Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8-IcgBZV9z9Fi24t_cfOfX7ydvA.cer
File: 8-IcgBZV9z9Fi24t_cfOfX7ydvA.cer (raw, json)
Hash identifier: 6HVdITUuDQXCSuwFd0i/wG0wub181j2S5rtDwoxe6oY=
Subject key identifier: F3:E2:1C:80:16:55:F7:3F:45:8B:6E:2D:FD:C7:CE:7D:7E:F2:76:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBF64DD4CF7FE273429A426FCB4DE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205282
IP: 2.58.60.0/22
IP: 5.181.161.0/24
IP: 91.207.208.0/24
IP: 194.48.203.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:f6:4d:d4:cf:7f:e2:73:42:9a:42:6f:cb:4d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3e21c801655f73f458b6e2dfdc7ce7d7ef276f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:5b:bb:e7:7b:62:18:4f:6f:e5:38:74:78:
58:0a:11:14:84:60:a1:a7:fb:e3:4a:90:33:f7:3a:
6b:38:c0:41:95:ec:d1:e9:36:e1:d7:71:20:55:75:
ef:ba:94:53:11:42:b1:ee:89:e5:eb:24:45:fe:df:
28:70:dc:b2:1c:d2:ff:34:d5:84:1d:fb:08:d6:a8:
ce:63:94:9c:ad:01:46:07:0c:4d:97:54:28:98:37:
f0:39:4d:03:38:17:8c:c5:51:dc:4c:6b:95:4d:42:
e9:77:3e:b2:cd:a0:8c:96:83:4b:2a:ce:ec:61:c4:
81:c1:06:18:aa:2e:ca:0f:f5:07:ff:a2:14:24:04:
05:f9:19:41:70:26:93:18:12:c5:9f:d8:e5:ca:39:
e2:3d:7b:96:82:4a:93:b9:64:22:3c:c3:7b:94:f0:
91:29:ea:11:2f:87:d7:29:34:df:40:35:07:2b:09:
dc:a0:f8:36:7a:d1:01:e4:ec:fd:8c:ea:dd:a2:77:
3e:2f:3d:35:37:7b:02:c2:5a:ce:cf:69:c0:98:f8:
cc:a1:4f:14:96:09:7d:84:7f:5d:ab:2c:6f:bb:6c:
a6:fb:b4:7d:40:1d:32:62:1f:0c:e1:24:c7:1e:38:
d1:f7:04:50:13:12:c1:3d:8c:28:3c:58:38:59:aa:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E2:1C:80:16:55:F7:3F:45:8B:6E:2D:FD:C7:CE:7D:7E:F2:76:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.60.0/22
5.181.161.0/24
91.207.208.0/24
194.48.203.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205282
Signature Algorithm: sha256WithRSAEncryption
12:c0:7b:4d:99:07:19:ea:be:df:d7:f5:f8:e7:f5:04:06:4e:
a9:a2:44:36:b1:db:76:cc:10:28:24:08:b5:c5:da:12:dc:2f:
be:8f:d5:d6:d7:5b:dd:bb:ea:72:bc:10:e3:06:11:60:7a:2b:
c8:cd:42:49:0e:9b:4b:74:2d:ad:72:c3:df:f8:86:22:d7:9b:
6c:8b:52:a2:f6:f4:22:f0:f3:31:52:20:1d:d7:02:a8:e4:e5:
db:43:08:5f:94:b3:9e:86:b9:09:72:2b:fc:a6:79:b2:b9:7c:
f9:2a:6d:5f:ef:00:af:82:59:7d:08:5f:f9:be:02:ab:d6:3c:
1f:b4:4c:5b:99:dc:07:65:1f:da:5c:86:6b:45:60:2f:df:82:
3f:ca:3c:5a:9d:16:16:43:0c:b3:d4:57:dd:11:ad:52:60:fb:
59:40:89:4d:3a:79:47:b4:49:37:72:55:52:a1:eb:00:7f:12:
c3:19:4f:33:01:e4:95:15:12:c1:cf:49:17:f2:a1:9e:be:7a:
d5:cc:c2:80:9b:35:ac:9a:2b:97:70:8d:b2:32:c4:7a:7e:2f:
21:9b:8c:a6:e8:2b:b5:53:20:c5:b5:7b:eb:83:c0:33:9c:b3:
f9:8d:07:97:f3:93:de:77:e5:4d:be:e8:f6:46:2d:11:7d:f3:
f6:38:7d:09
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZ8Y+/ZN1M9/4nNCmkJvy03mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2UyMWM4MDE2NTVmNzNmNDU4YjZlMmRmZGM3Y2U3ZDdlZjI3NmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E1bu+d7YhhPb+U4dHhYChEUhGCh
p/vjSpAz9zprOMBBlezR6Tbh13EgVXXvupRTEUKx7onl6yRF/t8ocNyyHNL/NNWE
HfsI1qjOY5ScrQFGBwxNl1QomDfwOU0DOBeMxVHcTGuVTULpdz6yzaCMloNLKs7s
YcSBwQYYqi7KD/UH/6IUJAQF+RlBcCaTGBLFn9jlyjniPXuWgkqTuWQiPMN7lPCR
KeoRL4fXKTTfQDUHKwncoPg2etEB5Oz9jOrdonc+Lz01N3sCwlrOz2nAmPjMoU8U
lgl9hH9dqyxvu2ym+7R9QB0yYh8M4STHHjjR9wRQExLBPYwoPFg4WapVGQIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFPPiHIAWVfc/RYtuLf3Hzn1+8nbwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwL2RkNGNj
Ni0wYzI1LTQ0ODgtOGM4Zi03NzkwMmQ5NjEzZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvZGQ0Y2M2
LTBjMjUtNDQ4OC04YzhmLTc3OTAyZDk2MTNlYS8xLzgtSWNnQlpWOXo5RmkyNHRf
Y2ZPZlg3eWR2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQCAjo8AwQABbWhAwQAW8/QAwQAwjDLMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwMh4jANBgkqhkiG9w0BAQsFAAOCAQEAEsB7TZkH
Geq+39f1+Of1BAZOqaJENrHbdswQKCQItcXaEtwvvo/V1tdb3bvqcrwQ4wYRYHor
yM1CSQ6bS3QtrXLD3/iGItebbItSovb0IvDzMVIgHdcCqOTl20MIX5Sznoa5CXIr
/KZ5srl8+SptX+8Ar4JZfQhf+b4Cq9Y8H7RMW5ncB2Uf2lyGa0VgL9+CP8o8Wp0W
FkMMs9RX3RGtUmD7WUCJTTp5R7RJN3JVUqHrAH8SwxlPMwHklRUSwc9JF/Khnr56
1czCgJs1rJorl3CNsjLEen4vIZuMpugrtVMgxbV764PAM5yz+Y0Hl/OT3nflTb7o
9kYtEX3z9jh9CQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:11 2026 by rpki-client