Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
File: 356EndIcHQG2LXnhP74_rORSIr4.cer (raw, json)
Hash identifier: gbZvBrcaM3Djt55LKTlMlFLBdpZMbR5tFgq8a9uA3i0=
Subject key identifier: DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C463128AEA2B926755E0CA2C901BF24F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 06:15:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204165
IP: 185.102.96.0/22
IP: 185.112.164.0/22
IP: 2a00:d3c0::/32
IP: 2a06:6500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:31:28:ae:a2:b9:26:75:5e:0c:a2:c9:01:bf:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 06:15:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:6e:e1:5f:32:dd:a5:cf:ad:a5:10:8c:1a:
51:b6:a9:5e:08:3d:c3:27:75:00:8c:37:62:13:48:
00:6b:1e:e1:b6:d6:90:c8:b6:e8:c6:8e:da:e1:94:
2c:6e:35:1b:fd:26:40:31:e1:e8:46:c4:33:9b:a9:
c7:db:c3:a6:2c:b5:10:1a:94:88:15:8f:4d:d3:1d:
24:9f:f5:fe:ca:87:5a:26:65:08:12:a5:eb:73:4f:
08:a8:36:db:c7:c6:76:fe:6e:cc:a6:9a:66:13:de:
e9:28:c7:cf:86:73:e1:1c:2e:c9:80:26:8a:16:10:
39:35:e7:95:2e:32:7c:af:ae:cf:97:12:7b:a4:18:
4c:32:d6:e8:95:39:74:30:03:be:df:96:c5:10:7f:
9c:9e:59:aa:18:b3:01:72:31:76:65:fa:fe:ee:ba:
e7:b5:52:db:6c:df:19:9a:00:90:a5:78:af:65:cd:
43:a0:cf:2d:94:32:5d:b4:04:25:5c:69:50:6b:f9:
18:c6:d0:9f:28:9c:20:2b:cb:62:be:fa:70:a5:44:
a4:c2:99:51:af:32:90:a4:69:4d:96:b8:3f:8e:b5:
93:c6:48:1a:35:6b:69:29:db:a8:b8:35:24:51:7a:
05:b4:b8:da:6b:04:c7:cb:20:a9:f9:2c:e1:49:65:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.96.0/22
185.112.164.0/22
IPv6:
2a00:d3c0::/32
2a06:6500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204165
Signature Algorithm: sha256WithRSAEncryption
69:0b:5c:a7:a1:8e:19:ab:1f:c8:3d:93:82:6f:15:00:1a:a5:
c4:f3:a5:8a:39:7b:cf:6e:b6:b7:2b:62:39:8c:3a:30:52:9a:
a6:f6:c1:dc:55:3b:52:ba:3d:36:fa:7e:28:79:52:52:c5:c7:
3e:1d:13:3e:94:f8:54:70:02:65:04:ce:3f:3b:28:0d:f8:10:
59:3e:b1:b4:2c:4c:38:7d:d1:a0:d9:b9:5d:5b:4e:00:0a:cd:
fb:4f:6d:35:ec:44:df:13:ea:1d:11:cb:13:db:30:e8:11:a3:
c6:23:98:45:4c:1c:d6:63:0b:40:13:58:7e:57:6e:1a:fb:0e:
d2:4b:22:96:b9:e8:fc:3a:fc:cd:7c:ca:71:eb:02:bf:fa:e0:
56:75:d2:bb:ff:bc:79:e1:9e:4b:78:f5:cd:6e:85:db:51:b0:
2c:e5:86:e8:2c:55:26:cf:11:43:7a:cf:92:21:b4:ef:6f:34:
7c:c2:a1:88:f5:3b:eb:7a:95:66:ba:24:92:61:a9:7d:b0:05:
60:00:ea:85:25:8a:3e:07:ef:b6:57:b0:5c:3f:da:99:52:d6:
b5:f6:bb:96:30:1a:f1:d9:23:4d:01:2f:58:d1:3c:9b:ba:ef:
fe:89:e4:53:28:e3:c6:4a:ca:79:8b:79:ef:a9:e2:6f:ea:62:
33:42:07:d5
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZxGMSiuorkmdV4MoskBvyT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjEwMDYxNTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjllODQ5ZGQyMWMxZDAxYjYyZDc5ZTEzZmJlM2ZhY2U0NTIyMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Odu4V8y3aXPraUQjBpRtqleCD3D
J3UAjDdiE0gAax7httaQyLboxo7a4ZQsbjUb/SZAMeHoRsQzm6nH28OmLLUQGpSI
FY9N0x0kn/X+yodaJmUIEqXrc08IqDbbx8Z2/m7MpppmE97pKMfPhnPhHC7JgCaK
FhA5NeeVLjJ8r67PlxJ7pBhMMtbolTl0MAO+35bFEH+cnlmqGLMBcjF2Zfr+7rrn
tVLbbN8ZmgCQpXivZc1DoM8tlDJdtAQlXGlQa/kYxtCfKJwgK8tivvpwpUSkwplR
rzKQpGlNlrg/jrWTxkgaNWtpKduouDUkUXoFtLjaawTHyyCp+SzhSWXf/QIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFN+ehJ3SHB0Bti154T++P6zkUiK+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzNiY2Q0
ZS1hNTQxLTRjZTItYWE0Zi03MmQwOTE1MTYxOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvM2JjZDRl
LWE1NDEtNGNlMi1hYTRmLTcyZDA5MTUxNjE5My8xLzM1NkVuZEljSFFHMkxYbmhQ
NzRfck9SU0lyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCuWZgAwQCuXCkMBQEAgACMA4DBQAqANPAAwUD
KgZlADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDHYUwDQYJKoZIhvcNAQELBQAD
ggEBAGkLXKehjhmrH8g9k4JvFQAapcTzpYo5e89utrcrYjmMOjBSmqb2wdxVO1K6
PTb6fih5UlLFxz4dEz6U+FRwAmUEzj87KA34EFk+sbQsTDh90aDZuV1bTgAKzftP
bTXsRN8T6h0RyxPbMOgRo8YjmEVMHNZjC0ATWH5Xbhr7DtJLIpa56Pw6/M18ynHr
Ar/64FZ10rv/vHnhnkt49c1uhdtRsCzlhugsVSbPEUN6z5IhtO9vNHzCoYj1O+t6
lWa6JJJhqX2wBWAA6oUlij4H77ZXsFw/2plS1rX2u5YwGvHZI00BL1jRPJu67/6J
5FMo48ZKynmLee+p4m/qYjNCB9U=
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:40:07 2026 by rpki-client