Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
File: 338uDqUtnkbtcQSFPG1RRlqso2c.cer (raw, json)
Hash identifier: o2lTS11ftxCM0IBCTpOiUKP91vWP+cro4I2PKEuzf4U=
Subject key identifier: DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD480F9061F3DC4017FCD39E4162B310E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Apr 2026 14:31:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199934
IP: 131.222.196.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:80:f9:06:1f:3d:c4:01:7f:cd:39:e4:16:2b:31:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 14:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:52:db:eb:c4:20:e6:7e:b3:9c:68:77:15:
70:7a:dd:a0:f3:d8:d5:62:86:5a:b6:79:62:04:92:
c4:66:f3:fc:83:a5:f3:0d:92:93:d4:10:9f:6f:64:
f3:2c:cb:c5:f2:34:12:09:31:9c:1b:6b:9f:56:bc:
cd:c7:6f:35:20:d3:3d:dc:45:42:58:d4:ae:84:0c:
fc:0d:e8:15:9c:aa:5e:2f:d3:d5:11:5d:42:3b:d7:
e4:75:66:16:e6:b5:3d:53:53:2a:ea:76:48:d4:14:
c2:82:3d:32:30:d7:e4:33:e7:59:e2:c2:a1:6c:b1:
16:42:12:20:10:7f:18:6a:82:1f:6b:41:f3:2d:1f:
00:47:6b:5c:89:e8:c7:8b:05:3a:a0:24:c3:66:e9:
ef:0d:ca:4e:58:79:ee:2d:10:e3:f5:28:9d:59:79:
b8:06:36:00:1d:23:76:86:4e:66:52:ac:06:f4:9e:
10:25:9e:c9:37:33:f8:81:36:a3:49:43:cc:ae:09:
ee:9c:fd:3d:93:7b:df:3d:95:52:a7:5c:53:06:7c:
cb:05:3b:bd:39:3c:0f:a6:79:af:31:f6:72:dc:ab:
bb:22:a4:2e:06:11:64:7f:2b:64:7c:57:08:33:20:
1e:74:67:6f:97:a8:56:7f:1d:fc:14:c7:c5:fa:4f:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.196.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199934
Signature Algorithm: sha256WithRSAEncryption
89:a4:15:64:ae:e2:30:25:b0:f3:ae:8c:7f:4b:c8:3b:4c:12:
d7:b4:32:83:04:f5:dd:dc:59:f9:83:39:6d:bc:1c:e3:f0:a4:
37:26:56:ca:1d:e0:ef:b6:48:f5:a1:f2:7d:70:c3:c2:fc:73:
3e:6f:39:1c:8b:79:7c:5f:15:5a:ec:58:bb:fd:3f:cb:18:7d:
0e:bc:61:e4:62:94:5c:c5:24:e4:5d:ef:6c:37:4a:c2:2c:87:
28:ff:ac:48:52:2b:d9:ba:83:1c:74:8b:7c:31:57:ad:bb:06:
00:42:47:98:df:db:57:ae:95:32:4c:d2:02:ad:13:06:34:34:
2c:db:81:89:bd:9a:a3:f9:33:13:5e:c9:9f:0f:44:61:50:60:
ca:16:35:b5:b0:2d:26:e4:a5:74:0f:36:91:85:ab:c5:8f:2d:
eb:99:23:64:e7:6e:8d:ca:89:f3:50:5e:93:95:d3:4a:4d:36:
e9:5b:22:27:d3:0a:3d:d7:ca:06:ea:35:52:cc:45:eb:58:73:
24:a1:75:a8:ee:52:aa:d7:0e:df:b3:c0:23:c3:59:f8:2c:5b:
be:3a:ca:3b:7f:d5:d7:04:91:6a:bf:51:23:ec:01:29:0c:1f:
48:2b:7e:fb:44:cd:e3:12:67:81:98:81:54:1a:9a:6f:d4:21:
ca:83:3e:8f
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ3UgPkGHz3EAX/NOeQWKzEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDI4MTQzMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjdmMmUwZWE1MmQ5ZTQ2ZWQ3MTA0ODUzYzZkNTE0NjVhYWNhMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08NS2+vEIOZ+s5xodxVwet2g89jV
YoZatnliBJLEZvP8g6XzDZKT1BCfb2TzLMvF8jQSCTGcG2ufVrzNx281INM93EVC
WNSuhAz8DegVnKpeL9PVEV1CO9fkdWYW5rU9U1Mq6nZI1BTCgj0yMNfkM+dZ4sKh
bLEWQhIgEH8YaoIfa0HzLR8AR2tciejHiwU6oCTDZunvDcpOWHnuLRDj9SidWXm4
BjYAHSN2hk5mUqwG9J4QJZ7JNzP4gTajSUPMrgnunP09k3vfPZVSp1xTBnzLBTu9
OTwPpnmvMfZy3Ku7IqQuBhFkfytkfFcIMyAedGdvl6hWfx38FMfF+k/LpwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFN9/Lg6lLZ5G7XEEhTxtUUZarKNnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzg3OWU0
MS05YTFkLTQ5YWItODU0Ny0wNWFkYjA4ZjlhNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvODc5ZTQx
LTlhMWQtNDlhYi04NTQ3LTA1YWRiMDhmOWE2OS8xLzMzOHVEcVV0bmtidGNRU0ZQ
RzFSUmxxc28yYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBg97EMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMM/jANBgkqhkiG9w0BAQsFAAOCAQEAiaQVZK7iMCWw866Mf0vIO0wS17QygwT1
3dxZ+YM5bbwc4/CkNyZWyh3g77ZI9aHyfXDDwvxzPm85HIt5fF8VWuxYu/0/yxh9
Drxh5GKUXMUk5F3vbDdKwiyHKP+sSFIr2bqDHHSLfDFXrbsGAEJHmN/bV66VMkzS
Aq0TBjQ0LNuBib2ao/kzE17Jnw9EYVBgyhY1tbAtJuSldA82kYWrxY8t65kjZOdu
jcqJ81Bek5XTSk026VsiJ9MKPdfKBuo1UsxF61hzJKF1qO5SqtcO37PAI8NZ+Cxb
vjrKO3/V1wSRar9RI+wBKQwfSCt++0TN4xJngZiBVBqab9QhyoM+jw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:07:48 2026 by rpki-client