Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Wlif_vvXFPoF9KyJSX1smnGs74.cer
File: 2Wlif_vvXFPoF9KyJSX1smnGs74.cer (raw, json)
Hash identifier: X3umOWGCV6zFGldaI0na1vHHgQ+tu/IDJ4m0EpnIVQQ=
Subject key identifier: D9:69:62:7F:FB:EF:5C:53:E8:17:D2:B2:25:25:F5:B2:69:C6:B3:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E885D1251CE5449C893B140F77CC22EB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 12:44:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206722
IP: 62.233.40.0/24
IP: 2a12:5cc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:5d:12:51:ce:54:49:c8:93:b1:40:f7:7c:c2:2e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 12:44:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d969627ffbef5c53e817d2b22525f5b269c6b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:e8:28:6e:97:ac:d6:a8:08:d9:de:fb:f0:
ab:60:91:93:90:37:a0:a7:7a:4d:5c:e5:8d:1e:22:
dc:24:39:4e:49:0b:d6:e9:9d:19:1e:a5:67:8c:0b:
b5:6d:04:68:ce:78:18:ec:01:5e:08:1f:a6:d3:84:
b1:c7:36:e1:da:de:3c:5d:01:e7:d7:ae:d2:87:ce:
17:0c:68:53:2e:0b:3d:6b:82:35:62:15:bd:b2:23:
79:93:9f:34:60:42:60:5b:47:f8:35:d6:04:64:31:
ff:21:29:c1:1b:2a:07:93:35:a9:71:ba:e7:43:08:
05:0d:e1:3f:05:a5:5c:3d:2e:29:80:2b:fe:e9:a1:
65:b4:e8:90:4a:65:5f:3f:26:76:60:04:be:92:3f:
15:93:de:33:ae:3c:ee:5a:12:bf:ac:ea:6d:3a:94:
67:19:63:25:9d:46:18:ed:c9:9a:a4:58:d3:93:2c:
d2:0f:0a:7d:12:d8:bd:07:b5:ce:a3:52:22:39:24:
04:d5:54:1e:96:80:6f:38:0d:80:af:2a:28:f7:12:
15:3a:86:1a:bc:83:0d:4b:56:88:41:4e:57:91:03:
6b:0b:bc:2f:89:3e:d3:b6:62:f1:10:9c:bf:06:02:
26:c1:a9:61:2a:b4:85:61:fc:ac:4b:b9:e6:b7:aa:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:62:7F:FB:EF:5C:53:E8:17:D2:B2:25:25:F5:B2:69:C6:B3:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.40.0/24
IPv6:
2a12:5cc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206722
Signature Algorithm: sha256WithRSAEncryption
03:21:88:d1:38:03:4b:a6:69:3b:23:fd:b9:fd:81:32:5c:90:
df:7c:09:d4:88:90:00:95:80:cf:42:f5:51:dc:a3:2d:5c:d3:
08:f7:38:86:cf:59:ea:67:82:c2:08:13:94:7c:09:99:a7:5d:
6e:e2:75:b6:6c:59:2b:67:41:4c:76:a0:7c:e5:25:6a:bc:1a:
6d:53:06:e1:3d:ab:38:11:ff:34:de:7b:bd:05:e2:fe:26:37:
47:6e:db:ca:a3:fe:55:4c:da:25:6f:18:f6:26:2e:4d:7e:8e:
f3:98:cc:4e:a9:d3:3c:b1:0c:01:bd:9a:13:f8:8f:62:9b:a2:
eb:1b:28:47:64:d6:72:ca:75:44:d0:f5:82:03:2d:6f:9c:b4:
c3:bc:dd:76:5d:cb:84:f2:52:13:b3:31:1c:51:b9:4b:93:ad:
2c:55:91:fe:52:d3:f5:48:6e:50:12:86:c0:7e:80:db:91:f1:
9e:62:54:e1:c1:4b:9b:75:00:50:3a:b9:b4:ce:b9:2f:19:bc:
d0:ef:08:ab:ba:7a:04:d3:a3:55:58:e6:f3:64:16:9d:5d:b4:
ca:f1:59:35:23:bc:d4:0a:61:99:ab:b4:54:77:02:df:84:ea:
6c:52:31:93:16:7f:66:6e:17:1d:77:1a:a5:ae:1f:bd:d3:8f:
45:83:45:fd
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ6IXRJRzlRJyJOxQPd8wi6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjAyMTI0NDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTY5NjI3ZmZiZWY1YzUzZTgxN2QyYjIyNTI1ZjViMjY5YzZiM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQHoKG6XrNaoCNne+/CrYJGTkDeg
p3pNXOWNHiLcJDlOSQvW6Z0ZHqVnjAu1bQRozngY7AFeCB+m04Sxxzbh2t48XQHn
167Sh84XDGhTLgs9a4I1YhW9siN5k580YEJgW0f4NdYEZDH/ISnBGyoHkzWpcbrn
QwgFDeE/BaVcPS4pgCv+6aFltOiQSmVfPyZ2YAS+kj8Vk94zrjzuWhK/rOptOpRn
GWMlnUYY7cmapFjTkyzSDwp9Eti9B7XOo1IiOSQE1VQeloBvOA2Aryoo9xIVOoYa
vIMNS1aIQU5XkQNrC7wviT7TtmLxEJy/BgImwalhKrSFYfysS7nmt6qrwQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNlpYn/771xT6BfSsiUl9bJpxrO+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzY3OTRj
ZS0wMzU4LTQyNjQtODAxNS01NTg4Yzg2ODc5MDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNjc5NGNl
LTAzNTgtNDI2NC04MDE1LTU1ODhjODY4NzkwMi8xLzJXbGlmX3Z2WEZQb0Y5S3lK
U1gxc21uR3M3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAPukoMA0EAgACMAcDBQAqElzAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMngjANBgkqhkiG9w0BAQsFAAOCAQEAAyGI0TgDS6Zp
OyP9uf2BMlyQ33wJ1IiQAJWAz0L1UdyjLVzTCPc4hs9Z6meCwggTlHwJmaddbuJ1
tmxZK2dBTHagfOUlarwabVMG4T2rOBH/NN57vQXi/iY3R27byqP+VUzaJW8Y9iYu
TX6O85jMTqnTPLEMAb2aE/iPYpui6xsoR2TWcsp1RND1ggMtb5y0w7zddl3LhPJS
E7MxHFG5S5OtLFWR/lLT9UhuUBKGwH6A25HxnmJU4cFLm3UAUDq5tM65Lxm80O8I
q7p6BNOjVVjm82QWnV20yvFZNSO81Aphmau0VHcC34TqbFIxkxZ/Zm4XHXcapa4f
vdOPRYNF/Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:05 2026 by rpki-client