Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.cer (raw, json)
Hash identifier: g1/jMItRg2N53U7KdOVP0wQBV7hMicIGN5kBuAtCNr0=
Subject key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC8E545B7A8E9262E2B026A8D2867AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:19:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206291
IP: 185.90.150.0/23
IP: 185.188.44.0/22
IP: 2a0b:b780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:e5:45:b7:a8:e9:26:2e:2b:02:6a:8d:28:67:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:a8:d9:1d:63:c9:e2:9b:a8:10:8d:c5:22:
b8:44:7e:a4:0c:54:a0:ec:dd:ae:ad:34:5d:3c:98:
87:6c:32:48:69:f8:6a:7e:b9:d8:6e:ca:58:5d:c1:
a4:7c:40:46:f4:a9:a1:58:66:39:af:e8:dc:50:0a:
c1:6a:3f:26:85:f3:a2:c0:aa:5f:5f:ee:cc:09:08:
e1:e3:96:44:f4:c7:56:e2:07:0a:18:97:62:ba:03:
17:f9:46:e4:d1:fd:84:8c:5e:6f:d0:9f:d5:d3:d6:
a0:52:1f:b6:ef:b5:fa:c4:be:30:ff:3a:6d:2f:25:
ee:bf:45:cc:b8:55:85:1e:3b:42:b3:ba:42:5d:0a:
bb:2c:dc:8a:af:e0:2b:86:4c:23:ee:54:ee:50:fc:
2b:f6:99:96:6b:c6:ec:f1:5e:04:b2:3c:34:c3:27:
fd:90:24:38:6f:d3:3c:bb:7f:18:4b:68:35:fa:33:
40:2c:65:96:73:18:4d:5f:f8:63:5c:db:83:0b:24:
85:4f:62:87:e3:bc:3a:ed:dc:0f:04:cf:49:b8:ca:
27:08:1d:cb:c8:31:03:d0:6f:1d:d1:01:f3:d9:ca:
db:1f:76:fb:6c:3c:79:4c:91:b8:d5:f9:c7:9e:0f:
d5:5a:28:86:26:20:e8:c2:0a:46:34:46:ec:a6:2b:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.150.0/23
185.188.44.0/22
IPv6:
2a0b:b780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206291
Signature Algorithm: sha256WithRSAEncryption
0b:3a:76:cc:ff:93:56:6b:3d:17:8e:c0:8f:fa:27:d9:0e:f0:
1f:fd:90:1d:a0:fb:1d:30:8d:b2:ac:35:a9:9b:8d:dc:49:da:
15:d5:00:bf:13:07:d9:2f:47:dd:0f:69:ab:7e:c3:73:b8:9b:
7b:ee:0d:24:6b:6a:ed:21:33:91:8a:45:21:11:e0:0b:55:b1:
66:26:b8:f1:3e:aa:a7:9a:85:0b:4b:8c:51:66:40:3d:25:7d:
cb:c8:8a:e1:ab:c5:2e:49:5d:3f:0a:5d:86:2b:45:64:d5:b5:
ab:7b:f6:51:3d:5c:01:42:9d:55:4e:46:2b:da:d4:1a:07:09:
90:ab:5f:29:aa:fd:77:81:f4:98:4c:33:d4:56:67:5c:e7:20:
df:26:fc:fb:77:2e:b0:0b:1a:2f:cc:85:0e:b9:bd:cc:1c:60:
a5:ec:98:43:a0:21:5c:f0:6e:96:cb:f7:1d:76:2c:4a:ac:60:
64:6e:e4:67:bc:07:87:3d:f7:c8:96:56:21:ff:25:ce:5c:6d:
e3:83:56:8d:ab:de:05:4b:1a:da:0c:c4:5c:04:97:d1:c2:80:
01:92:d7:e9:ed:bc:80:67:c8:3d:a5:c9:22:9e:5d:8a:d0:90:
0e:01:19:80:ab:75:06:36:89:f2:38:a3:5c:e5:50:3a:a4:5e:
c8:6a:c6:a0
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZt6yOVFt6jpJi4rAmqNKGerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDYxYTVmYTM3ZTVjZDEwMTUwODUyNjNlYzAyOWUxYWZmNzkzOGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01+o2R1jyeKbqBCNxSK4RH6kDFSg
7N2urTRdPJiHbDJIafhqfrnYbspYXcGkfEBG9KmhWGY5r+jcUArBaj8mhfOiwKpf
X+7MCQjh45ZE9MdW4gcKGJdiugMX+Ubk0f2EjF5v0J/V09agUh+277X6xL4w/zpt
LyXuv0XMuFWFHjtCs7pCXQq7LNyKr+Arhkwj7lTuUPwr9pmWa8bs8V4Esjw0wyf9
kCQ4b9M8u38YS2g1+jNALGWWcxhNX/hjXNuDCySFT2KH47w67dwPBM9JuMonCB3L
yDED0G8d0QHz2crbH3b7bDx5TJG41fnHng/VWiiGJiDowgpGNEbspisJRwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFPBhpfo35c0QFQhSY+wCnhr/eTjXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2M3OTA5
NS04YzJiLTQyYTMtOTQ2Zi0xOGIxMjhjOGI0ODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYzc5MDk1
LThjMmItNDJhMy05NDZmLTE4YjEyOGM4YjQ4Ni8xLzhHR2wtamZselJBVkNGSmo3
QUtlR3Y5NU9OYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBuVqWAwQCubwsMA0EAgACMAcDBQMqC7eAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMl0zANBgkqhkiG9w0BAQsFAAOCAQEACzp2
zP+TVms9F47Aj/on2Q7wH/2QHaD7HTCNsqw1qZuN3EnaFdUAvxMH2S9H3Q9pq37D
c7ibe+4NJGtq7SEzkYpFIRHgC1WxZia48T6qp5qFC0uMUWZAPSV9y8iK4avFLkld
PwpdhitFZNW1q3v2UT1cAUKdVU5GK9rUGgcJkKtfKar9d4H0mEwz1FZnXOcg3yb8
+3cusAsaL8yFDrm9zBxgpeyYQ6AhXPBulsv3HXYsSqxgZG7kZ7wHhz33yJZWIf8l
zlxt44NWjaveBUsa2gzEXASX0cKAAZLX6e28gGfIPaXJIp5ditCQDgEZgKt1BjaJ
8jijXOVQOqReyGrGoA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:41:26 2026 by rpki-client