:16:be:95:00:4d:d6:0e:6b:08:80:ac:aa:27:
16:1b:58:71:b0:39:96:f0:85:51:74:0f:81:4e:ce:5e:a8:e1:
ca:f4:c3:f2:97:6c:55:89:f0:32:24:ac:5d:23:26:d8:89:ed:
01:95:26:c6:e1:b0:b2:db:de:20:8a:11:7f:de:da:34:a1:9b:
83:fc:fd:23:ad:69:cc:fd:6a:de:68:8b:60:47:b8:bc:ef:6c:
5a:19:99:95:65:47:d7:0f:c8:85:65:5a:59:23:94:1c:b8:45:
82:b8:12:87:4a:27:f7:40:c3:06:b9:46:d4:8f:16:31:71:bc:
ca:4a:b9:e9:ad:7a:1d:e9:42:09:a0:7a:da:8f:ad:af:6f:51:
1a:b7:87:65:e3:b1:36:aa:86:e6:43:df:af:07:8d:6b:b8:79:
78:82:31:ab
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaEbl8nknPHqJeUXFkWn7AtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDA4MTI1ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2QwNWNmYjdkYzk2OTAyOTU2ZGVjYTMyOTNlNGY4MjcxOWRmOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1SPmPsJ4lySquB2HNrqnu375Goa
V0koJ10xjCA7MgGd++2A9H6RJMYQY+yWkDNGfQc4asAAwvtPq5P2eWQwKyxAePU4
Cd2PkCYS6GBUOASrRYNlkNqCVu/l7aP/lM+jdl33FT6KAHO8RMCGeM4DKyp9xp8W
/wYP3dtokL1Cmth9ImWsGM1CxmY3bPXTGKE0zBAeLIiN3Xj/PjsP3Uicb/9E5ap8
iSCroCOYysQIz5Dgky3w1ucM7Slh2J2MCsWP6uCL2NYuA3fUldFU9DPS5ZCNU2Cc
tbSDGzBT7ORCjGvl0v5VMKQbHQceB7eE10e8IZhjnqClEfCsY9KxcNlAvwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNfQXPt9yWkClW3soyk+T4Jxnfi1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzA4ZDNk
Ni0wZTJhLTRlN2EtYjhmNC00ODcxMzAzOTFhMTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvMDhkM2Q2
LTBlMmEtNGU3YS1iOGY0LTQ4NzEzMDM5MWExNi8xLzE5QmMtMzNKYVFLVmJleWpL
VDVQZ25HZC1MVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwcluMA0GCSqGSIb3DQEBCwUAA4IBAQCOV7gU
Ofd+4FJvcx7GWatRZKaTUVVRVJvjZ59XKYXeWDtGltvjn3hdUWH1iHP5ziMbzvwm
M638VMG5c5DLgRixODOQcsaqVRA7YD3VUWns30n1spoNEWwNnq7qE4vyZBa+lQBN
1g5rCICsqicWG1hxsDmW8IVRdA+BTs5eqOHK9MPyl2xVifAyJKxdIybYie0BlSbG
4bCy294gihF/3to0oZuD/P0jrWnM/WreaItgR7i872xaGZmVZUfXD8iFZVpZI5Qc
uEWCuBKHSif3QMMGuUbUjxYxcbzKSrnprXod6UIJoHraj62vb1Eat4dl47E2qobm
Q9+vB41ruHl4gjGr
-----END CERTIFICATE-----
Generated at Wed Nov 11 19:19:39 2026 by rpki-client